{"report_id":"4e8e6fe3-533d-4fbf-b595-84301d198040","version":0,"status":"done","tags":[],"date":"2026-10-05T23:58:11Z","url":{"schema":"http","addr":"gbwfwg.com/","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"gbwfwg.com/m/index","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"title":"ᵀ ᴱ ᴹ ᵁ","dom":{"size":66584,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (62241)","md5":"fd23aeb9f79dee4ee80e13a6fd0d2dd8","sha1":"d6b5bb2ebd3a070f1306ac049641d693874ce560","sha256":"9054f6a1fad606409ce687b1965f8f3e7e0c32424524c221ad87a1b1bd18ce5b","sha512":"a50d0e03bbe3188246495a0d933e060055d7bdd11266ebeb8bdbe2d1837d458395a961164ecf367295e7572fd32c8e471c82226da4fe7c0390945e5cba281a20","ssdeep":"1536:97e0WIIIIIIIYJ2NTNNRzVlYycr7NCDzC0klV25MAc7B8DnggzmRD8YC/WlV5dxB:97eBIIIIIIIon","tlshash":"6053df20a53318ab4173c8d4e0613f4970e3fb8bc2989285f67c4b1a5fdbd74792a6d9","dom_hash":"domhash56ff585ccbf254a2ef4673d229c0fd77","first_seen":"2026-10-05T23:58:30.131205Z","last_seen":"2026-10-05T23:58:30.131205Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gbwfwg.com/","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-09T23:58:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fghjhreryjh.com","ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":112,"request_count":28,"received_data":7150545,"sent_data":16383,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"gbwfwg.com","ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-09-23","domain_rank":0,"first_seen":"2026-10-05T23:58:18.701298Z","last_seen":"2026-10-05T23:58:18.701298Z","alert_count":36,"request_count":36,"received_data":1649117,"sent_data":17657,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"SockJS:1.6.1","description":"SockJS is a browser-based JavaScript library that offers a WebSocket-like communication interface for applications.","website":"https://github.com/sockjs/sockjs-client","common_platform_enumeration":"","icon":"SockJS.png","categories":["JavaScript libraries"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-10-04T23:38:02.393941Z","alert_count":0,"request_count":16,"received_data":1874611,"sent_data":7847,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gbwfwg.com/lib/flexible.js","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2481028b2f8ae3f9f9c15d0899705aab","sha1":"175d394457b861cf64b9347d243fe3f179048faf","sha256":"5fc76e812ff59a1e0a2faecfb1db22cfa4af69efafef2f3bde03494d543acc1e","sha512":"7b48ed3af9b9330ccbff7a8a9b7dbb1eeadc4356acc22f68a821d435b8cd85e82bc453d489355ee0679cd5ef98feda4c0be8599a0568c1a20bd6d8901669e5f9","ssdeep":"","tlshash":"fb81322806e722361e2330348fbf210539728067055ace447d5ee79e6fe4a654ef6bf5","size":4071,"data":"","first_seen":"2023-03-08T08:46:29Z","last_seen":"2026-10-05T23:58:32.148892Z","times_seen":293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c019be63e713ce6f2aa221c0df8fa0cb","sha1":"e5471888945144f233714d470959059c010eb667","sha256":"87e6aba4bd25be4196ad7f269a62de823242abe105df538f218d4e6e268f74ce","sha512":"6ca3ae5fb17dc20a2c27d4008454feb7cefc626bf104252354c1abd0977f73a315001d94293a7d4379ecfda6ba21d3f49a992f243a6f9249c935195527d407be","ssdeep":"384:BPdUYakDlUGQrDQxMQ4rJaT30WCxQI1cg:DUYzhUGmUMQUX3","tlshash":"cea2b7c6f56270270a9260e5183f1107a33f241d648d855df2d6e8ee2ebdd8e91a3f39","size":22805,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T23:58:32.112193Z","times_seen":1275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs//Swiper/4.5.1/js/swiper.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ac19265b38d14235141d184bca54d9a","sha1":"c725eb5a33d093e331e25c3a5ef1272b0f1f648c","sha256":"e2c1132a1877692ca2e8d46203eaae9cf6936b0a9230341c6bfc4b5aedbb1e0e","sha512":"6476ae51cfef0724ba254cff1e5d68f2cda477840954b01b933f1c9608ed6ca5094fe006d5cef7e5a32d54b25fb4a418a3e2c3eb642bcafa0d6bebaacbeac21d","ssdeep":"1536:O/pPCitsufJthaK85kqzOAkRlojU6tU8r5MhkhGllpcXvH7WcWUKcOqylFE8BtOa:+JthJkOAkaRaaGl4fH7WcWUKcOqjtYD","tlshash":"2bc31849b35071e551e72256539ed601a3b66845b90ac0a831b2d8d7acbce8c03bfffd","size":128745,"data":"","first_seen":"2023-03-07T12:58:52Z","last_seen":"2026-10-05T23:58:32.129399Z","times_seen":2606,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/lib/jquery-1.11.2.min.js","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6355f3cc28006e33bad2e765cde30e0d","sha1":"909cd6318d5047f3c8e83528253b256981394414","sha256":"39eed2d24faf4985b922b64d078f106edba6b3b84d5385e483a5c7bd69201da7","sha512":"b22d3868a7b311f82bb149f8afccee03c68dcd5e7152a061b8e18d97aef794b106dd1cc081d49f4d638193924ffa5885239cf67152fc339ff0cf3cd1d194d175","ssdeep":"1536:0Hg1kz+hAmcGmVFnlkFybx+amELolY+30k1dml+BQZX6YPnrCtn8JkDnlwMxVW2:0HDdc2F3c2G7mIW2","tlshash":"13930add76c2b06387a720b9506f550bf276599e280c4440f268e8fabc7ca49a137f7d","size":96382,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T23:58:32.163827Z","times_seen":1995,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-router/3.0.7/vue-router.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32e2eb91e6ed0512057b2ad1e6d1b242","sha1":"27809df1b99a4b81b6b82ba2985cdd4b1c8bebb6","sha256":"e8707a396dd2f8d74eaaeb2f784074a24d7a71cbe15dcc70297f726b31c160d5","sha512":"0ab7b445b586dd27a0aeb72396350982783129c9ba028ba1db847c9d2acc0de9c90c3c9636e76a21553fedf81031220f3676ea64bf7336644c04da33d744563d","ssdeep":"384:UUcnX3xpR5tumD+EaKGZRpqB1UdEPQFWmexTMCJ:7E3jXtuW+qGZK1UCP5mqMk","tlshash":"01b2c7ddb581b03547e326a0412f250bf27b358db44e8498f269e4d52cba85ec42bf79","size":24822,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T23:58:32.096912Z","times_seen":1297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.7/locale/en.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"05c65efd7ab47381eac414b929c80d11","sha1":"c0fbfd65eaf0a9a92dedbc93b1b1d7d8c55f8094","sha256":"d6361676df25451bfb74c691c9304ba709919cd4dd03d3c7bd5f999af7a6c597","sha512":"3ca05b333100d916cc783022dcc5b5d0210351e5ff8f184bf7e6450f63f919dc6c28e330d2f49de7a452a7cbee975a68872a3e2d3cbeb99e255e2827b59674ad","ssdeep":"","tlshash":"0a71fcff49b5406a4135dc19659f6407616180ab4e28bc397fad53a82f8cc1ca0feed5","size":3516,"data":"","first_seen":"2023-12-31T12:39:44Z","last_seen":"2026-10-05T23:58:32.104981Z","times_seen":425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/Swiper/8.3.1/swiper-bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"38ef180eaf570243775427085e2ea834","sha1":"e0d97d1c702c90dbb22a6294b3c1e4126ba1662a","sha256":"b624e1e378abe009ef0de69a698b0a3e734af47efcdbd6816d5fcb8fc64c8bfe","sha512":"9da1101bbe0870e2d0e8afc1d4f9a121c6788b7604d855ecdb39bad37135437b216eba27f8f9982e0e38feafb1032983fd1bec919d87f25d506bb239a842e5ae","ssdeep":"3072:NJvgjudkXhYnafpoy9v8cIWyUaV4y+oGeJhyEfrNK/MxF:NJvgidkXhYnafpl9v8cIWybV4y+oGMAQ","tlshash":"c0e3f8896360b1a552e3268b93a9c611e3b51400b409c4e871bd4c9b6d7ed9813ffffe","size":143070,"data":"","first_seen":"2023-03-07T01:27:55Z","last_seen":"2026-10-05T23:58:32.139924Z","times_seen":505,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"0d75a045ada91e8b297dc25ca5080ebc","sha1":"5459c8d31303d82ae64e465707ea4c0b774a26f7","sha256":"3bbcd117f9c743158fa2c3e85837cada012be7f205946287fe8dd509c7a317ba","sha512":"7a44155e399fa84ca4f908072115d470b687598d9d35ccde28025515a3f312cc1bbcdc6bc8a464e278f28d3563ade49f32a6d0099033870d1bd61dad4beeede5","ssdeep":"","tlshash":"a3a002a363459b385cdd3ba65470cb9a3c385121bc16b445450d1920c5a8ec2445bd94","size":67,"data":"","first_seen":"2023-03-07T18:08:41Z","last_seen":"2026-10-05T23:58:32.168144Z","times_seen":278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/js/chunk-vendors.0959c18b.js","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"59718baba413ffce8af627b8a687fb33","sha1":"7ad82303fcd29efcdad03df36319183f8787d4c8","sha256":"95732ae511ea64b6041ef117de0b516f6523a1d657c809f3117a0c9fc42fdf0c","sha512":"9a8210c594b1ff6caec54315030f045a86dcc4d2fdc681a767730e524dac8240f6038b6ce225bce1b0415f7ebc802d7fc47102fb86069fc6baf6d037790e8dad","ssdeep":"768:WscXuLZN8ZzldBKOpNtWVw5iVJonYrQBOJJB2GfJbrCGVuZgdpGd+cH0iIWRiAVo:5cXub8Zzl7bD/YowQKL4+cHdIziAAg5l","tlshash":"4533c788f2e6f074479761a4402f600bf279ad55744e88a8f225e4d1bdb8dce847bf38","size":51996,"data":"","first_seen":"2024-06-11T23:26:00Z","last_seen":"2026-10-05T23:58:32.154894Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/core-js/2.6.9/core.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"622c4c9d5dc4b1ee29a2eb908186ec88","sha1":"491753a3f979f7d180af11e1929ffff85e30f921","sha256":"794d1c7ab27be77d366e0497e641488e50f5ae6581b4db51cc08de1e142eb47a","sha512":"2b2485006e3a36dbae0d0d8488ab63ae6085c34d5a6f72c3558c52b492294c157f67ce47c1c3b89498db9ff72f748485fedc04a881f1877f903cfa0df1c8be8e","ssdeep":"1536:PLFpwkiSucuVH8MBfaQQ979S17LMgRCSRjMbEjeb6Gt6UQ:PLbw1Sucu3Qw8gc3gk6Gt61","tlshash":"1f93618cbec6f06642636675413f900bb27a1a86745f89d0e12ed1e4bc7c98f413be6d","size":92050,"data":"","first_seen":"2023-04-06T20:58:39Z","last_seen":"2026-10-06T08:21:23.007559Z","times_seen":1654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/axios/0.19.0-beta.1/axios.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"334149adf44476f28bfbf16c7b0382c2","sha1":"ad2ea246ebb53ed655ab50d44b33d4d6f942387d","sha256":"6d2c0a450a04b5d1492f77d7e512fe6af26e95c2feac596825f45e71b9ffa4d6","sha512":"0f9d66a68e400a2499cc1dbd79331892e9e62e278d8b4784e354b7a281c91fcc1401eedb0857ff6911d842ea853d39081b459fbdc0e30d927ee93b5ba1ecdbea","ssdeep":"384:hpI8XyWPbWeAExXqgxH7RqzGbcQdVzxbUm6HwT9eei:LbXdyGbcczx/6QT9e1","tlshash":"f25285ce7861b0a757e320f0805f4a0fb2b6552a754d84a0f660e9f66db542e8733f5c","size":13638,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T23:58:32.095085Z","times_seen":1301,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.7/index.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc6dfa2d326274455390160572856dce","sha1":"efd937a0eaa2f39487b612814c98c37a752c9a2a","sha256":"bc09e54472585388c0ef0b58e5818a448f03b5671df4120da425cd6cac70fb79","sha512":"d42e99eb85cefb310ba46cf4a5fd9514f6804d4fa95f312178b0b54723db60950908465b257cd7160e2a67e56b1b2855bada2e67f56c992f53fad520bb7a73f6","ssdeep":"6144:jlrTktiHOvAeyErnMb/KeG4tVhkiIAUYxRtS8islZST79eA:jNktiHOvAeyErnMb/0G1TUARQ79eA","tlshash":"e1c41a8d72c5b53147a36070103f250bb33b299ca40980dcb679d9ea6dbd909626ffbd","size":590640,"data":"","first_seen":"2023-03-11T09:11:20Z","last_seen":"2026-10-05T23:58:32.113657Z","times_seen":655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/js-cookie/2.2.1/js.cookie.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa93e8894edb6245ab03883633b12b6e","sha1":"e3ba4c7d1a8876090756fd31715b4f6af6fd649e","sha256":"3fc8d8f8c09ee97d9c8cd4a6178ad0bd921a9cbe55c14513e0c06738c9dc8d15","sha512":"263612833aa8f4ad08798184b25311604f1a3bdb6aecacb71103661159007ba0a9d7803094930b3276f47e980492bdd8c49f208508ab88ebd9c0875166278621","ssdeep":"","tlshash":"0c8124b0bb8d35ab0e0e21145b1f60cd927ce43a085949f6ec9df1321468c2e977ad6e","size":3883,"data":"","first_seen":"2023-03-07T12:01:36Z","last_seen":"2026-10-06T05:32:24.111693Z","times_seen":3696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vant/2.12.44/vant.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd964aefdd330a73c62c045d6b31e66c","sha1":"f7021d4ccab3188fc2c0f7ad8c51f88cda28172e","sha256":"4e685208d134a61fdf4e8fa18b054f5ca2b522813f9bf591db4ac4b42ef16598","sha512":"b9c22baff22e7711c36f2091e37825b9e865ce1d2ec8476f697712c62c51e4604a961e8182950a67cedd060d7ebb720784fecb4f4b46f8d98164badd580dac0c","ssdeep":"3072:RuhM/vLqNdJXyzFg0xnnx7XJ2pviRq4jtSr1GM6TyrfXc556SdryZMyR7:MhM/GU6KRBx+rRSPyR","tlshash":"be44e78ab1c5b425079770b5403f110ab237298cb81a84dcba79e4e66d7ca5ca13ff7d","size":278598,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T23:58:32.119325Z","times_seen":248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/sockjs-client/1.6.1/sockjs.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b559a1d228cfb321370c76a97a07eee","sha1":"1b9442398a5cfba8a47a67ab13275a47d9309f43","sha256":"1e0f37d073666196b0848fd7d80d525268d5adf47ea1ec459632f05bbf8e1f54","sha512":"d50be313b06da2d42392af0fc4b785e8fe3a804a41457bac9332158231697a4cc5545e328d182b42f4c6d4c4ce277c9082f4ed78a01c3bb0d2648f76faeff267","ssdeep":"768:RiVBhwcy553dpJRDAtS7mB/xbUXIMilLqdY6LQQBGzq6nTXQmp2kf1:YVU51hRDqUibUX84HL3wzq6TPX1","tlshash":"1043e7c5f46234e123e7a27882bf11072376953a240d85a876a8ccf9897d99c533bf79","size":57411,"data":"","first_seen":"2023-03-12T21:34:04Z","last_seen":"2026-10-05T23:58:32.087436Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/js/app.2623df1f.js","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"10b4ec9cbc61354823d2a8d4c3cfb5c2","sha1":"0629738428e24e9cf3ea2406fc78c857b58c925f","sha256":"17f7ffe5f275d7405188d4f8da37d4cba9a9cbd3a25918b758a6f44f6eb9f669","sha512":"0692191d46f3aae63e35e65805ec5a13cea539e3d3d32f0e0493ccec8fffadf260480aa8aa4d4bb0fc2620e6d90afb8f08fe5ce0a68389369e814b4802624219","ssdeep":"12288:w+Fn64hZIflEQrEf4oY0q25hR5uZW2xp2GFgA2A45rLoEkYzEPAyB2oaPG9jV3Ny:ffhR5Q9XC3","tlshash":"02456bd822eef7b511429545010f3b3c42190fbaf156d2916c76a98839edff48237eba","size":1201828,"data":"","first_seen":"2026-10-05T23:58:30.266073Z","last_seen":"2026-10-05T23:58:32.167436Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue/2.6.10/vue.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"17e942ea0854bd9dce2070bae6826937","sha1":"434cdec1669f2c6c7406297a72120936bc56ed52","sha256":"72194d152571dd375c4365e5c3b4af9db2c06af0102ced18fcb062597d38be26","sha512":"3f0439fa3817c71a6b34673cd32707137b29823e93b8389e1deff24e46c427e5396a897b753ba98bfe156f01c7ce54155bbed56f418b388b22622807802e6f72","ssdeep":"1536:1UXY7qLtpHt2Pqe1mZ8I6H82RaLiMBlo2VV2B/S/g:MYeJpN2yefjMBlPV00/g","tlshash":"529308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","size":93675,"data":"","first_seen":"2023-03-07T01:18:07Z","last_seen":"2026-10-06T08:30:39.17167Z","times_seen":4812,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vuex/3.1.1/vuex.