{"report_id":"a07fb2d3-fe7f-40ce-ae69-db5dab243f54","version":0,"status":"done","tags":[],"date":"2026-06-28T09:53:23Z","url":{"schema":"http","addr":"wg6-h.com","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"172.67.131.155","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"wg6-h.com/","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"title":"wg6-🧨Caça-níqueis exclusivos no cassino-wg6 bonus","dom":{"size":16250,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (781)","md5":"80b2b75d0f975d1262250a3f0068350d","sha1":"82238ca845e3d73de8fb2b34356ad76b91a73e29","sha256":"ae98ec3631fa065618bd47dd3436f147b2b0c3ee3e403594654da92678ab13b6","sha512":"9afc68a088632379b97a3faab8aec9290163154d9ed7d6069a7298c07bfb6ed3385f52bdae1be2c921b52cc7f2af247edf4ef6cdeea6e6a84424b74181987da8","ssdeep":"384:7AcK0xZzPRHvg8NYgACjt+wFWeVI83STsjUXJA:7H9TcssJA","tlshash":"2572822141c83a33039723c15287bb5bf09b9967d923d642f4ff1a86afc5c8ad52725e","dom_hash":"domhashbeb1d73573aba8b6f4bc669f817bbd59","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wg6-h.com","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"172.67.131.155","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-02T09:53:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"wg6-h.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"wg6-h.com","ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-16","domain_rank":0,"first_seen":"2026-06-28T01:58:47.106055Z","last_seen":"2026-06-28T01:58:47.106055Z","alert_count":80,"request_count":20,"received_data":3545333,"sent_data":9790,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-06-21T22:30:18.963204Z","alert_count":0,"request_count":1,"received_data":480783,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7XNFVXFZ0J","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"10dd7c8a8d58ecd78a44977e174da66f","sha1":"894b3c19e298ba539d9c10e45012bc19ba236315","sha256":"d494bb8193d2c2b152532c62f200ab952bcaa399a27c773c5a6b325907747227","sha512":"4f920593e3f71eb4c043154dfdaf9fbc6f793fc77f2229c5775e688e613eb4aee6a72d91e7551c7162d50a272265c66146938afab4d13176d65048ad5359edad","ssdeep":"6144:/StCNmk0EUmKtdNjyXkVCva/h/ge1CWMHub0rYxUOgcshQAGio:/SComkYvfxruURGN","tlshash":"65a4e9cdb3d674625396f478903f018ba57b28e2b448c899f189cce42e7469a8177f7c","size":480179,"data":"","first_seen":"2026-06-28T09:53:26.710166Z","last_seen":"2026-06-28T09:53:26.710166Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wg6-h.com/","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"268ddb5b5e7144b7a05fed170bcd4afd","sha1":"12c60584feae6faa986931729eb36d7489e8eb23","sha256":"190af0314dbc08d5388dde2a521875aac53d2356c9d4a4f89899f88dc3ba869e","sha512":"c758e30778346ba490295da9a3063a3361f98242f907915dabda6ad932c7d4faa7aba261b7315e58be1c7711d49d142bf479f5ffec278f1e2fe62c5def5ced8c","ssdeep":"","tlshash":"2dc02b8c320a1c7041e727008b3ffa08b003320494e06a350c1923448d20e13d748814","size":149,"data":"","first_seen":"2026-06-28T09:53:08.269361Z","last_seen":"2026-06-28T17:55:37.267658Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wg6-h.com/","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4db10dad35f36c53fe0ca62637ab6d8d","sha1":"73301677ccef0a51608b20f62f5193bace0aded5","sha256":"e3ed53dde0ace916a8d30e021581c6ddcc0b6237e088fd131d2bc14c3fde9ce2","sha512":"a19d5da73d1f4b186aa940c3c5b3ea4784e9c89e76a8c27a785380b24e19f0b82ad1f151da0854caf09aeb236f5cd4e029d03f532fe7f40a2b3c6ec61fc9cb3c","ssdeep":"","tlshash":"7df02b76a31c753702b70311e5f49bf83568115dd14984177cd4c80b15e5cb1abe4db0","size":510,"data":"","first_seen":"2026-06-28T09:53:08.270365Z","last_seen":"2026-06-28T09:53:26.733539Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wg6-h.com/js/faq.js","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e814777ca25cd426a8d0441a955d24e5","sha1":"53d36c4df7c05fd4d2b8a2529668f10b64222c7f","sha256":"053f8fef795b6b502f301cfcc098d4e13ff32b1da0b0ab208e0daf87006e8644","sha512":"bc9c158b2d0631dd93c62119732273973a84881fb897ab92b40c622edfbb6a4648c7e51ac9e45338691e7154cb562d94606f4ee18774ed5e8a32348792f2b06c","ssdeep":"","tlshash":"92d02eaba02c2a7684b20322024281a9b358d08ae0a0f5143c4088880ffa8aa04228e3","size":245,"data":"","first_seen":"2026-06-28T09:53:08.260797Z","last_seen":"2026-06-28T09:53:26.719599Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wg6-h.com/11/youtube.svg","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wg6-h.com/","date":"2026-06-28T09:52:58.833Z","timestamp":1782640378833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wg6-h.