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c66594705de51675f08e3b83b9b9b38c","sha1":"40fa40f722043957a56324174ec6f80389391971","sha256":"e973901e74ff65888bbe2e58b95cfb957d5db316bb185a106f543d99176d1d65","sha512":"3cb0d6b77ac49d3c6c5c5740efa2fd9e3e0c79158c88a9d4f0b709f4713a38a7b72109a2b4c636377c783effc3c6457c718d8cdc2e9c7577db9691562e95375f","ssdeep":"192:90DuIfY7JtjC5ydUypH82+H8urFLR7BD4GOUo1MQl+B2GHPpB3QE7WA+MWnBP:9guIw7JtWqmhfldD4Eo64UgH3nx","tlshash":"4f1261ccf661b0764a377460623f120fe276a46d200a4468f598e4ef6cbe14d94abf3c","size":9875,"data":"","first_seen":"2023-03-07T12:05:56Z","last_seen":"2026-10-06T01:49:43.395768Z","times_seen":1594,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"eval","is_inline":false,"md5":"2675fab97e66abb2dc482356efb999b7","sha1":"3311edff263714f305e1e345e152bbee777cc844","sha256":"bc87ac65daaf5582b0084af46d5f173f84e35b6b39733943e908fd9023cf3bb6","sha512":"6d1ed57e31ecba4fd8d5e5bad006be0928245259a0d0a57a6c99029dc00cb4d2e74f0ee31a7c4e198b51bef9c544d9a55c559aad033e38acf75be73bb53873bc","ssdeep":"","tlshash":"121180cb99618a6896e214ee36fe3750b573e052f9446130751fcd103d9c70f036aaeb","size":889,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T23:58:32.168881Z","times_seen":1240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/js/chunk-7f5013bc.90a2594a.js","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"39cc32b39085a95d157412256163dd09","sha1":"6a0c940a4dca9eb0ba6352433eb4027489c6e98a","sha256":"8de493fbeacd3f22f010b2d4bda711c3100952ab4bd8c9966fdcaec3c5232664","sha512":"fe686beae96d141972efd776fa87067008e632ada635d4cb5fc7e06b1682d36b958a2b245a0c8fe324d54c524d96a5dcdb34a3e1b6d082416807ca68fbdbd68c","ssdeep":"96:LzOO/KhO/KPKaLmmxQKUvWMEOGpGjBMdvSNbB3wgsq/rIBNlujujDj7hlSPitAMw:LN1K9MdMGtUcw40zcj2P2VWHl3PgoW","tlshash":"31425509b8c7f166cc6aa021412f2535e17a7ed55022f141eb34cdf0a6b9c792b2df9e","size":12076,"data":"","first_seen":"2026-04-19T23:00:56.51288Z","last_seen":"2026-10-05T23:58:32.142758Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"将根据已有的meta标签来设置缩放比例","filename":"https://gbwfwg.com/lib/flexible.js","line_number":12,"column_number":17},{"level":"log","text":"changeLanguage tr-TR","filename":"https://gbwfwg.com/js/app.2623df1f.js","line_number":1,"column_number":653623}]},"http":[{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202505/27/ec7ee5b11a334e39a9193e0aabd78ab8_.webp","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.815Z","timestamp":1791244656815,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202505/27/ec7ee5b11a334e39a9193e0aabd78ab8_.webp HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:37 GMT\r\nContent-Type: image/webp\r\nContent-Length: 94304\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Tue, 27 May 2025 11:43:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94304,"size_decoded":94600,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"49885a868773b588f4b52c16b316d7fe","sha1":"b170c65d5f9cbad379bdfab1d1bf09f40e8f1b7b","sha256":"697bd878c4f3a4986e406dbf5a9901c261bfec6fc8572253c47d679ef6964174","sha512":"fd3e0aa74241b6c1f9628336f540316d7a161720f1783dd70f29a8ca0e40aebcd348d18a873ae7e91b745749bbd584c90de2d079302f49d0ca996ace5b25b303","ssdeep":"1536:kumPqRosfBWalU0aKcVLox3L87s6ZVxYDs0u70R+JtknXa8UHk+E6fXQ8+CWh5La:zuL+nuKcVEx347s6ZVxP0QX/kXLUE2+2","tlshash":"5793124815b7241cb1ff058068800358771bb8e4f1ffb9d90aa39a9ef8dc4453961ea7","first_seen":"2025-04-09T11:39:56.04388Z","last_seen":"2026-10-05T23:58:32.081899Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1598,"timings":{"blocked":-1,"dns":0,"connect":227,"send":0,"wait":458,"receive":454,"ssl":459},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202505/27/b9f5a354e94b4c2ea8061b891e1ca08a_.webp","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.832Z","timestamp":1791244656832,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202505/27/b9f5a354e94b4c2ea8061b891e1ca08a_.webp HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:39 GMT\r\nContent-Type: image/webp\r\nContent-Length: 72762\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Tue, 27 May 2025 11:45:03 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72762,"size_decoded":73058,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3418d77cd391b45e97da598cd9512c43","sha1":"5f90048ec4c625778bf020ca41b2bfd6fbe6cd31","sha256":"6a41dcb1e3adec289ff8cde6d38858d7a1d0252d69eaa8dac4f80a90d9ac6780","sha512":"3e6ccd17be5924c2534f21e9e8e7740e52564dd55df087372f7a3283898a0027d55d1ae06dbdb70c6c4524d91654cee8596c5492f6839e9c037d9bca74679f80","ssdeep":"1536:bNUMhGX9e8eyRe4pwUVgOGDx//i0FzEAGTOfQf+SmeJpv3vMAPsWHGmtex9Aw:hTn6pwU+dtznGiimW0+JmmtezAw","tlshash":"f4631218d65ea9e5fbcf178d57254424e939b3f48e202c27f3d71ad2a4ac5e3e853021","first_seen":"2025-04-09T11:39:55.879952Z","last_seen":"2026-10-05T23:58:32.106615Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2663,"timings":{"blocked":2422,"dns":0,"connect":0,"send":0,"wait":232,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/static/icons/ic_withdraw.png","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.839Z","timestamp":1791244656839,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /static/icons/ic_withdraw.png HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 1020\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a8c663a-3fc\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1020,"size_decoded":1259,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"70d1c13f7ac751ce09b753e3d955dcd9","sha1":"c968143931b9a22e7b6eb3f6a4bde6bf35f7154c","sha256":"6162c404f5ecd341bccec293364e418717a70e7bc69088f3539932283c9b9209","sha512":"120456706abe3cdee25d06462dcbfd3ae3c3b353b80f1c4c4ba0596e34ef19e7affed608afaa51a20c76f1382a9c78a3801de2cdc155c0870d6d6a5baa820610","ssdeep":"","tlshash":"9a110ce301519d22d95712fe8e340460b5472dd4031022c8bea39fe8eb14fe501c4339","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-10-05T23:58:32.079909Z","times_seen":94,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":171,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/static/poster/1.png","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.921Z","timestamp":1791244656921,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /static/poster/1.png HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 6041\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a8c663a-1799\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6041,"size_decoded":6281,"mime_type":"image/png","magic":"PNG image data, 133 x 165, 8-bit/color RGBA, non-interlaced","md5":"603a3e686c3901139d30d7c038b469b6","sha1":"067020e3c7a8be365c494858fcc6a9c4cf043a8f","sha256":"f36273b1ed4d722dd8fa466d356476d99980f89c519f535f7501219b15827af6","sha512":"48b4cc2fa6cf0342fa9d4b3bfcf566aa1a193631f4d90b93989c4320e129489e155be9155989422b4019696125b9e69246716a9c13f6961fbc0b9c37d2fddf01","ssdeep":"96:FdQpmYuTBBSPJC6dp/B57+eIi/b/8vI8tGuRVVbCTSPlj7/zPY6w2zh4CtGSCNOc:opWBywgp/b7zIiTkvI8t/RVl8slrYYN2","tlshash":"efc18f2f8a5f1909cae51e401945d28334bb24c399d11d54039f40bbaaa745fbfcba26","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-10-05T23:58:32.081043Z","times_seen":34,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202503/12/522c5d27a28e4b948d633efb721e92fb_.png","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:37.050Z","timestamp":1791244657050,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202503/12/522c5d27a28e4b948d633efb721e92fb_.png HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 25173\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Wed, 12 Mar 2025 16:26:51 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25173,"size_decoded":25468,"mime_type":"image/png","magic":"PNG image data, 1024 x 246, 8-bit/color RGBA, non-interlaced","md5":"9cfd6a23fa6591a0ffcab64a8c1d6730","sha1":"e311c7a43148248200ac5f761c7682f82d77d2c5","sha256":"ec24349a2b07db84c747743b94c3db17da74f4b6327fd7a7308e35ce4a5d8d24","sha512":"bfaf974551bc2b707aa82c6cde4c1aa87c5e079b60a4ea2b7f4eabc6f6d4086c0db820164c00c954367d9dbd6ffea2814f8e70d163a4ab69840417f60aedca8b","ssdeep":"768:70boeyzboxAuXi5Lta7QZbykAQzi2fi784H8:70bnAuqLGW2kAof4c","tlshash":"cab2e043c457c6880f6f36e665113192b9fb49c64162c97a7039ebbdff898c23d80253","first_seen":"2025-04-09T11:39:56.056878Z","last_seen":"2026-10-05T23:58:32.116601Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1827,"timings":{"blocked":1594,"dns":0,"connect":0,"send":0,"wait":231,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/lib/jquery-1.11.2.min.js","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:33.320Z","timestamp":1791244653320,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /lib/jquery-1.11.2.min.js HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:34 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a8c663a-1787e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96382,"size_decoded":33746,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6355f3cc28006e33bad2e765cde30e0d","sha1":"909cd6318d5047f3c8e83528253b256981394414","sha256":"39eed2d24faf4985b922b64d078f106edba6b3b84d5385e483a5c7bd69201da7","sha512":"b22d3868a7b311f82bb149f8afccee03c68dcd5e7152a061b8e18d97aef794b106dd1cc081d49f4d638193924ffa5885239cf67152fc339ff0cf3cd1d194d175","ssdeep":"1536:0Hg1kz+hAmcGmVFnlkFybx+amELolY+30k1dml+BQZX6YPnrCtn8JkDnlwMxVW2:0HDdc2F3c2G7mIW2","tlshash":"13930add76c2b06387a720b9506f550bf276599e280c4440f268e8fabc7ca49a137f7d","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T23:58:32.163827Z","times_seen":1995,"resource_available":true,"data":null}},"time_used":1130,"timings":{"blocked":655,"dns":0,"connect":0,"send":0,"wait":474,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/api/country/list","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:35.754Z","timestamp":1791244655754,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /api/country/list HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: null\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:35 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2105,"size_decoded":1079,"mime_type":"application/json","magic":"JSON text data","md5":"d4152eefd5e877e3d93a6dc814f16bf0","sha1":"348501dec3e651fe1f5fddfdae295efcd78f63d3","sha256":"f6b6ef46b1e46b28c256c2af924f6169d8a662a28a2f8255c33032ed2bde5651","sha512":"2586d9ed87b81384a5cf43b5579fa5a1f13c8929df9fce87704a8c4969d257ea36e006d31041986a032214c1de115f453227cb4d992bc3309194e8fd62aa1a8f","ssdeep":"","tlshash":"4141568d214cadbde688d425589fbb4e383974aae1c97c6113ce8f3d56d3de0020c966","first_seen":"2026-10-05T23:58:30.14552Z","last_seen":"2026-10-05T23:58:32.141875Z","times_seen":2,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/api/virtual/commission/list","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.552Z","timestamp":1791244656552,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /api/virtual/commission/list HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: tr-TR\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:36 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8005,"size_decoded":1159,"mime_type":"application/json","magic":"JSON text data","md5":"45e90515386cb9c08d681d2df3fb82a0","sha1":"457eac5bb46f45a429684065433affda9dd55d94","sha256":"1e8a8fa1de962b54e6a3a1926991beeff3dbbbb9659a74053293cfca291d89c5","sha512":"9666b978d70e87fdcfd4a22d0433ad0edb5165a8bd79dc84e1d63dff14e2455795d77be5b36dd85187cb29db297f701b030afad23f34cb6d390382a98c53b131","ssdeep":"192:egbDRpbVZzHB2X77HVfHI6GIssivGBUbuoF3ofSiVgmIMVOinLTy8SisTvgH0Oil:eTZMqy","tlshash":"77f1e66e53adfceed490c6ca431f75cfc444766e40c2ce5824d67e8cca4d83a2d1a2a6","first_seen":"2026-10-05T23:58:30.14714Z","last_seen":"2026-10-05T23:58:30.14714Z","times_seen":1,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202505/27/bf5085ef20964aecb6c44d1ba91410c8_.webp","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.836Z","timestamp":1791244656836,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202505/27/bf5085ef20964aecb6c44d1ba91410c8_.webp HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:39 GMT\r\nContent-Type: image/webp\r\nContent-Length: 24518\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Tue, 27 May 2025 11:45:24 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24518,"size_decoded":24814,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x566, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"47329644cad13741d8d68e2165281a79","sha1":"aaaa9465ef03e89b433f8ec34df747a80bbfeb1c","sha256":"3390085cd31df0cd2b3437a4492df8a88c80f1d25a5a50716e20f7a3f8c315f6","sha512":"d95846e8d2005eaf20a70b684a441a4973334ba54be426285796278ca4acd43e237e18720d81baec41501b38c64e7bb6b3fba0cb33ba77ea16c5f3530f40a559","ssdeep":"384:jVLMV121V7Zz4RjVhB8L9l31tetcjsPcJhS7sNNDVea6L4y7LdhEtTjRRh68N:jVLMV121VtzAGL9x1vsKgsftYF7LHKTh","tlshash":"5cb2e0a8509aaf018d789f0df83d5d63e6652bb94da7129d80cdfacc09c0a0d4d19d62","first_seen":"2025-04-09T11:39:56.053941Z","last_seen":"2026-10-05T23:58:32.121469Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2782,"timings":{"blocked":2552,"dns":0,"connect":0,"send":0,"wait":229,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202504/21/a8fa64c58ba04291b662ade79dfb4992_.png","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:37.052Z","timestamp":1791244657052,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202504/21/a8fa64c58ba04291b662ade79dfb4992_.png HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 9510\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Mon, 21 Apr 2025 17:11:31 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9510,"size_decoded":9804,"mime_type":"image/png","magic":"PNG image data, 220 x 92, 8-bit/color RGBA, non-interlaced","md5":"959333c6bea6a31957a226230a412b54","sha1":"aa1b4f559d1d8caff74f1330f603ec5bcfbfe656","sha256":"99617108bcddb78c6f5c13f0dea1e49f501f55f5a1181b76214274a3f1fe5b1f","sha512":"b9732c882feb555f5b9581646f6c2b0361d7e21b189b5521009bae75f4a97e3015d6ea7b96fb01406435c83086fa444454dee210a240750a97b784cf373dd5c5","ssdeep":"192:4avelcrqYrciSit3JKVOw92ymlVh9kM2rhbmWhB:5xjciSitAE/iLhbn7","tlshash":"d212af07265ed877d1028966511ed42d5dd0d5a2bb2998caeb0f7cc346ab83439fec32","first_seen":"2025-04-09T11:39:55.919055Z","last_seen":"2026-10-05T23:58:32.1281Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1831,"timings":{"blocked":1602,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.12.0/theme-chalk/index.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:33.307Z","timestamp":1791244653307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/element-ui/2.12.0/theme-chalk/index.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 23:57:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1187726\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:09:39 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=juQneKIFGWmpdBlkOwUR7RdGvqU8psY1INOGvqV%2BgDM6J2qDBiozpHMH4DQwv2ZdzISBm6s4R1CP03yhpr0PDR1B2Gz%2FpG9r0azw7UiAgtEth7R8FOYG%2BCBDF66mAFtDEzKsdoYK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4605e8b4c9fb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27462\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232694,"size_decoded":28467,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b156c93b3792c208a43d643446f0d308","sha1":"1ee68ab3ff034e3553c779fe94079bbd43436f67","sha256":"913f0305e94e0c8cfea0ab62c4bbadbe86b52b5cd6893a1a3740d495a1005155","sha512":"671b1110d3c3f19b6c0ecb8e6a0771d05beefba8bfa8b3fde91e955df08c168477f23d526ca2eb355c7397dda5ef47e3f8196fef126c53d17cc4f8a236ff9c61","ssdeep":"1536:y28Y7SrW3YeWXA1u9w4HCe/l4ftg5fNME30e/8OaiZkW9YO8eQw4yG4tfNIc0yr6:Xbk0Z6fKyZL1dw","tlshash":"0a34a6219b07216b612bde6db6c0ba895f18c323d4725bbbfe55340dcbd34891263a4f","first_seen":"2023-04-06T21:01:19Z","last_seen":"2026-10-05T23:58:32.134995Z","times_seen":400,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":2,"connect":12,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/favicon.ico","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:35.377Z","timestamp":1791244655377,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:35 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 34125\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a8c663a-854d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-06T08:40:58.537568Z","times_seen":18880122,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/static/tabbar/work.png","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.559Z","timestamp":1791244656559,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /static/tabbar/work.png HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:36 GMT\r\nContent-Type: image/png\r\nContent-Length: 1736\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a8c663a-6c8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1736,"size_decoded":1975,"mime_type":"image/png","magic":"PNG image data, 41 x 48, 8-bit/color RGBA, non-interlaced","md5":"bdbb6ff7b3a99d44d2b5d0a81bae3261","sha1":"117ad42cb03a00523864aef54bf83fe96292d401","sha256":"05c5c12d4f4cf615f695ab94b8ee03a2a62d4e560e930940d7f14e7b039bfc42","sha512":"c670cb3ad8b3b3da42d907738a701d6c2927728a00184925566bd906f1ca41e2a0acdae5573e5ceed8e158b7533c8f492c032033bfb6b90d8cd493c865b7f628","ssdeep":"","tlshash":"b731e96b29841c9c489055e943365ea88c2c2b9d3e3a7e24e1048aaf0a0d2f988ccc99","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-10-05T23:58:32.146023Z","times_seen":94,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":220,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/static/tabbar/orders.png","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.560Z","timestamp":1791244656560,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /static/tabbar/orders.png HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:36 GMT\r\nContent-Type: image/png\r\nContent-Length: 906\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a8c663a-38a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":906,"size_decoded":1144,"mime_type":"image/png","magic":"PNG image data, 40 x 45, 8-bit/color RGBA, non-interlaced","md5":"7158cc1ea0a5361d7da036a4ae236e7b","sha1":"f8b1761e2ae0d975005dfc59e0d8be65f2444ca3","sha256":"940f1ac824ebe17c2c94051bcece498bc54564c3fcd9a0a47c77184cd96f08b4","sha512":"237c5cdfafa2b358d9cb1ceb1ae6c4aa6229a3bd345172f38d5780a8231c1c6951ee08cba7ae002c643b1fe6687f4292d4333efdbaa7b750c4a7cc60c6a835b4","ssdeep":"","tlshash":"371163ce6379e8aca68c5b3c74cc053fdd72517e60ceb108a8105368ec7a745414a2e2","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-10-05T23:58:32.0918Z","times_seen":94,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":221,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202505/27/7b65aa3ef6104b9ab0b2518e7388b820_.jpg","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.824Z","timestamp":1791244656824,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202505/27/7b65aa3ef6104b9ab0b2518e7388b820_.jpg HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:38 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 67837\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Tue, 27 May 2025 11:44:08 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67837,"size_decoded":68133,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1500x750, components 3","md5":"705855728cb87b5e552572a0a970ae2a","sha1":"188496958a93ddae857fd6806e378d52403737f3","sha256":"0f607c5a8d9c746c35012f056af2717d1e704fe99d872e8630e6aebc7b6b98c0","sha512":"43cb2c20815cb27eb27bae98c09f72aa6c491a6c6deaa5476454188e0a52a9409a7a2c6120226cd065ab3b70465a7abc6fc18cb2b5b78afaea5fc1e896b5f5f4","ssdeep":"1536:raQ2sSW9zeK2tm9+a63DOo7ev8wqCqBibzWQ5wTf:raQdOftIfSOzvnbCQYf","tlshash":"84630158f7eb4461d145a373ade713a479f21e64b37f2898be902a88f4333247d0e516","first_seen":"2025-04-26T11:39:53.867557Z","last_seen":"2026-10-05T23:58:32.133172Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2297,"timings":{"blocked":2057,"dns":0,"connect":0,"send":0,"wait":231,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202503/12/04dfc4bc351249bea5af3d5d6f2d4830_.svg","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:37.044Z","timestamp":1791244657044,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202503/12/04dfc4bc351249bea5af3d5d6f2d4830_.svg HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:38 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Wed, 12 Mar 2025 16:25:48 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3853,"size_decoded":2075,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bb84aa82f69c09a4510e00ffc5870503","sha1":"871a1a397cfb7ab15738303b2a119a6b495b5fd6","sha256":"a74b5e3fe552613af384eb20dfc082cd1a9a0e035a417d6df1ce760b6fac3967","sha512":"d09b0f66b6280886165d0d88498911231e755c818b2f5894665eb9680487217cae3cac27f6c31b0cb597cbc2fc944753d6b732f0e6b3c1a23e26e82165005d0b","ssdeep":"","tlshash":"6681b31bd37908f8964e42f80fb9141a502e78bb62101e32bc9ec44adf42d417b387dd","first_seen":"2025-04-09T11:39:55.882707Z","last_seen":"2026-10-05T23:58:32.154117Z","times_seen":45,"resource_available":false,"data":null}},"time_used":1511,"timings":{"blocked":1280,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/static/tabbar/home-sel.png","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.558Z","timestamp":1791244656558,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /static/tabbar/home-sel.png HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:36 GMT\r\nContent-Type: image/png\r\nContent-Length: 884\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a8c663a-374\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":884,"size_decoded":1122,"mime_type":"image/png","magic":"PNG image data, 40 x 46, 8-bit/color RGBA, non-interlaced","md5":"d59d49d76d7ff3107fc82e2d48b06216","sha1":"2bfec006bc3a8a7c65ca34d3c3e92df5d488d1a9","sha256":"9572873a018cf0366633a07c9ec33192ad6180751c8f1c7396ae734f7ca46af4","sha512":"dab4a0283652f7b58bb2c082c5f30233b13f052e5aff041f44c10b092e68e94c4af73b0e1d31804fb9c1c77d2a7108910907bc1d0474e9072790af4a0b4bd04e","ssdeep":"","tlshash":"f611b3437b233c270ee2c1b3141510c46a63b232c1a6a5380554000ac1e70e0ebdf1ab","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-10-05T23:58:32.124442Z","times_seen":94,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":220,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/css/app.bf55fde1.css","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:33.314Z","timestamp":1791244653314,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /css/app.bf55fde1.css HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:33 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a8c663a-2790a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162058,"size_decoded":20842,"mime_type":"text/css","magic":"ASCII text, with very long lines (64370)","md5":"cd2434a4e1c076601ad68eea5f66cf9e","sha1":"30bf41f40a5a3def1ee5e88fc4e1a4e956598149","sha256":"96375fc3a7b199ea2e496fd6a55f541e05e9185b09a8e2fd9be89cf9af0c7bd0","sha512":"b1447b73e8043b36e5157d64deda2f4b52cd820c3e886ecc322d4eece2ac44788bd6032caee2fbaeeb2ff0299cdc2b39d3c3d650ab6e2dc73f8b5aca54470cbf","ssdeep":"3072:3kZYwo1OAPkuD336ya5hrCen0eTUIfS0Qqz:3kZYwo1OAPkuD336ya5hrCen0eT00","tlshash":"9cf39997bad5210cd8574e92c6cd7efcea3f491252928cd7b1433baa8b453db238501e","first_seen":"2026-10-05T23:58:30.165441Z","last_seen":"2026-10-05T23:58:32.123609Z","times_seen":2,"resource_available":true,"data":null}},"time_used":686,"timings":{"blocked":-1,"dns":0,"connect":226,"send":0,"wait":463,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/core-js/2.6.9/core.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:33.321Z","timestamp":1791244653321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/core-js/2.6.9/core.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 23:57:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1031415\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:09:17 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F%2FH07W8FavwP6MOANmpjnR1J4IGFlTNoVEct8j5Reqqe6eRu0YzAYoUBiUFxrr%2BhbyJ%2FO1dY8KA33sK%2F320bH65ogmgsnKkPLwGRegyGoovqTQUdR%2FmoY8raysDlTbrHjaC6Pc8o\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4605e8b4ca0b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27060\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92051,"size_decoded":28085,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32000), with LF, NEL line terminators","md5":"622c4c9d5dc4b1ee29a2eb908186ec88","sha1":"491753a3f979f7d180af11e1929ffff85e30f921","sha256":"794d1c7ab27be77d366e0497e641488e50f5ae6581b4db51cc08de1e142eb47a","sha512":"2b2485006e3a36dbae0d0d8488ab63ae6085c34d5a6f72c3558c52b492294c157f67ce47c1c3b89498db9ff72f748485fedc04a881f1877f903cfa0df1c8be8e","ssdeep":"1536:PLFpwkiSucuVH8MBfaQQ979S17LMgRCSRjMbEjeb6Gt6UQ:PLbw1Sucu3Qw8gc3gk6Gt61","tlshash":"1f93618cbec6f06642636675413f900bb27a1a86745f89d0e12ed1e4bc7c98f413be6d","first_seen":"2023-04-06T20:58:39Z","last_seen":"2026-10-06T08:21:23.007559Z","times_seen":1654,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.7/locale/en.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:33.332Z","timestamp":1791244653332,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/element-ui/2.15.7/locale/en.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 23:57:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Thu, 18 Nov 2021 08:03:59 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U8lL4M7DsVLyX9RAkKodLg3ezady9f8fMhy5xnAXZgnzRh42w8KpbFLBSpvRT7H%2BA2ewkfDb%2FPQ9Bw8Gx6CduTIznP6Gg6o1%2BY9s9BXqoIbT1KOlrwG%2BIPuRMQEl8w7y%2B%2BjZbiOp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4605e8b5caab4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 988\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3516,"size_decoded":1997,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"05c65efd7ab47381eac414b929c80d11","sha1":"c0fbfd65eaf0a9a92dedbc93b1b1d7d8c55f8094","sha256":"d6361676df25451bfb74c691c9304ba709919cd4dd03d3c7bd5f999af7a6c597","sha512":"3ca05b333100d916cc783022dcc5b5d0210351e5ff8f184bf7e6450f63f919dc6c28e330d2f49de7a452a7cbee975a68872a3e2d3cbeb99e255e2827b59674ad","ssdeep":"","tlshash":"0a71fcff49b5406a4135dc19659f6407616180ab4e28bc397fad53a82f8cc1ca0feed5","first_seen":"2023-12-31T12:39:44Z","last_seen":"2026-10-05T23:58:32.104981Z","times_seen":425,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/api/poster/notice","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.548Z","timestamp":1791244656548,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /api/poster/notice HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: tr-TR\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:36 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10,"size_decoded":310,"mime_type":"application/json","magic":"JSON text data","md5":"b9e754add75d51d888ce7585dc9dfe41","sha1":"0fd53114199a1a46e887032b7efa05f1fd74c807","sha256":"7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3","sha512":"6ea97d926607e77cda3275af2c3ba966fd45c1d4b4aa97b53d63a718f0941d93c1d4e67939885740dc6bfd59a0021ed049073ddfc61cfd0e8a5553efb449b539","ssdeep":"","tlshash":"2f500000003c000300030000000c0000c33f00000c0000000c0c033000000000000030","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-10-05T23:58:32.099116Z","times_seen":5451,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202505/27/f631ddff66914b82b9b5b29d39d152f3_.jpg","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.833Z","timestamp":1791244656833,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202505/27/f631ddff66914b82b9b5b29d39d152f3_.jpg HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:39 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 86953\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Tue, 27 May 2025 11:45:08 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86953,"size_decoded":87249,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x563, components 3","md5":"b3dc5c147146d58d3f5655814fbb2db9","sha1":"39ee803de6917c0f5cf757f42c98bdaecbe3d0e9","sha256":"9ef72d96b4d47c72fad55ffe495e20359da8273ab4f4c97f32ebb1753c756bd8","sha512":"edec0dabed6238925409c00eacc4c37a7ec6c07b54657c7973818fed84bc72b130ccda93f1ed8d6b8c7983d99cc16eef9fb364df893f2199ba2757fd7287b1ba","ssdeep":"1536:e/88TRG/KHhtemLjbv1ZKpbRrYpthhvoa8h9y53N+x2bemhMH/iDMqUZQPSGz:OdTw/ihomHL147rva8ix0+emhUKwvQPb","tlshash":"4c8312c7a21b8415a5b9587410b5f2cb38bd72f1bbdc8f353bd36a2059b76eb1e18401","first_seen":"2025-04-09T11:39:55.885719Z","last_seen":"2026-10-05T23:58:32.145123Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2713,"timings":{"blocked":2476,"dns":0,"connect":0,"send":0,"wait":231,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202503/12/f5a7f332fae44ced8a00ec93bff4c9f3_.svg","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:37.040Z","timestamp":1791244657040,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202503/12/f5a7f332fae44ced8a00ec93bff4c9f3_.svg HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:37 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Wed, 12 Mar 2025 16:24:46 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12752,"size_decoded":5152,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b90709ec6837c4b9e7aed4035c2572ec","sha1":"8f494dba182a719bd8e3453677d451cd7783cf0d","sha256":"513b694a28926f9e285515908c3dc7469eb5b97c1c7f3af125fa29d2924fcda7","sha512":"aad58cef2a7db66d84f8a8549ac02ddaf164efc064f3d5b765a0a75df31490fb4b0ecaf7abc4504342b4a384f2aa03bf6b854fb605cda60d52f3c619bed1a2ea","ssdeep":"192:/kaJYGFmkHVkKvgC9Klu65d7COQpX1zqiuK1mjNBA6dQ21FZL5w3zP5f7I3qTUqZ:s6FOGKlbYZ91+5FdQ21FJUtrTUqZ","tlshash":"ec42d81493a942f4f3ee4ab06cf21c8a3f489cf726407459795dac10ef32fa1399965e","first_seen":"2025-03-24T19:06:24.101485Z","last_seen":"2026-10-05T23:58:32.107481Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1054,"timings":{"blocked":821,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202503/21/c9ac6c9ad8e2484fb5fdde4237d18524_.jpg","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:37.053Z","timestamp":1791244657053,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202503/21/c9ac6c9ad8e2484fb5fdde4237d18524_.jpg HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:38 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6525\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Fri, 21 Mar 2025 08:55:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6525,"size_decoded":6820,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 297x96, components 3","md5":"c937629cb90ae9ee63df5fa322a30d6f","sha1":"a2a422f8e00242cbfab7eb7570d34871b52ada16","sha256":"a2d50114a5affd1cee47253b23c077fb6a98fde432723dfe9d9c783b246f7606","sha512":"92c98d27ff7266a69221a0842eb5f5cffa917f62fff6a9bc1a00ebf9ab0c419b01b63243c31029106845252573a2ba47edfd37a34e1fa29ccfdbeb8279af7bb7","ssdeep":"192:A8MKgOWOEQA0Y1fdqcrmEsZl1Xoewn8BiIIS/oQvhgG:AhopA98EsZl1YD8Q/QJgG","tlshash":"c1d19fe58bc9c91fe1b1893d00d6c6c4f1df6c9316cb46b4ccc911aa23ac1352ee42a9","first_seen":"2025-04-09T11:39:55.874239Z","last_seen":"2026-10-05T23:58:32.134101Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1967,"timings":{"blocked":1737,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/api/common/dict/allMap","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:35.269Z","timestamp":1791244655269,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"POST /api/common/dict/allMap HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: null\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nOrigin: https://gbwfwg.