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 00:32:03 GMT","end":"Sun, 06 Sep 2026 01:29:42 GMT"},"fingerprint":{"sha1":"C0:A7:84:65:AD:4B:10:76:15:67:D8:89:B5:16:D0:E4:FD:46:15:E6","sha256":"67:A2:D3:FE:AA:EA:59:46:96:BC:3C:EC:E0:C6:04:7D:15:04:DA:F9:36:6B:7A:3B:5A:38:9F:E6:24:2D:37:E9"}}},"request":{"raw":"GET /11/youtube.svg HTTP/1.1\r\nHost: wg6-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wg6-h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 09:52:58 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"689c8b6b-339\"\r\nlast-modified: Wed, 13 Aug 2025 12:56:11 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uX%2FJNLcokOJiF4KsSZW6AVE24ovb434pA3aBdzH70mvtdvgbJOE9utRARZi%2FPKCsOtcm%2BuGEjZoBtu7lIaqvhLTPWZIlXT1dKmSEEOZrYjvl0wj3LTxeAMrcyH8%3D\"}]}\r\nage: 23\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a12bcd3fbf11b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":825,"size_decoded":1118,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc76a44a1253f8e6cd75332a26c4f495","sha1":"8961d523f25b8c04b20eeaf4279d45ee6188e60a","sha256":"98f7ce226a9a5967a17757a553beb824e03fd1fab8c19d5b3de81a669dae76b0","sha512":"ac1f98d563a195f90361413d5cc3a9752b0cfbc599d2ca210c96f1f4c78ae181c8458498e618f0c376842f13c9b06c90328120d669cdb95ee56b9fe8f68a379e","ssdeep":"","tlshash":"5901afd461bed3dd50409732c37c30a52a3f90f927170c4d63c61a72ba4749e69230c8","first_seen":"2025-09-22T03:43:24.264648Z","last_seen":"2026-06-28T16:13:49.972472Z","times_seen":88,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"wg6-h.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wg6-h.com/11/icon_8.png","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wg6-h.com/","date":"2026-06-28T09:52:58.834Z","timestamp":1782640378834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wg6-h.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 00:32:03 GMT","end":"Sun, 06 Sep 2026 01:29:42 GMT"},"fingerprint":{"sha1":"C0:A7:84:65:AD:4B:10:76:15:67:D8:89:B5:16:D0:E4:FD:46:15:E6","sha256":"67:A2:D3:FE:AA:EA:59:46:96:BC:3C:EC:E0:C6:04:7D:15:04:DA:F9:36:6B:7A:3B:5A:38:9F:E6:24:2D:37:E9"}}},"request":{"raw":"GET /11/icon_8.png HTTP/1.1\r\nHost: wg6-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wg6-h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 09:52:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 12 Aug 2025 12:12:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"689b2fa3-a38\"\r\nexpires: Tue, 28 Jul 2026 09:52:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 23\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fI47D940t%2BOjUCZ7Auiwb6rf2f6Gk6sK1YgoXGgrdJXR8OpfHdMqH4%2FFy6uMZUfyDpQDc90lDfvecI%2BwzBodo5DeMAHronEZxK4DTKlG8dihZJVx0E6Wx9aIYSk%3D\"}]}\r\ncf-ray: a12bcd3fbf12b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2616,"size_decoded":3376,"mime_type":"image/png","magic":"PNG image data, 100 x 70, 8-bit/color RGBA, non-interlaced","md5":"8530c5547890df523036e8a7c17fecdc","sha1":"0addbf7d7f114aea262ad8ab2a9c98bbbf4d8b89","sha256":"2eaea4c0b6c02d8e480d609f02b900fff949aea8dcf9bac7d0f0e213cac33d3b","sha512":"c4e96488ac0b0234c0ca8c425969c1adb83a62a38180411692987b8216f14a8a0e2993eaa892e70bab26b877893dcc84d3ef7741f641cfc3fc6ea77359c3dd4c","ssdeep":"","tlshash":"7e5129c30a57e52cccf65c651b3c2a76ae73a69b2f75e92a6e2bc68441607140f4720e","first_seen":"2026-06-28T09:53:08.265354Z","last_seen":"2026-06-28T09:53:26.697602Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"wg6-h.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wg6-h.com/font/Montserrat-Regular.ttf","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wg6-h.com/","date":"2026-06-28T09:52:58.898Z","timestamp":1782640378898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wg6-h.