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:35 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://gbwfwg.com\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11582,"size_decoded":4786,"mime_type":"application/json","magic":"JSON text data","md5":"c2c62a1aa2accc9500ef31708121be9a","sha1":"8ee305e3ead5869b05e60bfa4a087bc26462b444","sha256":"6b4a9690f8f1b40399eafd6d7cb8a2009e48fe1585af958caf810da6b96bf2cb","sha512":"2360cf0fac582200022b9fdac07b71be0b11e5c37e977ed5f59e408ab85fd4edd23eea083ca6f442b203844988f6e742252d4c96649656f048710bf552265500","ssdeep":"192:awc4IL8VYRdt3AVBoHmMVsx3LQmgVMEjQLG//w9Sq8ugl37DP5fulM2kleZIbTAJ:awc4IoGt3AHoHmMVsRLQmgVMEjQK//wR","tlshash":"6732b9cfe643bdfadd03ac14d2ad64cd60bd2e765e48c6455d46b08b30b0042b62ab6f","first_seen":"2026-10-05T23:58:30.17523Z","last_seen":"2026-10-05T23:58:32.098227Z","times_seen":2,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202505/27/ce749e84181a4f019d60324cc23abbe7_.png","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.821Z","timestamp":1791244656821,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202505/27/ce749e84181a4f019d60324cc23abbe7_.png HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 3563799\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Tue, 27 May 2025 11:43:52 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3563799,"size_decoded":3564096,"mime_type":"image/png","magic":"PNG image data, 4000 x 2270, 8-bit colormap, non-interlaced","md5":"781c7c4eb1a60296593d2060cccee118","sha1":"850481b920c057235375efb9a6cf6280ddf92a19","sha256":"addfa63b8d639fb919b55df393ff6adf164be1979e7c9827a92c3de8c751a325","sha512":"ee153de5eb2afd897d74302a6561222263c93005f8374a443bd92d999b18a0eb4160e65c9a1769d6fa6002d490b0f1cbb9202ec952f3ea8c974418b81b9b284f","ssdeep":"24576:0Co18FP91t65BeuCKbfEOdtiHMvP9sGNnt+cP5u3IQKtqma:oKFDweuCKL1LN39N8cBuRKtXa","tlshash":"882533ce74ce375f40fc50f8592685cd910641f247aa84a6829cfa3ed78eb8993f5863","first_seen":"2026-03-14T05:03:30.245594Z","last_seen":"2026-10-05T23:58:32.082624Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2777,"timings":{"blocked":-1,"dns":0,"connect":227,"send":0,"wait":457,"receive":1634,"ssl":460},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202505/27/6fa9778dfe094594a965bab114bbb7ee_.webp","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.835Z","timestamp":1791244656835,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202505/27/6fa9778dfe094594a965bab114bbb7ee_.webp HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:39 GMT\r\nContent-Type: image/webp\r\nContent-Length: 99828\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Tue, 27 May 2025 11:45:17 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":99828,"size_decoded":100124,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"855f5d0a96ee5b7e6776f4b074954e1f","sha1":"3a7f2720159f4c6de7d1a31753db8f260e1a849c","sha256":"688853abe6a087eb6676a75f1e4978192bfcb25dc814b04c35b421858a93081c","sha512":"5069a05e14ec51e7c5f2c0ca72ca70205d847e16fcb32c0226a9a27c36cb42f027694b6e60acf77dc04a09952088a42c5ef2bfff7a0fb1344f5d83df0305987d","ssdeep":"1536:xryEhO16ndmErWY15tc18T/aaoI/skX/9QWWMEZBuZqpgNQm8AVuAy:xyAuUmEre1GDoI0kX/nWMWE8esAy","tlshash":"96a3027b16eab3a91ad5314ec04ff983e4c92d1b5399ec1d930a609b2fe4118d056cde","first_seen":"2025-04-09T11:39:55.984032Z","last_seen":"2026-10-05T23:58:32.102513Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2764,"timings":{"blocked":2519,"dns":0,"connect":0,"send":0,"wait":233,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/js/chunk-7f5013bc.90a2594a.js","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.238Z","timestamp":1791244656238,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /js/chunk-7f5013bc.90a2594a.js HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:36 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a8c663a-2f2c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12076,"size_decoded":4106,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11940), with no line terminators","md5":"39cc32b39085a95d157412256163dd09","sha1":"6a0c940a4dca9eb0ba6352433eb4027489c6e98a","sha256":"8de493fbeacd3f22f010b2d4bda711c3100952ab4bd8c9966fdcaec3c5232664","sha512":"fe686beae96d141972efd776fa87067008e632ada635d4cb5fc7e06b1682d36b958a2b245a0c8fe324d54c524d96a5dcdb34a3e1b6d082416807ca68fbdbd68c","ssdeep":"96:LzOO/KhO/KPKaLmmxQKUvWMEOGpGjBMdvSNbB3wgsq/rIBNlujujDj7hlSPitAMw:LN1K9MdMGtUcw40zcj2P2VWHl3PgoW","tlshash":"31425509b8c7f166cc6aa021412f2535e17a7ed55022f141eb34cdf0a6b9c792b2df9e","first_seen":"2026-04-19T23:00:56.51288Z","last_seen":"2026-10-05T23:58:32.142758Z","times_seen":3,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/static/icons/ic_invite.png","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.840Z","timestamp":1791244656840,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /static/icons/ic_invite.png HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 792\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a8c663a-318\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":792,"size_decoded":1030,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"ae9609f354c86c7572342b3465fb7df2","sha1":"9e3096deb064d95711813d6a0707b723f720b3c5","sha256":"581cfd62c526498c41d7fb2fa5091b6d11a15750cb4be622ba8bb5092467b706","sha512":"4e8e1dcd1be2903a55441b06191912db27a4d3b4f2ded175b9837a8a7a46e29ee2ab3eec8b7801443e5644643d1c5e54272147c19dfa3bb963b49ca260eec5e5","ssdeep":"","tlshash":"0f017590da270660d6ee934e8b871019dc7c70998384c34889488dff782f28dddf971b","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-10-05T23:58:32.138274Z","times_seen":94,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":171,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202503/12/e2e62989f6834c478dc8b741379269ea_.png","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:37.049Z","timestamp":1791244657049,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202503/12/e2e62989f6834c478dc8b741379269ea_.png HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 27273\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Wed, 12 Mar 2025 16:26:33 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27273,"size_decoded":27568,"mime_type":"image/png","magic":"PNG image data, 3840 x 2160, 4-bit colormap, non-interlaced","md5":"6164dbaa0e25e56b3159cd6e175926d7","sha1":"7a002db0dcaf6fdad0148e9fa8ef11bbbb68040d","sha256":"047b5d739cb8e427665d0b655298c35129ad3a187a8cd74bba2afad005f708b8","sha512":"f80ac45a6b66c5904395e50b715ecc5f24f17c8220ec43364ae638fa60f1ae04c4c810ebdc7c2a050b4bad6a36becfa3e86798eeebe094040a6cdabf662bad4c","ssdeep":"384:ekuGcp6gsas/8OdKzDPuKJ6bImFurjiu/ImyasYqzdlgZ7ZBo3nb3B3G6:YGch6kO2DBEbIzpyakZL3935","tlshash":"c5c2d1fc4621eb31f66db0b984fcf545eb7062864876804a2ec8fa6645e3f064fa4e51","first_seen":"2024-07-18T15:25:33Z","last_seen":"2026-10-05T23:58:32.083364Z","times_seen":25,"resource_available":false,"data":null}},"time_used":1791,"timings":{"blocked":1559,"dns":0,"connect":0,"send":0,"wait":231,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202604/02/2613b794e59b495f92a56a7835a27c1f_.png","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:35.718Z","timestamp":1791244655718,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202604/02/2613b794e59b495f92a56a7835a27c1f_.png HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:36 GMT\r\nContent-Type: image/png\r\nContent-Length: 349927\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Thu, 02 Apr 2026 08:07:10 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":349927,"size_decoded":350223,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"1aa1acde50e9884dde361edaea12421c","sha1":"9d27ac10f7e0cda0446c301d41ff0e83ec92772f","sha256":"a4300ca023e3007c88cdd5958b2a9ac4b2835cdbb84097d9fd2bf37b95ca74b8","sha512":"4e4550f9ca3bafcc9ffa7c24a33a40c17414f5ee7246877c89632e8169665803124fcf3c4354d0e3e0b6668d28df98d766de2676665a2248e4172a08be6ec605","ssdeep":"6144:Lzv9qftGPcwDmV0oREDstwDE/psmE2wLrmlBTa4WyWs2QsAOl:LgaRmE2wLQTa4XWX0g","tlshash":"bf740204b0909f0dd7c3757d969de842baf49b20e47a3c8052baa62be7c9f685d05cf1","first_seen":"2026-04-13T21:35:05.111183Z","last_seen":"2026-10-05T23:58:32.161672Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1916,"timings":{"blocked":0,"dns":52,"connect":227,"send":0,"wait":457,"receive":721,"ssl":459},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202505/27/d1ed1c83a608416683746eb4ab5916c7_.jpg","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.817Z","timestamp":1791244656817,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202505/27/d1ed1c83a608416683746eb4ab5916c7_.jpg HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:37 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1452854\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Tue, 27 May 2025 11:43:41 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1452854,"size_decoded":1453152,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 2000x1125, components 3","md5":"3acf94ab6f0591a07c56968f96b4c56e","sha1":"ba1e84f59ce5899a20ac0e90cfab6fcff3d9f8a5","sha256":"95c90be4bbf8040aab2d646943176724315ddf84a6383beefbb8a5c1825c8a12","sha512":"17581020d17bc268838ed2111b82e29ca8794c2d62dfd03f32e4e35edf31287533c372d41c8cce34ec48095054e123909ed94524a03002b88d5d6beb57f24008","ssdeep":"24576:spB9oHAZgbirPanN0Zy16kOtrs3uplVPaSeRKA:fgcq+VKZpl0RKA","tlshash":"ed253320dd3fdbc2ea1f49e672c8719d39fe9b6063d63c1ea28890a0bf419c99501757","first_seen":"2026-03-14T05:03:30.201563Z","last_seen":"2026-10-05T23:58:32.120523Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2381,"timings":{"blocked":-1,"dns":0,"connect":227,"send":0,"wait":457,"receive":1238,"ssl":459},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202505/27/5d6b4edf3f924f8cad0d4c44efe89875_.avif","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.830Z","timestamp":1791244656830,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202505/27/5d6b4edf3f924f8cad0d4c44efe89875_.avif HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:39 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 192074\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Tue, 27 May 2025 11:44:31 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":192074,"size_decoded":192385,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3f1edd9893ec24c47cae2a5a7da8933f","sha1":"048cf8686e364132cd80e837c18749b4a38353c6","sha256":"ff342fef6095688292bb2c1cc14bfa58eafc102043634e4cbcde78c702a305a3","sha512":"40547419292b4dd34edfe16ef951e6b0409aec2d555f5046e67d812f4335aad5510cee9f5b9187718be22281368748706a645cad8e9e5452ae588100e2ddeb99","ssdeep":"3072:qwLb9Po/rMf1RM/hLpKgGoxOyHxG3n8wA15QtcNSVcZzVxLl9/DtnmORDbDLES:jQIf1eLpKIOtnULQCbBV5lHnmO8S","tlshash":"061413847964c764f15db030c349a9e1cebadc05cfed4f06e106b4ff629a63ca286566","first_seen":"2025-04-09T11:39:55.908534Z","last_seen":"2026-10-05T23:58:32.101583Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2552,"timings":{"blocked":2291,"dns":0,"connect":0,"send":0,"wait":231,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/static/icons/ic_recharge.png","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.838Z","timestamp":1791244656838,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /static/icons/ic_recharge.png HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 1139\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a8c663a-473\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1139,"size_decoded":1378,"mime_type":"image/png","magic":"PNG image data, 30 x 19, 8-bit/color RGBA, non-interlaced","md5":"1c2937ad9f59c2144856c7e17b022a65","sha1":"4c6e4fc1d9be48286e643da67f8e88b8612e0744","sha256":"9e4d52b130ee6457bc78db04c15c4f771820eb2b983259fdd606298f1e3e9f75","sha512":"894ea7b05ebd0efd11d9b79739fa3416d83302618e0c014a95c65bf396ba0cde03d1690dbb1851c73b1a267d6a0c2b5e9db5b2a3de26201fc8a3f4280f30c970","ssdeep":"","tlshash":"5321c6b50eff1ae2d378b339c412a4a2eb9732677514360a3d15c00b94b254c4483279","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-10-05T23:58:32.11839Z","times_seen":94,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":167,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/js-cookie/2.2.1/js.cookie.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:33.335Z","timestamp":1791244653335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/js-cookie/2.2.1/js.cookie.