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 00:32:03 GMT","end":"Sun, 06 Sep 2026 01:29:42 GMT"},"fingerprint":{"sha1":"C0:A7:84:65:AD:4B:10:76:15:67:D8:89:B5:16:D0:E4:FD:46:15:E6","sha256":"67:A2:D3:FE:AA:EA:59:46:96:BC:3C:EC:E0:C6:04:7D:15:04:DA:F9:36:6B:7A:3B:5A:38:9F:E6:24:2D:37:E9"}}},"request":{"raw":"GET /font/Montserrat-Regular.ttf HTTP/1.1\r\nHost: wg6-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wg6-h.com/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 09:52:58 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 13 Aug 2025 14:25:22 GMT\r\npriority: u=3,i=?0\r\netag: \"689ca052-50cc4\"\r\naccept-ranges: bytes\r\nage: 22\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XX%2BGHbPpzJqiePJvsRfaeQT7KtzIMVqZ5mwELXLK5QyAvOF82wJCyL4dtd3m1W%2F6BEg8foOxT4tl9d9GFLh7jFJ10ZIwgFYTcJcGTv2tIHUlkKGIuMrW1xNk810%3D\"}]}\r\ncontent-length: 330948\r\ncf-ray: a12bcd401f1db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":330948,"size_decoded":331655,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 36 names, Microsoft, language 0x409","md5":"38712903602f88435ddddec98862f8b8","sha1":"1c8119b38eef1914a4fbd9f6cfdedf198445ab97","sha256":"f5a3f02c4a72f1da11c6dadf4fd78c07b2f145a34ed46eb875ed0da28cbd348c","sha512":"7dc725f7ce56104c34415fe921aa3e5392831650d6a2900cfb684e4af97a7ee22b026763651d11ded4ebf685d20057c6b6e269b7c63e3f042c2a4e4e0fa33940","ssdeep":"6144:INOIple1FXzYAOr387HRMsIHYuMYRU0vAI9z6VTNGeNr:VFXzc74qz6tNnNr","tlshash":"38644b02bf06676dd5462d36dbb1c3b8b772be607f5d824bf48b6798e48f4b40984284","first_seen":"2025-02-05T20:57:45.414565Z","last_seen":"2026-06-28T18:00:34.004408Z","times_seen":647,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"wg6-h.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wg6-h.com/css/styles.css","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wg6-h.com/","date":"2026-06-28T09:52:58.525Z","timestamp":1782640378525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wg6-h.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 00:32:03 GMT","end":"Sun, 06 Sep 2026 01:29:42 GMT"},"fingerprint":{"sha1":"C0:A7:84:65:AD:4B:10:76:15:67:D8:89:B5:16:D0:E4:FD:46:15:E6","sha256":"67:A2:D3:FE:AA:EA:59:46:96:BC:3C:EC:E0:C6:04:7D:15:04:DA:F9:36:6B:7A:3B:5A:38:9F:E6:24:2D:37:E9"}}},"request":{"raw":"GET /css/styles.css HTTP/1.1\r\nHost: wg6-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wg6-h.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 09:52:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Aug 2025 12:02:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"689b2d6b-3214\"\r\nexpires: Sun, 28 Jun 2026 21:52:35 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 23\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jrp44UYzcjXo6yCgvdokoCNATqznQx3IRBmYoVi%2FC3sxtPyU8GxexUKghQHQrD9DidLW7S%2BHExHCc5ylgqEHSZmmzMsahUvtBrrZ8CZUxV1C9xbkixwuZbmc%2Fto%3D\"}]}\r\ncf-ray: a12bcd3dcec6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12820,"size_decoded":3845,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"fc3d5db806c5d2743d8ee9769596cf04","sha1":"17ce65b4fdf1cdeceff93e70b4ecbd2854addc68","sha256":"3a8d2e689c41e71a1b990dfb3f1ec63b1d7b035dda8db2539b450aa7f38de311","sha512":"5b64db90001fb09d916dc35938cb0e46c6261eabf5fd99be32a8e2775b64effbf605349454faf2431346d30f89d0695cf1f22b8ec760e04265927b817ae87af4","ssdeep":"192:uGgO1ibFdrzmiabSm6d2cVNEO2VSa9uOXh3nc9QESaN0l8W9+Y5b:PeOUBWZB","tlshash":"57423fe8a01621167233e7b0ffa21f19f2e59422db0313b97ef4508d51c96795ab5ecc","first_seen":"2026-06-28T09:53:08.256759Z","last_seen":"2026-06-28T09:53:26.701352Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"wg6-h.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wg6-h.com/css/faq.css","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wg6-h.com/","date":"2026-06-28T09:52:58.804Z","timestamp":1782640378804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wg6-h.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 00:32:03 GMT","end":"Sun, 06 Sep 2026 01:29:42 GMT"},"fingerprint":{"sha1":"C0:A7:84:65:AD:4B:10:76:15:67:D8:89:B5:16:D0:E4:FD:46:15:E6","sha256":"67:A2:D3:FE:AA:EA:59:46:96:BC:3C:EC:E0:C6:04:7D:15:04:DA:F9:36:6B:7A:3B:5A:38:9F:E6:24:2D:37:E9"}}},"request":{"raw":"GET /css/faq.css HTTP/1.1\r\nHost: wg6-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wg6-h.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 09:52:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 Aug 2025 12:56:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"689c8b8b-423\"\r\nexpires: Sun, 28 Jun 2026 21:52:35 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 23\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZrqBhtx%2F5L5X7UawNQfYT0fYlad5Dvjm7rRPSgOVOmqV7BK0AJF8sDYgEZqMMDgmmDPPoxFpUlg08l4lmY3mnN%2B%2BHPaj8%2FhljTK2WW8ZsVSYRMQXxzOaheJY1IY%3D\"}]}\r\ncf-ray: a12bcd3f8f01b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1059,"size_decoded":1226,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"47eb3bed0d062d3baefeac81ea4e692a","sha1":"64e037cd54525a89b93c5b88ad48422e992227a2","sha256":"439238914aed494ba13cb38f4eb0aae4cc8ab0981bf349eb31a1e637a1ee48bf","sha512":"5ec09ca571c56235bc7033616c8af12f70df4e642815b3a68f659c285ebea85602b369354297d752c1ae7f91ad2cb87cbd90861e73149e5ac68e76acd3174138","ssdeep":"","tlshash":"bb118cdeea4571053237c7b0e79287aa37a49125ed4207fc7ffa307860814b958619dd","first_seen":"2026-06-28T09:53:08.253961Z","last_seen":"2026-06-28T09:53:26.703637Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"wg6-h.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wg6-h.com/images/wg6.com.png","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wg6-h.com/","date":"2026-06-28T09:52:58.816Z","timestamp":1782640378816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wg6-h.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 00:32:03 GMT","end":"Sun, 06 Sep 2026 01:29:42 GMT"},"fingerprint":{"sha1":"C0:A7:84:65:AD:4B:10:76:15:67:D8:89:B5:16:D0:E4:FD:46:15:E6","sha256":"67:A2:D3:FE:AA:EA:59:46:96:BC:3C:EC:E0:C6:04:7D:15:04:DA:F9:36:6B:7A:3B:5A:38:9F:E6:24:2D:37:E9"}}},"request":{"raw":"GET /images/wg6.com.png HTTP/1.1\r\nHost: wg6-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wg6-h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 09:52:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 16 Aug 2025 12:42:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68a07ca4-cc52\"\r\nexpires: Tue, 28 Jul 2026 09:52:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 23\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8fxpMohcVd%2B59Be4GLzdIwJC4O8xZXYjBEnDBuE9vsBgUOsKus6GjiJEhIKWEOmTjXaFHPa8SCrqW1XAqINcJ7B213BivIodLm94bMWBp1CQUvKNAdGdlVBmcto%3D\"}]}\r\ncf-ray: a12bcd3f9f04b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52306,"size_decoded":51189,"mime_type":"image/png","magic":"PNG image data, 1000 x 400, 8-bit/color RGBA, non-interlaced","md5":"dfccfc72b1fec271b0f1cd7d5a50db9f","sha1":"b6d2b5c7a1f03197a3169efee556ab03983be42c","sha256":"f97f9947f0f2f2965919b0392c09fff23cebbe587bd2b9c74899dc9b15c85b86","sha512":"247b8be8a591a63d33e6e76e306d0d8a364eb918c9dcf7e2a9a602f4664f2f5cd02321757f7674b5f10c32c1e50a4f97377560bfc12a41d58b75a87970a2dc3e","ssdeep":"768:uK0CXWvNrZCox64yL/SrtOpVHzFmZTLfURL212aj+coUd44dh0TK/ky:uK0CGvN1iLKrMmZsRLvr34PC2v","tlshash":"8433f20418b257fad4e638ba3755588edccc8274d31e9831e329bca4d5d8ecd0e25ab7","first_seen":"2026-06-28T09:53:08.257664Z","last_seen":"2026-06-28T09:53:26.705787Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"wg6-h.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wg6-h.com/images/wg6.png","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wg6-h.com/","date":"2026-06-28T09:52:59.003Z","timestamp":1782640379003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wg6-h.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 00:32:03 GMT","end":"Sun, 06 Sep 2026 01:29:42 GMT"},"fingerprint":{"sha1":"C0:A7:84:65:AD:4B:10:76:15:67:D8:89:B5:16:D0:E4:FD:46:15:E6","sha256":"67:A2:D3:FE:AA:EA:59:46:96:BC:3C:EC:E0:C6:04:7D:15:04:DA:F9:36:6B:7A:3B:5A:38:9F:E6:24:2D:37:E9"}}},"request":{"raw":"GET /images/wg6.png HTTP/1.1\r\nHost: wg6-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wg6-h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 09:52:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 16 Aug 2025 12:41:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68a07c8f-60c8c\"\r\nexpires: Tue, 28 Jul 2026 09:52:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 23\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0olXxEQonq1vdwFtOVuztoiw8S15e4HRLQrersPHkfWdbgwnZwuK2ly9JekL32EqGXEoe4LnP%2FZaIb5oPPkoyUtmM7CsITsB9JlTx3rWJ59auTIoxQWlJ3HtTNE%3D\"}]}\r\ncf-ray: a12bcd40cf38b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":396428,"size_decoded":397301,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"4940ff68e4760e51aa51e511a4bd01c3","sha1":"50100c76111782025fa902726c883401ab805a99","sha256":"698e8dc5001b3ebcaaab751c4e0d5665baa21107bd5964094b9f3798c9977e74","sha512":"55a57bbdd80ffd8cb2bb1642b0e4a36b0e6216fc136c2e95112322531ef11881bccbede95a1873e99e00bb988f21d080cd05e0ec510ae08838bd9b55830f967b","ssdeep":"12288:1/+ebrY3OHlnGps2+wh/o83DsMcnFsc0qPZKnJyrXT:1/+ewIlnGpB5n3DsHFsj67f","tlshash":"978423d01177592aee7e98f6a802676c35dacac7ce48c097c04c5a4fc1bc53a97c63b4","first_seen":"2026-06-28T09:53:08.255156Z","last_seen":"2026-06-28T09:53:26.70807Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"wg6-h.