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 23:57:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1471546\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:11:49 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aBME5qhnDcsiRUamCzXuf1oFRkJZFiRu5CzSqJQI8nqg0urUfThAtGyaCPWQPJ4kl55Jia8V1RXGPKtPMKX9u2QDpq2qMz7J1V2Bv0OCVssKXwtOUba7L2rqHkn0rAzkQtfmh58F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4605e8b5caeb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1299\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3883,"size_decoded":2311,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"fa93e8894edb6245ab03883633b12b6e","sha1":"e3ba4c7d1a8876090756fd31715b4f6af6fd649e","sha256":"3fc8d8f8c09ee97d9c8cd4a6178ad0bd921a9cbe55c14513e0c06738c9dc8d15","sha512":"263612833aa8f4ad08798184b25311604f1a3bdb6aecacb71103661159007ba0a9d7803094930b3276f47e980492bdd8c49f208508ab88ebd9c0875166278621","ssdeep":"","tlshash":"0c8124b0bb8d35ab0e0e21145b1f60cd927ce43a085949f6ec9df1321468c2e977ad6e","first_seen":"2023-03-07T12:01:36Z","last_seen":"2026-10-06T05:32:24.111693Z","times_seen":3696,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/static/poster/4.png","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.924Z","timestamp":1791244656924,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /static/poster/4.png HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 6373\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a8c663a-18e5\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6373,"size_decoded":6613,"mime_type":"image/png","magic":"PNG image data, 133 x 165, 8-bit/color RGBA, non-interlaced","md5":"60e2e78c0f32732c19c1ee646a32aef3","sha1":"513dff26c054d71f75b6cb656ce925b0e1e36fca","sha256":"4a7a339b29e5f7ca92239331924e2a22db3f75395367e987c4b8926d96ff10db","sha512":"c07e789368866f0669e72da3b03dd7aad2748a8f62af5a44b086cd95b039bf32617242bc203f99f4b148102a078e3639a2ee8207045bd4994b1059f3c577d9c1","ssdeep":"192:qTLiw0N5Kza1vyIoe7JhjDESdHGUlWiSS5Ae:4LC5TVyIxJhjDESplWiSS5","tlshash":"6dd1ae88d89104edc6e384d251f5c799e823d7c31bacf5d16a48a0b07c8c58f0fa11e8","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-10-05T23:58:32.147745Z","times_seen":32,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":313,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/sockjs-client/1.6.1/sockjs.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:33.343Z","timestamp":1791244653343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/sockjs-client/1.6.1/sockjs.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 23:57:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1187833\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 28 May 2022 05:01:58 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TLp%2FmHG5fsJjMBXqzG3D4NmupfwF2VcC43U9z9QxdzfWgjnkyl6pbDuG0hna%2FFbNN95%2FM0rNdObVtsrDQDBJxcrvndSaEECXvQwnOo735Hj%2B7r947bJu1ASCRx8DBRKfFXa9YHpp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4605e8b6cb4b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14470\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57411,"size_decoded":15491,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (57310)","md5":"9b559a1d228cfb321370c76a97a07eee","sha1":"1b9442398a5cfba8a47a67ab13275a47d9309f43","sha256":"1e0f37d073666196b0848fd7d80d525268d5adf47ea1ec459632f05bbf8e1f54","sha512":"d50be313b06da2d42392af0fc4b785e8fe3a804a41457bac9332158231697a4cc5545e328d182b42f4c6d4c4ce277c9082f4ed78a01c3bb0d2648f76faeff267","ssdeep":"768:RiVBhwcy553dpJRDAtS7mB/xbUXIMilLqdY6LQQBGzq6nTXQmp2kf1:YVU51hRDqUibUX84HL3wzq6TPX1","tlshash":"1043e7c5f46234e123e7a27882bf11072376953a240d85a876a8ccf9897d99c533bf79","first_seen":"2023-03-12T21:34:04Z","last_seen":"2026-10-05T23:58:32.087436Z","times_seen":148,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/api/common/dict/allMap","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:35.511Z","timestamp":1791244655511,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"POST /api/common/dict/allMap HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: null\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nOrigin: https://gbwfwg.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:35 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://gbwfwg.com\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11582,"size_decoded":4786,"mime_type":"application/json","magic":"JSON text data","md5":"c2c62a1aa2accc9500ef31708121be9a","sha1":"8ee305e3ead5869b05e60bfa4a087bc26462b444","sha256":"6b4a9690f8f1b40399eafd6d7cb8a2009e48fe1585af958caf810da6b96bf2cb","sha512":"2360cf0fac582200022b9fdac07b71be0b11e5c37e977ed5f59e408ab85fd4edd23eea083ca6f442b203844988f6e742252d4c96649656f048710bf552265500","ssdeep":"192:awc4IL8VYRdt3AVBoHmMVsx3LQmgVMEjQLG//w9Sq8ugl37DP5fulM2kleZIbTAJ:awc4IoGt3AHoHmMVsRLQmgVMEjQK//wR","tlshash":"6732b9cfe643bdfadd03ac14d2ad64cd60bd2e765e48c6455d46b08b30b0042b62ab6f","first_seen":"2026-10-05T23:58:30.17523Z","last_seen":"2026-10-05T23:58:32.098227Z","times_seen":2,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/api/common/translation/list?lang=tr-TR","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:35.996Z","timestamp":1791244655996,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /api/common/translation/list?lang=tr-TR HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: null\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:36 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10,"size_decoded":310,"mime_type":"application/json","magic":"JSON text data","md5":"b9e754add75d51d888ce7585dc9dfe41","sha1":"0fd53114199a1a46e887032b7efa05f1fd74c807","sha256":"7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3","sha512":"6ea97d926607e77cda3275af2c3ba966fd45c1d4b4aa97b53d63a718f0941d93c1d4e67939885740dc6bfd59a0021ed049073ddfc61cfd0e8a5553efb449b539","ssdeep":"","tlshash":"2f500000003c000300030000000c0000c33f00000c0000000c0c033000000000000030","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-10-05T23:58:32.099116Z","times_seen":5451,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/static/poster/3.png","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.923Z","timestamp":1791244656923,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /static/poster/3.png HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 6052\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a8c663a-17a4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6052,"size_decoded":6292,"mime_type":"image/png","magic":"PNG image data, 133 x 165, 8-bit/color RGBA, non-interlaced","md5":"b01d2666f021b0e46b2f3208f0fabf04","sha1":"6915859d9dfb608c31bd45424d487acf7fe7722f","sha256":"e764ff9afa5c6ddec2f8dd46e7e45bc2286b4873d10e9086d82c13a979fe528e","sha512":"697fd1eed07d4ff44eb55a27b7fb0ee1fcef4408474f377394c4f3ccfba92b21fa5ced4bd914687216bd652651ef4843ecabf7cc0a7b1b5e88e47887a8fffee7","ssdeep":"96:O+4VlGmiTjbv836FNzkoa0PCA1nFTcHWVmh61p0GUqOuw4k8wm6C+AMdjoaESjsE:Ols9jbv850nVcs1phUyPmCGdjo7ii+p9","tlshash":"b8c1bfc736cfc791fe5164eda81b8354b82a293001bbf0cc941b75491b33d154e86977","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-10-05T23:58:32.115512Z","times_seen":31,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":313,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/axios/0.19.0-beta.1/axios.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:33.325Z","timestamp":1791244653325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/axios/0.19.0-beta.1/axios.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 23:57:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1185147\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:06:02 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vJkpaVcQ%2FKBAovlyZnfj4Wt5Ul0foBLApjGHAueDAc3EPiXq1OBrKU%2Fl1ScqxeRiBCwVCS6aF0LhOaX8YxiRXs5uTKDmQtvJKEm%2Fcj3nYHAybDWMwpt0ggnOHaG2OQpIH5vo029k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4605e8b4ca4b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4213\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13638,"size_decoded":5231,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10313)","md5":"334149adf44476f28bfbf16c7b0382c2","sha1":"ad2ea246ebb53ed655ab50d44b33d4d6f942387d","sha256":"6d2c0a450a04b5d1492f77d7e512fe6af26e95c2feac596825f45e71b9ffa4d6","sha512":"0f9d66a68e400a2499cc1dbd79331892e9e62e278d8b4784e354b7a281c91fcc1401eedb0857ff6911d842ea853d39081b459fbdc0e30d927ee93b5ba1ecdbea","ssdeep":"384:hpI8XyWPbWeAExXqgxH7RqzGbcQdVzxbUm6HwT9eei:LbXdyGbcczx/6QT9e1","tlshash":"f25285ce7861b0a757e320f0805f4a0fb2b6552a754d84a0f660e9f66db542e8733f5c","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T23:58:32.095085Z","times_seen":1301,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-router/3.0.7/vue-router.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:33.330Z","timestamp":1791244653330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vue-router/3.0.7/vue-router.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 23:57:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1188976\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:17:47 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NJ2OGgRtGpuScrYK%2F5YMcf1l14WLykGi50hbLGaejargM4YaDgybGlVPrh3iFG64%2BLyofg1N8gx44MeXsa9z86%2FurTXfb72rcOy0ZG1xDHW2G5jGJdiQaHeFTGRj9mlWINPG6JU6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4605e8b5ca8b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7869\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24822,"size_decoded":8887,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24752)","md5":"32e2eb91e6ed0512057b2ad1e6d1b242","sha1":"27809df1b99a4b81b6b82ba2985cdd4b1c8bebb6","sha256":"e8707a396dd2f8d74eaaeb2f784074a24d7a71cbe15dcc70297f726b31c160d5","sha512":"0ab7b445b586dd27a0aeb72396350982783129c9ba028ba1db847c9d2acc0de9c90c3c9636e76a21553fedf81031220f3676ea64bf7336644c04da33d744563d","ssdeep":"384:UUcnX3xpR5tumD+EaKGZRpqB1UdEPQFWmexTMCJ:7E3jXtuW+qGZK1UCP5mqMk","tlshash":"01b2c7ddb581b03547e326a0412f250bf27b358db44e8498f269e4d52cba85ec42bf79","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T23:58:32.096912Z","times_seen":1297,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs//Swiper/4.5.1/js/swiper.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:33.334Z","timestamp":1791244653334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs//Swiper/4.5.1/js/swiper.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 23:57:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1044775\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:04:02 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3S1xV5AYRWP3Q%2FJjZMrqfYWTnbSQ7vN%2Bmr%2FNFTP2snujuHkoYoWsFyELrQ7DwKpLL6z1rR0rf9by9hzXqXVve6SfE3d6MiBuuQJ3yepNh%2FPM%2BeyxFMdGsMY0uPlmWjFsLATiu7uz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4605e8b5cacb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28993\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128745,"size_decoded":30016,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65269)","md5":"2ac19265b38d14235141d184bca54d9a","sha1":"c725eb5a33d093e331e25c3a5ef1272b0f1f648c","sha256":"e2c1132a1877692ca2e8d46203eaae9cf6936b0a9230341c6bfc4b5aedbb1e0e","sha512":"6476ae51cfef0724ba254cff1e5d68f2cda477840954b01b933f1c9608ed6ca5094fe006d5cef7e5a32d54b25fb4a418a3e2c3eb642bcafa0d6bebaacbeac21d","ssdeep":"1536:O/pPCitsufJthaK85kqzOAkRlojU6tU8r5MhkhGllpcXvH7WcWUKcOqylFE8BtOa:+JthJkOAkaRaaGl4fH7WcWUKcOqjtYD","tlshash":"2bc31849b35071e551e72256539ed601a3b66845b90ac0a831b2d8d7acbce8c03bfffd","first_seen":"2023-03-07T12:58:52Z","last_seen":"2026-10-05T23:58:32.129399Z","times_seen":2606,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vant/2.12.44/index.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:33.337Z","timestamp":1791244653337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vant/2.12.44/index.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 23:57:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1189100\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 14 Feb 2022 19:09:51 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zBS1e0Dl26A0FUClUmklq1%2FRiDp9EpWXL7vkN3IhONFCBm5hCFevPvioJ%2B2C3cCW9RzSkCcdYXLOP4GrBJkReUCUF84iC6YZvKe6qIo6Vnp0c%2B16v%2B9H6em75Z%2BKricB1PXopUG9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4605e8b5cafb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38108\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143622,"size_decoded":39117,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9a547188fa485f8ca9b2cc7d6d2524ef","sha1":"7893335159a1f637eb24cd05aaba96ac156c7f65","sha256":"897e513fc70a4e1759ceb06ed3c9348d036b36b724dc60d815f9f3124de6f433","sha512":"23653fb8a5c2f4cbc15cb35f215f166150516d84b8bcc143aff2d9c73056ce8e33689ef0578010cad93ea2c2e04423d3cc9ee1f5535a6bcb1e2302e5d47da263","ssdeep":"1536:KUyCltWrqoK3U0iNEBVcZH5NHMja4drYaAfP1rz1jVLSV:KTeVc5HMjajXfNf/SV","tlshash":"e3e3c52756c0236cb31bcd219bc096c5e224c123f5121bfaf1517a2dcfdbb9616a2b5b","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-10-05T23:58:32.085182Z","times_seen":2276,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vant/2.12.44/vant.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:33.339Z","timestamp":1791244653339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vant/2.12.44/vant.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 23:57:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1057531\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 14 Feb 2022 19:09:51 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oWi1AtJRxfqBeMfZ7I%2FiE6Nxef154BlbnRMDridL%2B3neVv350IWMjSsfghPOKcrrV2YzzM%2FjURqvhUER0cUmZM6gffkQmaWg3qbA9a1bDdieB1ExgfILIn84nsA6hHFPf0z087BS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4605e8b5cb1b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 67557\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":278598,"size_decoded":68576,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57307)","md5":"bd964aefdd330a73c62c045d6b31e66c","sha1":"f7021d4ccab3188fc2c0f7ad8c51f88cda28172e","sha256":"4e685208d134a61fdf4e8fa18b054f5ca2b522813f9bf591db4ac4b42ef16598","sha512":"b9c22baff22e7711c36f2091e37825b9e865ce1d2ec8476f697712c62c51e4604a961e8182950a67cedd060d7ebb720784fecb4f4b46f8d98164badd580dac0c","ssdeep":"3072:RuhM/vLqNdJXyzFg0xnnx7XJ2pviRq4jtSr1GM6TyrfXc556SdryZMyR7:MhM/GU6KRBx+rRSPyR","tlshash":"be44e78ab1c5b425079770b5403f110ab237298cb81a84dcba79e4e66d7ca5ca13ff7d","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T23:58:32.119325Z","times_seen":248,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/css/chunk-7f5013bc.58af5d2e.css","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.236Z","timestamp":1791244656236,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /css/chunk-7f5013bc.58af5d2e.css HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:36 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a8c663a-7df\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2015,"size_decoded":978,"mime_type":"text/css","magic":"ASCII text, with very long lines (2015), with no line terminators","md5":"72a0c2f5d2b69afb8236bc4c37b1cd70","sha1":"3815e13b631dec6da3a47b1ab03a8519783e03af","sha256":"821c484f8f69fc70ef441f4d52ba5535333475e47aa9cd786fe12f9353402428","sha512":"4efbc12b2ca9f069a3a60bf3c4da3492bcc26e8748b03710be106ee10a3d29e888bdcc59cd81fb53c1a6965ac16675df49b9d06660452806e398843d7c2c9580","ssdeep":"","tlshash":"66416023a1fc7e189137d8c2d9285d9502e4da23d11623ead89b1f208fc70432ba32ce","first_seen":"2026-04-19T23:00:56.535316Z","last_seen":"2026-10-05T23:58:32.136508Z","times_seen":3,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202505/27/f27234ff6e694fbe83fedec355586d21_.jpg","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.823Z","timestamp":1791244656823,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202505/27/f27234ff6e694fbe83fedec355586d21_.jpg HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:37 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 274396\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Tue, 27 May 2025 11:44:03 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":274396,"size_decoded":274693,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x675, components 3","md5":"5307b470720668849c265e03d60397f1","sha1":"4c9454d2809b8a9205b72e3b2fcb9c8e3fb79fad","sha256":"487a7e7c809b81596a335bbccad911b91161b61a1f313e092888074ade67eae3","sha512":"539fece773963680aa50785579e9b0763ec7d824d09202a6323d2b02abc6295e0b74853d6755e4271b6aa8163a1a6b58f45f9ea36c749d336d9192a9f012058e","ssdeep":"6144:oX0Doyv0Qyv+tXwO5nv1lVIcnEpnPmm6rX2853i5YydW:oX4oXQkWwO5nvLVIcanqmIydW","tlshash":"f4448a3c1a3464afd2cf2e66827646d3a76b5b51e21f42b2e981d5c3ab733653312c4c","first_seen":"2025-04-09T11:39:55.922244Z","last_seen":"2026-10-05T23:58:32.144178Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1834,"timings":{"blocked":-1,"dns":0,"connect":226,"send":0,"wait":455,"receive":695,"ssl":458},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202503/12/c96664d73924432ab0f94087a2dbe2f3_.svg","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:37.043Z","timestamp":1791244657043,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202503/12/c96664d73924432ab0f94087a2dbe2f3_.svg HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:38 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Wed, 12 Mar 2025 16:25:31 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11765,"size_decoded":3577,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7789cc1608d81d60e4af53e49a60e00d","sha1":"9a9011139f0d4dbcccfef0a4b6e4c859e0854709","sha256":"3ee53eefcd543bef73823f832c824e130227e282992b489d5c039d26f09261a3","sha512":"1fabd591b90fa078778b5fd015ca651a7cb0898f915b81c7304ae3cb20dbe778847f1c7eaf91834af87b5f5450da803c2bd059b755eb05d8f68d5628d3a7abfe","ssdeep":"192:/kA8KvxGdNdTXIwv+xIrLcnok7+uzXdI16RcvIxYg+0JC1:sA8fIarLckHFIGD0U1","tlshash":"42326284a7b994d1a28e46b09ef12a0d4f1968e307210c553e5c8c74df66fc2b39efc5","first_seen":"2025-04-09T11:39:56.040413Z","last_seen":"2026-10-05T23:58:32.12708Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1281,"timings":{"blocked":1050,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/api/banner/1/list","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.549Z","timestamp":1791244656549,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /api/banner/1/list HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: tr-TR\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:36 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2862,"size_decoded":979,"mime_type":"application/json","magic":"JSON text data","md5":"96320b4c4c0b66bf7d08e2c8595f6665","sha1":"095e2d34e14b9f21f769533e911e8b5501edbd03","sha256":"58801e99d977f486835e856c7e196b75b98613e3d64b2146cac2287465b885eb","sha512":"72d99a2a9cf4c846bdfa892bebb09c68e68414356bf227e07989d9640464e3c14e1d38adce1bb7385bb8adf6337a81481c06e7521128e7f7d403e0baa0dd5f6a","ssdeep":"","tlshash":"8951781ad2b6fcb95aadc08385dbf449e4ae722bc4c81b903681cd5c84ddc37a54d42f","first_seen":"2026-10-05T23:58:30.214729Z","last_seen":"2026-10-05T23:58:32.146887Z","times_seen":2,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202505/27/353da4e0261242fc812e9393bc98f3fe_.jpg","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.831Z","timestamp":1791244656831,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202505/27/353da4e0261242fc812e9393bc98f3fe_.jpg HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:39 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 116752\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Tue, 27 May 2025 11:44:57 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116752,"size_decoded":117049,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 1619x906, components 3","md5":"7bd4aad0d59fb63fdad4bd59f8e5ae75","sha1":"a54f29c4e6cedea6c6422dc276100f5f94b180b1","sha256":"8856d9da15a6fce80001e952ad8fad6d836c32cc32f55a96bf31cc32de715fd1","sha512":"d3ec8b99643385a47913dcff53a9e8d0dfeed639dabc2a1e5418bcaf66d04de60c23fac3fa2464c5dffb4cf67559be3ae8614f822bc4aefc41b6ce0879af05e9","ssdeep":"3072:9lMqG080JM3bv7lUrZD6ZbzamKYDm5GjCBc3dxln6Wbb:xdirpUFKbPDiGjR15bb","tlshash":"88b3125f5f7c65f6c994107b98baa7b116188af2afd1f83b922f7202454f2f48c50368","first_seen":"2025-04-09T11:39:55.896325Z","last_seen":"2026-10-05T23:58:32.094291Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2609,"timings":{"blocked":2361,"dns":0,"connect":0,"send":0,"wait":231,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202503/12/6b7382d03f4e4b09a35def93734057b7_.png","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:37.046Z","timestamp":1791244657046,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202503/12/6b7382d03f4e4b09a35def93734057b7_.png HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:38 GMT\r\nContent-Type: image/png\r\nContent-Length: 26714\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Wed, 12 Mar 2025 16:25:59 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26714,"size_decoded":27009,"mime_type":"image/png","magic":"PNG image data, 3840 x 2160, 4-bit colormap, non-interlaced","md5":"b6ff237ea071602db7444cf6c50c7460","sha1":"68cba3d66cd4d96071f722c4a8d011ab32dbf551","sha256":"e5dc4a0776b209527541ecad67009ca053b894ada41aed1654356bf45800e5c1","sha512":"068e0404296b8b8c7425957cc77f886c0cc7a436678c02d2005dc4572b78724508bbde2caf9a5af4f9ba490f89fac6e91243e829e65162e61afe97f432d475d5","ssdeep":"768:K/jQoIkFptqRtVWIJV9l6DA+P/mwd1ghHw7wuz:K/jQoIko/cI1l6DFmwd1GHw7Vz","tlshash":"0cc2e1b0d34c1f8cddf1193b67c11e0a078ec639169c88e772515472aadcca85b2e93d","first_seen":"2025-04-09T11:39:55.929626Z","last_seen":"2026-10-05T23:58:32.122673Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1594,"timings":{"blocked":1358,"dns":0,"connect":0,"send":0,"wait":234,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202503/12/2dd0b50128cb463b8e984551c0b1fbc4_.webp","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:37.047Z","timestamp":1791244657047,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202503/12/2dd0b50128cb463b8e984551c0b1fbc4_.webp HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:38 GMT\r\nContent-Type: image/webp\r\nContent-Length: 25660\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Wed, 12 Mar 2025 16:26:10 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25660,"size_decoded":25956,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f721f949c8bf362e69155dd809151c2d","sha1":"d8c2d62a6f2e74415d38def44ba11d3db86485b4","sha256":"27528abe692e29c597ad1749e82968b134bfd96f9b20b48de85a673f5e45e7d3","sha512":"3480fd73ca010e0f20f545d5b87f35730e204a85408b0c085a3ac656426c40d4cad6b4e79ec2b0f24c95575bbc550595fe33c0f7814acbf0355e5e04ea0a8634","ssdeep":"768:y4axRbmo2fUslp21EF5N74HE0p0OlqLUPP:f9o2fUslwaN7h0jqMP","tlshash":"fcb29d822b9afa78c83d72fc0602e45c75b6481f94e4570c40cdbdda1a3ac90e97d6f6","first_seen":"2025-04-09T11:39:55.890074Z","last_seen":"2026-10-05T23:58:32.108446Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1738,"timings":{"blocked":1506,"dns":0,"connect":0,"send":0,"wait":231,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202503/21/83c2f18143484b82b8d8d60c9ac91d59_.jpg","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:37.054Z","timestamp":1791244657054,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202503/21/83c2f18143484b82b8d8d60c9ac91d59_.jpg HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:38 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6265\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Fri, 21 Mar 2025 08:56:00 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6265,"size_decoded":6560,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 324x96, components 3","md5":"362d35d07f18c36e7cdcddab100d93bd","sha1":"411b519df77ee4d34f53f32b21422638eb4bb583","sha256":"b4a81775c0089b42442881c672f30217a65bf915ef8716c3c7d84b38151e25af","sha512":"95d9a0eb660898b85ad5ebdbab1c63b613c6994df61cea542803b171c928bac6aee63a61d69a7e90657ea838f73c08fb8611032aa549bbcd3b4b9313f1cf6c30","ssdeep":"192:A8Yptz7MSyl3HXdPUbJiJzjPE7toHBsSBp/W:An7zD83NMiJvIoHmWs","tlshash":"3ad18c1ac304a7abe98a103501b34a426b4d7e2f6888add4bcb0d1759afdcc1781d1ca","first_seen":"2025-04-09T11:39:55.93546Z","last_seen":"2026-10-05T23:58:32.162766Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2022,"timings":{"blocked":1791,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202503/21/e8dd72e17a3a4bc7bc25500c7463dd3e_.jpg","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:37.055Z","timestamp":1791244657055,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202503/21/e8dd72e17a3a4bc7bc25500c7463dd3e_.jpg HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:38 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8801\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Fri, 21 Mar 2025 08:56:11 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8801,"size_decoded":9096,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 320x98, components 3","md5":"5a9333534342cae47edba75949f927fc","sha1":"b3f9885806727ebece1830b967bd58a353bb5a9e","sha256":"4066d69d770c88b8a607b8bf70d42537d4297ffcc1f119a62fb284b0ed693417","sha512":"06c0e2905aca33b26df8223d6e5967a837e771eb21e2e2bbfc9807169c9c2b94a759be1f752a0bcda303a991ab5b893e9085540c2f5a42b1540435b450f87de2","ssdeep":"192:A8I2eMb/vEF/TVA5bewYYYY5vamu1U/xIUZZUQ4VVVV0RL+Mx:AYhDEFRmi11UO4V+Mx","tlshash":"37028b8b8723a019e12386f2809251bed0656c13ce571b7df94f717b2cb99c06b5d88a","first_seen":"2025-04-09T11:39:55.954254Z","last_seen":"2026-10-05T23:58:32.1093Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2058,"timings":{"blocked":1827,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/js/chunk-vendors.0959c18b.js","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:33.318Z","timestamp":1791244653318,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /js/chunk-vendors.0959c18b.js HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:34 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a8c663a-cb1c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51996,"size_decoded":17916,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29775)","md5":"59718baba413ffce8af627b8a687fb33","sha1":"7ad82303fcd29efcdad03df36319183f8787d4c8","sha256":"95732ae511ea64b6041ef117de0b516f6523a1d657c809f3117a0c9fc42fdf0c","sha512":"9a8210c594b1ff6caec54315030f045a86dcc4d2fdc681a767730e524dac8240f6038b6ce225bce1b0415f7ebc802d7fc47102fb86069fc6baf6d037790e8dad","ssdeep":"768:WscXuLZN8ZzldBKOpNtWVw5iVJonYrQBOJJB2GfJbrCGVuZgdpGd+cH0iIWRiAVo:5cXub8Zzl7bD/YowQKL4+cHdIziAAg5l","tlshash":"4533c788f2e6f074479761a4402f600bf279ad55744e88a8f225e4d1bdb8dce847bf38","first_seen":"2024-06-11T23:26:00Z","last_seen":"2026-10-05T23:58:32.154894Z","times_seen":135,"resource_available":true,"data":null}},"time_used":1147,"timings":{"blocked":-1,"dns":0,"connect":227,"send":0,"wait":461,"receive":0,"ssl":459},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue/2.6.10/vue.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:33.323Z","timestamp":1791244653323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vue/2.6.10/vue.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 23:57:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1039563\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:17:48 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=35Ak9Jq4vysL8E%2FrQCAU4pIFKylikZ5d9wBMm7VLbP7SL551%2BK%2ByWKJCc1P2da9t0eFDcIikSfFa%2BNy%2ByLLGYd8V7INcCOlQMRlsNUqFA1we9qXbpsdMMDnX42BzD1PFWcQIMWQi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4605e8b4ca1b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30769\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93675,"size_decoded":31792,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65449)","md5":"17e942ea0854bd9dce2070bae6826937","sha1":"434cdec1669f2c6c7406297a72120936bc56ed52","sha256":"72194d152571dd375c4365e5c3b4af9db2c06af0102ced18fcb062597d38be26","sha512":"3f0439fa3817c71a6b34673cd32707137b29823e93b8389e1deff24e46c427e5396a897b753ba98bfe156f01c7ce54155bbed56f418b388b22622807802e6f72","ssdeep":"1536:1UXY7qLtpHt2Pqe1mZ8I6H82RaLiMBlo2VV2B/S/g:MYeJpN2yefjMBlPV00/g","tlshash":"529308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","first_seen":"2023-03-07T01:18:07Z","last_seen":"2026-10-06T08:30:39.17167Z","times_seen":4812,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/api/poster/homeList","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.553Z","timestamp":1791244656553,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"POST /api/poster/homeList HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: tr-TR\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nOrigin: https://gbwfwg.