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7XNFVXFZ0J","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wg6-h.com/","date":"2026-06-28T09:52:58.799Z","timestamp":1782640378799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:36:11 GMT","end":"Mon, 31 Aug 2026 08:36:10 GMT"},"fingerprint":{"sha1":"0B:C5:65:06:DD:0F:AB:EB:1E:E7:97:52:C4:27:4E:58:4A:36:E4:7C","sha256":"0E:AA:42:5A:CD:B0:51:92:3F:AE:F6:35:E6:BB:66:30:A9:D3:23:7B:B0:56:D8:00:C7:B7:6C:67:06:C4:33:73"}}},"request":{"raw":"GET /gtag/js?id=G-7XNFVXFZ0J HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wg6-h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 28 Jun 2026 09:52:58 GMT\r\nexpires: Sun, 28 Jun 2026 09:52:58 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 163257\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":480179,"size_decoded":163861,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"10dd7c8a8d58ecd78a44977e174da66f","sha1":"894b3c19e298ba539d9c10e45012bc19ba236315","sha256":"d494bb8193d2c2b152532c62f200ab952bcaa399a27c773c5a6b325907747227","sha512":"4f920593e3f71eb4c043154dfdaf9fbc6f793fc77f2229c5775e688e613eb4aee6a72d91e7551c7162d50a272265c66146938afab4d13176d65048ad5359edad","ssdeep":"6144:/StCNmk0EUmKtdNjyXkVCva/h/ge1CWMHub0rYxUOgcshQAGio:/SComkYvfxruURGN","tlshash":"65a4e9cdb3d674625396f478903f018ba57b28e2b448c899f189cce42e7469a8177f7c","first_seen":"2026-06-28T09:53:26.710166Z","last_seen":"2026-06-28T09:53:26.710166Z","times_seen":1,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":5,"connect":16,"send":0,"wait":37,"receive":48,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wg6-h.com/images/2025__710825.jpeg","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wg6-h.com/","date":"2026-06-28T09:52:58.821Z","timestamp":1782640378821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wg6-h.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 00:32:03 GMT","end":"Sun, 06 Sep 2026 01:29:42 GMT"},"fingerprint":{"sha1":"C0:A7:84:65:AD:4B:10:76:15:67:D8:89:B5:16:D0:E4:FD:46:15:E6","sha256":"67:A2:D3:FE:AA:EA:59:46:96:BC:3C:EC:E0:C6:04:7D:15:04:DA:F9:36:6B:7A:3B:5A:38:9F:E6:24:2D:37:E9"}}},"request":{"raw":"GET /images/2025__710825.jpeg HTTP/1.1\r\nHost: wg6-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wg6-h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 09:52:58 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 23\r\nlast-modified: Sun, 28 Jun 2026 09:52:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pMZqCsDFa7PBEuGh6AnCFmYS4Vwl1ndJ3l8MhuzkKdiMBQc5%2BRwraNsIiR7GdiTv29dUvjAVQXIbEqkcB%2F9uFl0q5JAOIGkmMlshz3%2BHCZfDWCcRiB6FS3dVonk%3D\"}]}\r\ncf-ray: a12bcd3faf07b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":367173,"size_decoded":367974,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"eeb1459b410bd3bfacfe62437680b071","sha1":"6abc8f72b232d2e862689beaeecbab1c41b2402e","sha256":"ead7e9ecddda40dc856f938720c0ae77b8759974527abc9a0df5606dd9edba33","sha512":"340e514dc668eca7cee55b64731d4013192516e54bab2b0e7b2b9f13dbcf492fde209b4073f0fffb05bcb6d1060b793186957497a10d0a41208687550f03bc56","ssdeep":"6144:Xxr8QaupAsTEHRsa3aiRCJ7vqB0prpDLSsks3N4QY5AQqo0grkrF8gq:d85uOsTExTKiRCJjqKl9L4QYAQqTB8gq","tlshash":"e77423460ccf8584dbaa5a13b8ac991022d4b860f3d6d432a30ec3d559dfddfeb66b41","first_seen":"2026-06-28T09:53:08.268401Z","last_seen":"2026-06-28T09:53:26.712459Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"wg6-h.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wg6-h.com/images/2025__234439.jpeg","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wg6-h.com/","date":"2026-06-28T09:52:58.825Z","timestamp":1782640378825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wg6-h.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 00:32:03 GMT","end":"Sun, 06 Sep 2026 01:29:42 GMT"},"fingerprint":{"sha1":"C0:A7:84:65:AD:4B:10:76:15:67:D8:89:B5:16:D0:E4:FD:46:15:E6","sha256":"67:A2:D3:FE:AA:EA:59:46:96:BC:3C:EC:E0:C6:04:7D:15:04:DA:F9:36:6B:7A:3B:5A:38:9F:E6:24:2D:37:E9"}}},"request":{"raw":"GET /images/2025__234439.jpeg HTTP/1.1\r\nHost: wg6-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wg6-h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 09:52:58 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 23\r\nlast-modified: Sun, 28 Jun 2026 09:52:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sGu7XUB6JW%2Ff1llzZN7ok4R2oaSiSLzEMNthfpIcuKFnUWyk0mqULidP4%2BdqTxjx7jBiFatyfbsZdy4hOQiaWCJl0IBcp%2Fu7rf0C6zX6WQtC71s%2BV7VzXNlVqUQ%3D\"}]}\r\ncf-ray: a12bcd3faf0ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":365766,"size_decoded":366569,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"81a0a9217336a67f5a742f12a2eb99f8","sha1":"0f84c1b971a23bb5c4aabd90f9c5f7de33d915ad","sha256":"ebdaf4b56ae627f31f844e14b9e34bcdb4ab9b7ef3ea88369112811f7efa2c1f","sha512":"387dff27ad99ba9c751778b90a77c7029fce0b1c2fe386ca95b86facaaf91216337fa0e21e1bd4b698cf00ec836619cc9786d8c486b780f4b4b3ab0c4e0f412a","ssdeep":"6144:sOVnsTC6BPxU6Z6uqEryKt7cnnxNXlVW1h5g2DIPM2jP6031MZ7V:sKsT9Px7ZjqE2AInxtoYO2jPA","tlshash":"197423f5e8201568598ed580e90ff2d5f5dcad6d53bf08b18eb9903c8a3f9199310b6c","first_seen":"2026-06-28T09:53:08.25026Z","last_seen":"2026-06-28T09:53:26.714047Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"wg6-h.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wg6-h.com/images/2025__816705.jpeg","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wg6-h.com/","date":"2026-06-28T09:52:58.826Z","timestamp":1782640378826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wg6-h.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 00:32:03 GMT","end":"Sun, 06 Sep 2026 01:29:42 GMT"},"fingerprint":{"sha1":"C0:A7:84:65:AD:4B:10:76:15:67:D8:89:B5:16:D0:E4:FD:46:15:E6","sha256":"67:A2:D3:FE:AA:EA:59:46:96:BC:3C:EC:E0:C6:04:7D:15:04:DA:F9:36:6B:7A:3B:5A:38:9F:E6:24:2D:37:E9"}}},"request":{"raw":"GET /images/2025__816705.jpeg HTTP/1.1\r\nHost: wg6-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wg6-h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 09:52:58 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 23\r\nlast-modified: Sun, 28 Jun 2026 09:52:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C14n6YyJwH0mm94WnO5YMtcTCpVqd2w5B6UldgBPDFoGaK6F29a0o6hpVuZOwWw9%2FMZdg3Uwrm29kkn1GNJ%2BMH7oZ5qOnc0nOAdM4r6AGxQQYxH3CQoIzeM5uvM%3D\"}]}\r\ncf-ray: a12bcd3faf0bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":436530,"size_decoded":437145,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"e85719fdfc4a193b111b65816f52a299","sha1":"61ccc4f5e561725c901abc65bfa366ab097989d0","sha256":"81826ba085b95c7cbcec983a63e5d06ad2cd0cd74dc56076530a80d7cf96f9f0","sha512":"c8a9f0bea83c477d32b124a26a84a99664d4edba8fc3456272a04be73543d2109d9e272b45ab2af2fccae564152bf2e086749897a3e092839694199ffe1c66b7","ssdeep":"12288:bGkYqHluhPHsxuHhuFFm5gRkqGtBsRiekNBh4:yuHluhPMlRRkq0BsRieABK","tlshash":"0c942355e0ce8d6994a73c50dbb38f84b0a4ebd1c62619c16864e6f4eca5ccd4e1bfb0","first_seen":"2026-06-28T09:53:08.263827Z","last_seen":"2026-06-28T09:53:26.715414Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"wg6-h.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wg6-h.com/","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T09:52:58.093Z","timestamp":1782640378093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wg6-h.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 00:32:03 GMT","end":"Sun, 06 Sep 2026 01:29:42 GMT"},"fingerprint":{"sha1":"C0:A7:84:65:AD:4B:10:76:15:67:D8:89:B5:16:D0:E4:FD:46:15:E6","sha256":"67:A2:D3:FE:AA:EA:59:46:96:BC:3C:EC:E0:C6:04:7D:15:04:DA:F9:36:6B:7A:3B:5A:38:9F:E6:24:2D:37:E9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wg6-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 09:52:58 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wnLt6EHnk1pfcQI60pqqXbxK0AvuANj1puXg%2FcaqO4PxckiH35k5M4%2FZR2YiK%2FNyYnYJg4qX4Y4cWy34rWxZpjG%2FhkoZnceg1KlWL0O90suXEWCqGtBXZnd2mZk%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a12bcd3b3e5db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":16271,"size_decoded":4817,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (781)","md5":"00f38c02f6eac0507a4f129c5a65c4a2","sha1":"d26018361bded97837ad44a161c68a842622f4e2","sha256":"1548e795a0e2fc157a96b526ebdc689f0a95a5b3e2f1053eb6b8992f0844fd0d","sha512":"ed7fa2c7c368ef3f08f4004d9f904cc3d772cd8914006614f111ca4592b8287a1036d6cc89213cd487e073595cd9c81238c65980edc15b10e8c44395691a5322","ssdeep":"384:w8cK0xZzPRHvg8NYgACjt+wFWeVI83STsjUXJfM:wj9TcssJ0","tlshash":"e672822141c83a33039723c15287bb5bf09b9967d923d642f4ff1a86afc5c8ad52725e","first_seen":"2026-06-28T09:53:08.259165Z","last_seen":"2026-06-28T09:53:26.716874Z","times_seen":2,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":0,"dns":4,"connect":16,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"wg6-h.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wg6-h.com/css/font-awesome.css","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wg6-h.com/","date":"2026-06-28T09:52:58.526Z","timestamp":1782640378526,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wg6-h.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 00:32:03 GMT","end":"Sun, 06 Sep 2026 01:29:42 GMT"},"fingerprint":{"sha1":"C0:A7:84:65:AD:4B:10:76:15:67:D8:89:B5:16:D0:E4:FD:46:15:E6","sha256":"67:A2:D3:FE:AA:EA:59:46:96:BC:3C:EC:E0:C6:04:7D:15:04:DA:F9:36:6B:7A:3B:5A:38:9F:E6:24:2D:37:E9"}}},"request":{"raw":"GET /css/font-awesome.css HTTP/1.1\r\nHost: wg6-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wg6-h.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 09:52:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Aug 2025 12:02:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"689b2d6b-91d6\"\r\nexpires: Sun, 28 Jun 2026 21:52:35 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 22\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q3EitiegEk3JJJvYC3cF5RRynxZpd%2F2be0uLmViHEn%2F5zHg7%2Fqc5am6rNHkg34Je5i7hnYq94C4xeU%2FZLLB8o25PxLDysf8Y7pxNeHTEtdjd3QVays8%2Fkgwm%2FXI%3D\"}]}\r\ncf-ray: a12bcd3dcec8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37334,"size_decoded":8956,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with very long lines (301)","md5":"748c0ff81a13547ec1bb88373e85b3bb","sha1":"f471ba85c4f9869e829ee01254961dc266a1b304","sha256":"563ac384fe3928eb0961546946b1bbd04e4c3966097039be7061d81ed09eac02","sha512":"45f4b9f98bb836b83e4d104849522180f330a4803e1edc88ebbd0d8c32279f7b9724de74583f079f0134b3a4902fde1be7cee6eb17997ecc3299219b246016f1","ssdeep":"768:yMtI+A4CSIDqvnI+YTBrFPvVrJjhiRAiiEL:btI+A4GDUI+Y9rpVljhiIEL","tlshash":"17f241ece5bf18904391e0d16386a370bb3dbb2c8d4a6d5cd2a6798cb1c1255c2c63ed","first_seen":"2025-06-17T07:06:59.039666Z","last_seen":"2026-06-28T09:53:26.718658Z","times_seen":40,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"wg6-h.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wg6-h.com/js/faq.js","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wg6-h.com/","date":"2026-06-28T09:52:58.802Z","timestamp":1782640378802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wg6-h.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 00:32:03 GMT","end":"Sun, 06 Sep 2026 01:29:42 GMT"},"fingerprint":{"sha1":"C0:A7:84:65:AD:4B:10:76:15:67:D8:89:B5:16:D0:E4:FD:46:15:E6","sha256":"67:A2:D3:FE:AA:EA:59:46:96:BC:3C:EC:E0:C6:04:7D:15:04:DA:F9:36:6B:7A:3B:5A:38:9F:E6:24:2D:37:E9"}}},"request":{"raw":"GET /js/faq.js HTTP/1.1\r\nHost: wg6-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wg6-h.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 09:52:58 GMT\r\ncontent-type: application/javascript\r\netag: W/\"689c8b7c-f5\"\r\nlast-modified: Wed, 13 Aug 2025 12:56:28 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 28 Jun 2026 21:52:35 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kk%2BbnjGToMqhPi7LB4lFBEDP24OVkMOz3mO2AfiTQS63Kf4epa7pRnTT334FLhJSx7tdwhYZpqPqHaUexhBAg%2Brl0Ai%2FOuGLGWUB9uOkTiSx6veKoRa5RKYnrjU%3D\"}]}\r\nage: 23\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a12bcd3f8f00b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245,"size_decoded":899,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"e814777ca25cd426a8d0441a955d24e5","sha1":"53d36c4df7c05fd4d2b8a2529668f10b64222c7f","sha256":"053f8fef795b6b502f301cfcc098d4e13ff32b1da0b0ab208e0daf87006e8644","sha512":"bc9c158b2d0631dd93c62119732273973a84881fb897ab92b40c622edfbb6a4648c7e51ac9e45338691e7154cb562d94606f4ee18774ed5e8a32348792f2b06c","ssdeep":"","tlshash":"92d02eaba02c2a7684b20322024281a9b358d08ae0a0f5143c4088880ffa8aa04228e3","first_seen":"2026-06-28T09:53:08.260797Z","last_seen":"2026-06-28T09:53:26.719599Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"wg6-h.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wg6-h.com/images/wg6.png","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wg6-h.com/","date":"2026-06-28T09:52:58.817Z","timestamp":1782640378817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wg6-h.