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:36 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://gbwfwg.com\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":678,"size_decoded":634,"mime_type":"application/json","magic":"JSON text data","md5":"37b8d9f1f68623d24b74bbb87fd18cf6","sha1":"58dc39a3fa43bf755360b56d271f8c1cc98f6b87","sha256":"dcba9827e521c0ceca3a28069d018dfb23dc58130d7e236bb004a7f9a9ae9edb","sha512":"6b1f33e5dc2b8dae585514ce1381b840a55f7c36b28ef2374b8cccbe40d4f3c9bfc6006547a886942a553aee33ccce05bcf758196ebf461fd4f21cef7a66c59c","ssdeep":"","tlshash":"c101df14d2bbfcfe7403d086441ee08ed49d773baae173042aca8b1c4629493a91d8a3","first_seen":"2026-10-05T23:58:30.226376Z","last_seen":"2026-10-05T23:58:32.132212Z","times_seen":2,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/api/banner/5/list","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.554Z","timestamp":1791244656554,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /api/banner/5/list HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: tr-TR\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:36 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2500,"size_decoded":929,"mime_type":"application/json","magic":"JSON text data","md5":"27f86fc1d652a213a915a6a0ace7df72","sha1":"947f392a1ef4732ac5a53d013d0810342d4873eb","sha256":"e0329263e8328542bf2a7d912918fcc1698a02dbc4c0507ec58e10d1f019cff8","sha512":"2382402bfcb30fdb5652fc92f7a2730f97e5907355ace7e381cff6f92eeefa0c89b3acdc409da62b5dee47210aafad8808b3404a968c1e831ab0e6e240429973","ssdeep":"","tlshash":"2d51ab0992b6fcf89aac844345cbf985d4aeb22fc4d457d832d1ce1c818d877a50e52f","first_seen":"2026-10-05T23:58:30.228186Z","last_seen":"2026-10-05T23:58:32.15156Z","times_seen":2,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":227,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/static/tabbar/mine.png","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.561Z","timestamp":1791244656561,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /static/tabbar/mine.png HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 1848\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a8c663a-738\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1848,"size_decoded":2087,"mime_type":"image/png","magic":"PNG image data, 42 x 46, 8-bit/color RGBA, non-interlaced","md5":"feedd3f006c5e1f1faf22cf2ee250c39","sha1":"838e94489b8cac4da6b3eca3274dd25204bb70d7","sha256":"385b2888b16f8eb27611e9296b5d4ec60f4d75361603d51d6c8d54706f81331e","sha512":"c7656c033ad34733d8f8cdc3d64241c64b7a5ca3184a8a418f458b9c39967c7def37d7a34818c7aaa3f88628232f0d822ae06cf4fa891bd8a5ae48ffee94be6a","ssdeep":"","tlshash":"053109803b1ad87e32264f33e7723d9ad6341368ca10032610b12d80b1099fa06fd6ab","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-10-05T23:58:32.125907Z","times_seen":94,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":448,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202505/27/0fcfaaf31c594c98836c4ac1c2d80abd_.jpg","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.828Z","timestamp":1791244656828,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202505/27/0fcfaaf31c594c98836c4ac1c2d80abd_.jpg HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:39 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 54375\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Tue, 27 May 2025 11:44:18 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54375,"size_decoded":54671,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 686x386, components 3","md5":"8fb69efae6225ceb6e016c55f9098c92","sha1":"d2e7578c28a0a4f0d6b021f7d5615330cf7136e7","sha256":"1571727b8af30f6a32859176852dea714f2e117036f2aa9b8c33a67466a4e0cf","sha512":"7cf5e0ae12ebc82e3d484df6c5a096cfc709eb2adb96dc490a06dc5a0adec1ca6e0ce8e160b403c0747b8e011a7e2c01225dd2ade3718de8c12c1083c3b64342","ssdeep":"768:yG+sGsnG4tXh/NzRn0GmgFrriwBUXm31b2DrzSt2V2ns61J4QjII7reXRT9LhAV4:yrsGutXh/DQqriwNwLss6yh2G7","tlshash":"b13301f9b8399c63975701d12829c728f29a6a2c927b7473e4c1075e71ce5663eaef00","first_seen":"2025-04-09T11:39:55.89183Z","last_seen":"2026-10-05T23:58:32.093216Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2477,"timings":{"blocked":2243,"dns":0,"connect":0,"send":0,"wait":231,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/lib/mobiscroll/mobiscroll.custom-3.0.0-beta6.min.css","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:33.309Z","timestamp":1791244653309,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /lib/mobiscroll/mobiscroll.custom-3.0.0-beta6.min.css HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:33 GMT\r\nContent-Type: text/html\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a8c663a-3ce2\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"SockJS:1.6.1","description":"SockJS is a browser-based JavaScript library that offers a WebSocket-like communication interface for applications.","website":"https://github.com/sockjs/sockjs-client","common_platform_enumeration":"","icon":"SockJS.png","categories":["JavaScript libraries"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":15586,"size_decoded":4998,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (12026)","md5":"d9e4a62081acefbee3039517c97ea5ed","sha1":"ec0d0be6345d59b2641fde0a1adfcc29ec02c83b","sha256":"61a4239fd75cfb9f387e2f7342f67704d0ccfce5fc12b19d74063ff08f18c87f","sha512":"5484511dcab808fa3bf58b6c6de1b88edc20a3b82a6ac073f2f926d812a67824ae0963f62b67f523e48b1282e1e906dc6fbe9a2d437277e59832817e1a9f9827","ssdeep":"384:d1J0CtvqU4TZh4p3Jsr4z21PLMEE4AJI7QntyztMKaZ0W1nD4:d1yAyCaRJkJI0ntyztMKaZ0W1nD4","tlshash":"aa6253a9c60058edf5a2ce8f5a74bb6994e77c773931d484f26d884bcf18fc4162608b","first_seen":"2026-10-05T23:58:30.232532Z","last_seen":"2026-10-05T23:58:32.084319Z","times_seen":2,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/lib/flexible.css","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:33.311Z","timestamp":1791244653311,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /lib/flexible.css HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:34 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a8c663a-409\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1033,"size_decoded":839,"mime_type":"text/css","magic":"ASCII text","md5":"ff3955ccaab30b6705c564ec20327213","sha1":"b6a9a1cd9cd27a7791f43758a360dad129ed2802","sha256":"1a61c02df0ce591e74ffac300f6c2e2ab3614ec95a9bb2f8d29aa6a9ae099deb","sha512":"a9fc65c1298158177afdf10a06e723b893187150ee4f73bdb16b842d140bd0881d53da1a109fa051c0eb44a419ccf27afc072515f23a632d3bf64a69c7cbcd1b","ssdeep":"","tlshash":"631175315350b490a4f78e33320d955865304352cc378a60f320f198d5e203b27a2b8d","first_seen":"2024-01-12T03:26:58Z","last_seen":"2026-10-05T23:58:32.110129Z","times_seen":280,"resource_available":true,"data":null}},"time_used":914,"timings":{"blocked":-1,"dns":1,"connect":227,"send":0,"wait":228,"receive":0,"ssl":458},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:33.328Z","timestamp":1791244653328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vue-i18n/8.12.0/vue-i18n.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 23:57:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1188539\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:17:47 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ENHs2k9HipB%2BwGKVFwc7B%2BOH7iDVRCoDZnS8UpqgQSCn2i2VlV4zlDiJBC2KJiaFMyAHKJgqhFDYIg%2FqszsR6RnvhcPz%2BAdWHsX9NizF3K9rtWjEswFlZ6WUzYBQSYhQVxUoI67Y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4605e8b4ca6b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6201\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22805,"size_decoded":7221,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (22712)","md5":"c019be63e713ce6f2aa221c0df8fa0cb","sha1":"e5471888945144f233714d470959059c010eb667","sha256":"87e6aba4bd25be4196ad7f269a62de823242abe105df538f218d4e6e268f74ce","sha512":"6ca3ae5fb17dc20a2c27d4008454feb7cefc626bf104252354c1abd0977f73a315001d94293a7d4379ecfda6ba21d3f49a992f243a6f9249c935195527d407be","ssdeep":"384:BPdUYakDlUGQrDQxMQ4rJaT30WCxQI1cg:DUYzhUGmUMQUX3","tlshash":"cea2b7c6f56270270a9260e5183f1107a33f241d648d855df2d6e8ee2ebdd8e91a3f39","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-10-05T23:58:32.112193Z","times_seen":1275,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/Swiper/8.3.1/swiper-bundle.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:33.340Z","timestamp":1791244653340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/Swiper/8.3.1/swiper-bundle.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 23:57:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1045910\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Wed, 13 Jul 2022 12:01:24 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GtB32R%2FmDAB9SmD1mTc5yV9qY39%2FMkFqoLsQa6YlosRdY8CJTrrTInvGyM2ObzFgPJyvOa0Q%2BVFb7%2F9WmL5ii5Gk4Rxg%2BRA8FpBcI65CsDpLnSjk%2F8Jm9pE8IcAUuRNcGymIxBHJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4605e8b6cb2b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4219\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19297,"size_decoded":5229,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2240)","md5":"dc42cb727908d66cfc974a6f55cd237f","sha1":"18a5e51a20f48241f660c87214ca0d38c662fa63","sha256":"de3aa2bd1edb484896d8b84bb8aed72f913eb094961ee10277fd908158cbed00","sha512":"e531910a5de13e8aadaee84efa6b9b4eec921ce7dc101bf221f8961e808af300cb99fe82d54ef7394a0d094e99bf24fff2f7c27216b520d0c8a3c75a6c39908f","ssdeep":"192:XbaCmUJbiKnectoOJ4PQ6UpqWaJxYG6OdbG68FWPLF9FFDE4bRswwMclce7se6tS:XOUbecnOPjUpTlGrGATF9FFE4b2xlh","tlshash":"bb82029853b01c1326274e7a1a728774ebb854810b4bdd79e2c06d48dff99fc631f2a5","first_seen":"2023-07-11T11:12:19Z","last_seen":"2026-10-05T23:58:32.105768Z","times_seen":159,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/api/banner/4/list","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.551Z","timestamp":1791244656551,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /api/banner/4/list HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: tr-TR\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCache-Control: no-cache\r\nX-USER-TOKEN: undefined\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/m/index\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:36 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10,"size_decoded":310,"mime_type":"application/json","magic":"JSON text data","md5":"b9e754add75d51d888ce7585dc9dfe41","sha1":"0fd53114199a1a46e887032b7efa05f1fd74c807","sha256":"7a97b9b4d758a3929b8a2be53fbe189c9ba9378d6fbb8190d37f7cc14f5cf5d3","sha512":"6ea97d926607e77cda3275af2c3ba966fd45c1d4b4aa97b53d63a718f0941d93c1d4e67939885740dc6bfd59a0021ed049073ddfc61cfd0e8a5553efb449b539","ssdeep":"","tlshash":"2f500000003c000300030000000c0000c33f00000c0000000c0c033000000000000030","first_seen":"2023-04-06T21:01:20Z","last_seen":"2026-10-05T23:58:32.099116Z","times_seen":5451,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202604/02/e00081e3264944e2aace261cc30b6745_.png","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.555Z","timestamp":1791244656555,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202604/02/e00081e3264944e2aace261cc30b6745_.png HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 386103\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Thu, 02 Apr 2026 08:15:41 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":386103,"size_decoded":386399,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit/color RGB, non-interlaced","md5":"de6d7297114829c8ad9f16fa0bdfd3bb","sha1":"bd593f8d03475eacc1ec5d8ad9a18c645ec208c4","sha256":"822d1d0c02e109b7f7aa48c3a5cce0bb28bc383684472cd8c3c829a1e3697265","sha512":"161cda45a7045537ee8586df9b781fff181de858cfebceb0f2dc1ebe644d3fb8d2bc7ca86607385180b78e4d6b01e3139f6ecaaccbcec159d94193c1082080fb","ssdeep":"6144:1sY4ESmEK2Z2t1A+AXkufc1NJiz5dbpRcCVWqT1SsY+T0r3TXIb5Twxo6XseCfSP:1EESob1A+kkufWYdDQL3MmTIb5ExPXso","tlshash":"888423f4c7e697c207b722b6287ae1ef91d93add469b1e8185d8904bc3bd2c8c50b117","first_seen":"2026-04-13T21:35:05.165005Z","last_seen":"2026-10-05T23:58:32.091027Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2059,"timings":{"blocked":-1,"dns":0,"connect":229,"send":0,"wait":461,"receive":910,"ssl":460},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/js/app.2623df1f.js","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:33.316Z","timestamp":1791244653316,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /js/app.2623df1f.js HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:34 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a8c663a-1256a4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1201828,"size_decoded":341411,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52718), with no line terminators","md5":"0ef7d768ec2f534edc58b25531fc065c","sha1":"eef18c80df81fbebb70048536b8b21188a36fd03","sha256":"132fdef2b93d6fa4350eb19889d8438fd36d8414e974dfa5fa1b7f9760504ed9","sha512":"3a3d2ce5b591729cbc9280da03853c3491e58528e4f11deec4c4844a35c15bf9b61240f95cfba3e5187832f343fa3724cf153a2e9ec78127dd8ce58a17b64322","ssdeep":"12288:w+Fn64hZIflEQrEf4oY0q25hR5uZW2xp2GFgA2A45rLoEkYzEPAyB2oaPG9jV3Ng:ffhR5Q9a","tlshash":"a0357c9427efb3b51182d545410f3a3c521a0fbaf256e1919c76b58839edfb08237ea3","first_seen":"2026-10-05T23:58:30.240081Z","last_seen":"2026-10-05T23:58:30.240081Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1834,"timings":{"blocked":-1,"dns":0,"connect":228,"send":0,"wait":464,"receive":691,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/static/box/bj.mp3","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:34.631Z","timestamp":1791244654631,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /static/box/bj.mp3 HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:34 GMT\r\nContent-Type: text/html\r\nContent-Length: 15586\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: \"6a8c663a-3ce2\"\r\nContent-Range: bytes 0-15585/15586\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-06T08:40:58.537568Z","times_seen":18880122,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/static/icons/ic_notice.png","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.557Z","timestamp":1791244656557,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /static/icons/ic_notice.png HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 402\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a8c663a-192\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":402,"size_decoded":640,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"abb53fe2e63bc5822dd24dee0403af75","sha1":"c8fa28643c580911924cfb5b4cf52386dcd8d1cf","sha256":"e380df313a08bbd6143377dcf272191cedba3d76a34e345b77f5935ad6481d94","sha512":"1d8f659b09f0dab32ceda5f7f5c1922b2d3c35ecbc0b7af5dcfa3138ac1fcb789e183ed601f60313bb5b91945eaeb5d164d4b6788def7d204d36710ac2463206","ssdeep":"","tlshash":"6ae08185f5238970efe6313e3c06290cc871a89c3a2482bc288e342c7a0740c47e0921","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-10-05T23:58:32.166079Z","times_seen":60,"resource_available":false,"data":null}},"time_used":903,"timings":{"blocked":675,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/static/tabbar/grab.png","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.559Z","timestamp":1791244656559,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /static/tabbar/grab.png HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 2181\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a8c663a-885\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2181,"size_decoded":2420,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"473a27c1195489a54d77717d2745ecc8","sha1":"afff5e5e9c8252bdcb0d620510d00d6ebf1ba7f0","sha256":"564dc8a0df824a34af42659eeee924adb20dd4a21cdc71d58ce8ec21abb3a7f7","sha512":"072ccb3e27e200e3363a4fa9d86d012f0f388b906bdf6835bfb09782e27a277900fd6f785d350db60c79ab0222dda7c2d2320fab57b7b41601558ea2a26fd789","ssdeep":"","tlshash":"66413cf380630c7ead1bf45da5814a0da5256cd81e3b903c95291d7ae04b2f0b8294cd","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-10-05T23:58:32.137314Z","times_seen":94,"resource_available":false,"data":null}},"time_used":906,"timings":{"blocked":675,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202505/27/2c105fb06134472ebe9bb02f0d90e027_.jpg","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.826Z","timestamp":1791244656826,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202505/27/2c105fb06134472ebe9bb02f0d90e027_.jpg HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:39 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 50091\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Tue, 27 May 2025 11:44:13 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50091,"size_decoded":50387,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=176, yresolution=184, resolutionunit=2], baseline, precision 8, 1024x576, components 3","md5":"185c20557dbc912269a6fc4563e1ddd3","sha1":"b59de79461f6e9c81cb06bd89e31d8ae19153a7d","sha256":"f03c742f6db468a74fdc749e95199130cb409cd98053deb9c782a6f324f37373","sha512":"11bb4e0176d462bc35b947b55d2de5321fa0a4ea13405968bd3135263cdcd490a9b1532970a25adaca4c97c9f54e3684460137c79c85d386189825824a507350","ssdeep":"768:x+LYlCl5Y4Ks8q3TCZRHfxoDQSLzyqSdt4zvtiWxQPY2Zxe4HcB93glaZRNZ9X0P:x+Up4KCGXGQwyqS7QP4znU3fPs","tlshash":"e623f1043d95af3bd8953fba05e62ed88d5319a06587848e70acdfc7efc64905cb0267","first_seen":"2025-04-09T11:39:56.062479Z","last_seen":"2026-10-05T23:58:32.100336Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2422,"timings":{"blocked":2187,"dns":0,"connect":0,"send":0,"wait":233,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/static/poster/2.png","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.922Z","timestamp":1791244656922,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /static/poster/2.png HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 5419\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a8c663a-152b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5419,"size_decoded":5659,"mime_type":"image/png","magic":"PNG image data, 133 x 165, 8-bit/color RGBA, non-interlaced","md5":"bac31cf2fb3727165b214f503693b3c0","sha1":"1cdbf93b2035b930fe1dc631b90b150a2a3244d5","sha256":"d9032a8cc5ce594627f9e88a70b80240c75328fd397a5e0a29543ba2178d0ff2","sha512":"a5c5db9b1575e601d1f05e9ce576b566f5422d19fa1f96939c4606e3348e539636a4146de2317d5c1f15f591bf288bb2444e394449d76dba861313f165d79a1b","ssdeep":"96:ezDT8o3dpY+P+VCv2KgnsbdYVI1eDAOj+SoAEIrqQ6pjkWm2UCKvTpsRF9Yus:uM9VcgnsLcN53Eh5X7PK1sj9Yz","tlshash":"b5b17dc0278cb4f8fbd1eb3125b809d08951114a895bcaa61775830d5aad70753eb3a1","first_seen":"2024-05-14T19:58:50Z","last_seen":"2026-10-05T23:58:32.139085Z","times_seen":34,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":309,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202504/28/1b8672393f754cdda7185bae293c490a_.png","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:37.038Z","timestamp":1791244657038,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202504/28/1b8672393f754cdda7185bae293c490a_.png HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 37616\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Tue, 29 Apr 2025 05:14:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37616,"size_decoded":37911,"mime_type":"image/png","magic":"PNG image data, 2560 x 1189, 8-bit colormap, non-interlaced","md5":"e5b016cc22b969a8c8822e0a24912f04","sha1":"72db9de00047fc9885c4116253d6fca3e25b952f","sha256":"f936ee367cbbe365389cba0cec8c445665a2fcfc1e0ad5d300a9f6c55928b4ae","sha512":"9f3700384f72925782ec077330fcb95f91cf8f2f97dac1ed42ddf42a9198eb0bc2e494bb513bfa94f5c10ff87c0d09f73a9607460032449223283da6eef248f7","ssdeep":"768:rtBipjYJ+UaOldYCr5CqjHzhhjI8FJqDTB+a0ZbNaYs2Rg:Z00JSmHxTzjjWBUAYfRg","tlshash":"03f2d0c2d2290c78c1b92771b2634b58dfe1bb5a77f1c1c1a761423ec665c486e17fa4","first_seen":"2025-05-03T12:31:25.083452Z","last_seen":"2026-10-05T23:58:32.103484Z","times_seen":11,"resource_available":false,"data":null}},"time_used":822,"timings":{"blocked":590,"dns":0,"connect":0,"send":0,"wait":230,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/lib/flexible.js","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:33.313Z","timestamp":1791244653313,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /lib/flexible.js HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:34 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a8c663a-fe7\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4071,"size_decoded":1620,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"2481028b2f8ae3f9f9c15d0899705aab","sha1":"175d394457b861cf64b9347d243fe3f179048faf","sha256":"5fc76e812ff59a1e0a2faecfb1db22cfa4af69efafef2f3bde03494d543acc1e","sha512":"7b48ed3af9b9330ccbff7a8a9b7dbb1eeadc4356acc22f68a821d435b8cd85e82bc453d489355ee0679cd5ef98feda4c0be8599a0568c1a20bd6d8901669e5f9","ssdeep":"","tlshash":"fb81322806e722361e2330348fbf210539728067055ace447d5ee79e6fe4a654ef6bf5","first_seen":"2023-03-08T08:46:29Z","last_seen":"2026-10-05T23:58:32.148892Z","times_seen":293,"resource_available":true,"data":null}},"time_used":911,"timings":{"blocked":-1,"dns":0,"connect":227,"send":0,"wait":227,"receive":0,"ssl":457},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vuex/3.1.1/vuex.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:33.327Z","timestamp":1791244653327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vuex/3.1.1/vuex.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 23:57:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1641119\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:17:51 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YdoXzynqpgjIIntC38X85yTtCESzCkWerBlGsSc50APTju9bkeDWa%2F9lt4S9uShA%2ByEKGIrcKw46BHajjOx%2Fq0I3xIDBu1IT8M4JtkxjXv4Pf1NafQiqmtZpH2mtvkk5KbQWdpAg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4605e8b4ca5b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2776\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9875,"size_decoded":3794,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9815)","md5":"c66594705de51675f08e3b83b9b9b38c","sha1":"40fa40f722043957a56324174ec6f80389391971","sha256":"e973901e74ff65888bbe2e58b95cfb957d5db316bb185a106f543d99176d1d65","sha512":"3cb0d6b77ac49d3c6c5c5740efa2fd9e3e0c79158c88a9d4f0b709f4713a38a7b72109a2b4c636377c783effc3c6457c718d8cdc2e9c7577db9691562e95375f","ssdeep":"192:90DuIfY7JtjC5ydUypH82+H8urFLR7BD4GOUo1MQl+B2GHPpB3QE7WA+MWnBP:9guIw7JtWqmhfldD4Eo64UgH3nx","tlshash":"4f1261ccf661b0764a377460623f120fe276a46d200a4468f598e4ef6cbe14d94abf3c","first_seen":"2023-03-07T12:05:56Z","last_seen":"2026-10-06T01:49:43.395768Z","times_seen":1594,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/Swiper/8.3.1/swiper-bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:33.342Z","timestamp":1791244653342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/Swiper/8.3.1/swiper-bundle.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 23:57:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1188512\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Wed, 13 Jul 2022 12:01:24 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZEjKHwa%2FbIjXkJ7eX4AoKKeGMxYAU3ntOpWXIIErnrEVr5cgxrthbGbZMJtflWsW7VxPxat3SoyQN%2FXt4ITZ4QlQ5f8zUY937fzqpTarKoPVkeFv2ZMV9GAg%2BQAvDUq3iy8HEib8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4605e8b6cb3b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34443\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143070,"size_decoded":35462,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65283)","md5":"38ef180eaf570243775427085e2ea834","sha1":"e0d97d1c702c90dbb22a6294b3c1e4126ba1662a","sha256":"b624e1e378abe009ef0de69a698b0a3e734af47efcdbd6816d5fcb8fc64c8bfe","sha512":"9da1101bbe0870e2d0e8afc1d4f9a121c6788b7604d855ecdb39bad37135437b216eba27f8f9982e0e38feafb1032983fd1bec919d87f25d506bb239a842e5ae","ssdeep":"3072:NJvgjudkXhYnafpoy9v8cIWyUaV4y+oGeJhyEfrNK/MxF:NJvgidkXhYnafpl9v8cIWybV4y+oGMAQ","tlshash":"c0e3f8896360b1a552e3268b93a9c611e3b51400b409c4e871bd4c9b6d7ed9813ffffe","first_seen":"2023-03-07T01:27:55Z","last_seen":"2026-10-05T23:58:32.139924Z","times_seen":505,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/static/country/tr-TR.png","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.556Z","timestamp":1791244656556,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET /static/country/tr-TR.png HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/m/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:36 GMT\r\nContent-Type: image/png\r\nContent-Length: 2608\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a8c663a-a30\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2608,"size_decoded":2847,"mime_type":"image/png","magic":"PNG image data, 153 x 100, 8-bit/color RGBA, non-interlaced","md5":"0e45a4d84e042e368b2687c97f92d863","sha1":"0af491e10eebd159e118c47b12ef2e4cb62be816","sha256":"c89cb7445cee16b562ec3f35d663266c0cf888bd30b6de8ab18a349e6b51c213","sha512":"65076d3664f8c4fd36e64d61890e6751fc2d55eaf3203b4429111f11ecb1a2de2dd12c4ad0dd9198bec72251be5ca572de246f051d8e5bba2299975acdbbf8a7","ssdeep":"","tlshash":"bb512bb49148dc3668b793aba9fc8ebde1fded03d28829b512428573e021e7435d1983","first_seen":"2024-05-20T08:37:14Z","last_seen":"2026-10-05T23:58:32.11462Z","times_seen":192,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":218,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fghjhreryjh.com/api//file/cfg/202505/27/3bd5d9cc386f41c9acdf0e016e661a72_.jpg","fqdn":"fghjhreryjh.com","domain":"fghjhreryjh.com","tld":"com"},"ip":{"addr":"182.16.39.226","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:36.829Z","timestamp":1791244656829,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fghjhreryjh.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 09:12:31 GMT","end":"Mon, 07 Dec 2026 09:12:30 GMT"},"fingerprint":{"sha1":"BE:20:56:E1:2F:A5:D8:E3:D6:A1:FA:2A:6E:20:AB:4F:3E:96:9C:36","sha256":"CD:E2:4E:88:76:5E:A0:48:09:66:EE:C8:42:0E:54:70:63:6B:77:84:CA:4F:8A:75:F3:AD:01:85:7E:DD:7F:9C"}}},"request":{"raw":"GET /api//file/cfg/202505/27/3bd5d9cc386f41c9acdf0e016e661a72_.jpg HTTP/1.1\r\nHost: fghjhreryjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:39 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 53685\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nLast-Modified: Tue, 27 May 2025 11:44:23 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53685,"size_decoded":53981,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 960x540, components 3","md5":"1b4d1d313a27286f1b56785c4e5cfad8","sha1":"a926f33999fc530a35e013ddb892d22633cf0a47","sha256":"6dbfe9b836045f6fc6c54420a39cbca7d254eaaa07f1f946834702cb605bbd75","sha512":"1ace7b852cbfe3f9b8d4a0d8d0ce200e5994e1bb6efe3e08ca8dfee6b26665bac0115f66001ec4ab44a3e29d123d1e3f7c1ebaabf1584086c58690a62db8f8f3","ssdeep":"1536:rQ77zQxUlWnMXD7SodH9E0URXw5vDyaK7Z:rIouWQSuE0URX3R7Z","tlshash":"7f330214ba59e5cb875e99fcf3368005871281c743e78e7673c29d48a4bb6f52064cb6","first_seen":"2025-04-09T11:39:55.898089Z","last_seen":"2026-10-05T23:58:32.152997Z","times_seen":20,"resource_available":false,"data":null}},"time_used":2519,"timings":{"blocked":2279,"dns":0,"connect":0,"send":0,"wait":236,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-05","alert":"Phishing Block","trigger":"fghjhreryjh.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"fghjhreryjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwfwg.com/","fqdn":"gbwfwg.com","domain":"gbwfwg.com","tld":"com"},"ip":{"addr":"182.16.39.227","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-05T23:57:31.963Z","timestamp":1791244651963,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gbwfwg.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 08:32:55 GMT","end":"Tue, 22 Dec 2026 08:32:54 GMT"},"fingerprint":{"sha1":"D8:76:68:3D:23:91:C2:B5:9B:0F:0D:60:DB:88:DD:EE:FF:FE:97:9E","sha256":"78:AD:96:5C:B6:83:BF:09:A4:83:D4:9B:D3:A6:D6:4B:27:FA:6E:A5:AE:AC:B2:43:E4:7E:97:14:DB:41:B2:C6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gbwfwg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 05 Oct 2026 23:57:32 GMT\r\nContent-Type: text/html\r\nLast-Modified: Mon, 24 Aug 2026 15:41:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a8c663a-3ce2\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"SockJS:1.6.1","description":"SockJS is a browser-based JavaScript library that offers a WebSocket-like communication interface for applications.","website":"https://github.com/sockjs/sockjs-client","common_platform_enumeration":"","icon":"SockJS.png","categories":["JavaScript libraries"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":15586,"size_decoded":4998,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (12026)","md5":"d9e4a62081acefbee3039517c97ea5ed","sha1":"ec0d0be6345d59b2641fde0a1adfcc29ec02c83b","sha256":"61a4239fd75cfb9f387e2f7342f67704d0ccfce5fc12b19d74063ff08f18c87f","sha512":"5484511dcab808fa3bf58b6c6de1b88edc20a3b82a6ac073f2f926d812a67824ae0963f62b67f523e48b1282e1e906dc6fbe9a2d437277e59832817e1a9f9827","ssdeep":"384:d1J0CtvqU4TZh4p3Jsr4z21PLMEE4AJI7QntyztMKaZ0W1nD4:d1yAyCaRJkJI0ntyztMKaZ0W1nD4","tlshash":"aa6253a9c60058edf5a2ce8f5a74bb6994e77c773931d484f26d884bcf18fc4162608b","first_seen":"2026-10-05T23:58:30.232532Z","last_seen":"2026-10-05T23:58:32.084319Z","times_seen":2,"resource_available":true,"data":null}},"time_used":957,"timings":{"blocked":-1,"dns":48,"connect":226,"send":0,"wait":227,"receive":0,"ssl":456},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-05","alert":"Sinkholed","trigger":"gbwfwg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/element-ui/2.15.7/index.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gbwfwg.com/","date":"2026-10-05T23:57:33.331Z","timestamp":1791244653331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/element-ui/2.15.7/index.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwfwg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Mon, 05 Oct 2026 23:57:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1051270\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Thu, 18 Nov 2021 08:03:59 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iJrH6C6LSTWxspL8JI7zLC%2FTdMmk9jSi7vFTmf%2B4s0tKvqyUxpnGNw4fIWN0NynI%2BtJ89zzBWwqDkBwBJomN7FAiWqiVu6CNv4hl3D4HmkVzR0mZiz32cQF1PqJcORnxA1hceCmk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4605e8b5ca9b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 122414\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":590640,"size_decoded":123434,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65105), with no line terminators","md5":"dc6dfa2d326274455390160572856dce","sha1":"efd937a0eaa2f39487b612814c98c37a752c9a2a","sha256":"bc09e54472585388c0ef0b58e5818a448f03b5671df4120da425cd6cac70fb79","sha512":"d42e99eb85cefb310ba46cf4a5fd9514f6804d4fa95f312178b0b54723db60950908465b257cd7160e2a67e56b1b2855bada2e67f56c992f53fad520bb7a73f6","ssdeep":"6144:jlrTktiHOvAeyErnMb/KeG4tVhkiIAUYxRtS8islZST79eA:jNktiHOvAeyErnMb/0G1TUARQ79eA","tlshash":"e1c41a8d72c5b53147a36070103f250bb33b299ca40980dcb679d9ea6dbd909626ffbd","first_seen":"2023-03-11T09:11:20Z","last_seen":"2026-10-05T23:58:32.113657Z","times_seen":655,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}