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 00:32:03 GMT","end":"Sun, 06 Sep 2026 01:29:42 GMT"},"fingerprint":{"sha1":"C0:A7:84:65:AD:4B:10:76:15:67:D8:89:B5:16:D0:E4:FD:46:15:E6","sha256":"67:A2:D3:FE:AA:EA:59:46:96:BC:3C:EC:E0:C6:04:7D:15:04:DA:F9:36:6B:7A:3B:5A:38:9F:E6:24:2D:37:E9"}}},"request":{"raw":"GET /images/wg6.png HTTP/1.1\r\nHost: wg6-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wg6-h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 09:52:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 16 Aug 2025 12:41:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"68a07c8f-60c8c\"\r\nexpires: Tue, 28 Jul 2026 09:52:35 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 23\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rtE9wg6ytmSdByrCI1fTv%2F2n3m5EG7QNnBXEWrsmzx4pltqR4zPH1DAG3%2B8PVIchaHjlsQBmxOfTreSDHQpqUNt4bUIr%2F%2BtmHVZ1cdn7uGNSX2iaFolZGtVhsJE%3D\"}]}\r\ncf-ray: a12bcd3f9f05b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":396428,"size_decoded":397304,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"4940ff68e4760e51aa51e511a4bd01c3","sha1":"50100c76111782025fa902726c883401ab805a99","sha256":"698e8dc5001b3ebcaaab751c4e0d5665baa21107bd5964094b9f3798c9977e74","sha512":"55a57bbdd80ffd8cb2bb1642b0e4a36b0e6216fc136c2e95112322531ef11881bccbede95a1873e99e00bb988f21d080cd05e0ec510ae08838bd9b55830f967b","ssdeep":"12288:1/+ebrY3OHlnGps2+wh/o83DsMcnFsc0qPZKnJyrXT:1/+ewIlnGpB5n3DsHFsj67f","tlshash":"978423d01177592aee7e98f6a802676c35dacac7ce48c097c04c5a4fc1bc53a97c63b4","first_seen":"2026-06-28T09:53:08.255156Z","last_seen":"2026-06-28T09:53:26.70807Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"wg6-h.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wg6-h.com/images/2025__121773.jpeg","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wg6-h.com/","date":"2026-06-28T09:52:58.823Z","timestamp":1782640378823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wg6-h.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 00:32:03 GMT","end":"Sun, 06 Sep 2026 01:29:42 GMT"},"fingerprint":{"sha1":"C0:A7:84:65:AD:4B:10:76:15:67:D8:89:B5:16:D0:E4:FD:46:15:E6","sha256":"67:A2:D3:FE:AA:EA:59:46:96:BC:3C:EC:E0:C6:04:7D:15:04:DA:F9:36:6B:7A:3B:5A:38:9F:E6:24:2D:37:E9"}}},"request":{"raw":"GET /images/2025__121773.jpeg HTTP/1.1\r\nHost: wg6-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wg6-h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 09:52:58 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 22\r\nlast-modified: Sun, 28 Jun 2026 09:52:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9QLSIDRIXgSL7sFEG5JmWtERQAu0pQigyhHcU%2FSFMZbH5%2FlqaVFWTf%2FspEWMUTkBaj5b%2BU%2Fn2v%2B4VSO%2BTyN%2FxB82SCiqFfH7srwgCB74VuPVTVdEKwz4YUGm1mA%3D\"}]}\r\ncf-ray: a12bcd3faf09b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":388870,"size_decoded":389658,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"16a464f2538cd7d105994a1047aca76f","sha1":"8eda30f33c0804b215376fa399c52cb79338cdef","sha256":"1eff331e492f004d2fc5f70b11f8db992f90d1024ef8ed74476b894bc40b5089","sha512":"17adc14f9f3e08230c0a267b4d2c797942afd072b377b39b5ed44419894d2bfbcc4b30155d5a451b0867c0b3c8665c54c2fce8f4d59ecf7f18a9a45057a1085e","ssdeep":"6144:oyBgnHIIAjV009s0v6IaBKWpUA8lhuprC8AYRDR4zjgMK1d5n3yr3ZZQyYaQXys6:oytnV/9OISNAlhuKkDizMR5n3yr3ZZko","tlshash":"168423705dbbba666282c75fc9bc87e5c89ee2379863c51ccc4e420a05dba595887f0c","first_seen":"2026-06-28T09:53:08.262741Z","last_seen":"2026-06-28T09:53:26.721114Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"wg6-h.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wg6-h.com/images/2025__403981.jpeg","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wg6-h.com/","date":"2026-06-28T09:52:58.819Z","timestamp":1782640378819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wg6-h.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 00:32:03 GMT","end":"Sun, 06 Sep 2026 01:29:42 GMT"},"fingerprint":{"sha1":"C0:A7:84:65:AD:4B:10:76:15:67:D8:89:B5:16:D0:E4:FD:46:15:E6","sha256":"67:A2:D3:FE:AA:EA:59:46:96:BC:3C:EC:E0:C6:04:7D:15:04:DA:F9:36:6B:7A:3B:5A:38:9F:E6:24:2D:37:E9"}}},"request":{"raw":"GET /images/2025__403981.jpeg HTTP/1.1\r\nHost: wg6-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wg6-h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 09:52:58 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 22\r\nlast-modified: Sun, 28 Jun 2026 09:52:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QSAV0rlVL%2FF60QYmyPjwnQrm1TzzIEqn1rMhdJUBcrA%2FJkmvxzzMNa6vGhUULXf%2BmV3yh%2BotaI5Sh77ymo9PC9DY0ps0gL4AJGMW2i3i%2BFEI5%2Bv121jLVKGb6Pw%3D\"}]}\r\ncf-ray: a12bcd3f9f06b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":371991,"size_decoded":372619,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"6cb10a556e09396e5153dfa89b4e04de","sha1":"ece390d7a3dc580db8978e927439f9a87de49e5d","sha256":"870f2c7cd7d18fa8a17817e07c9aaddde066266d8ef8897c5c448c2a9aa6a87f","sha512":"07ba850aee00e26674637316aae120a3c058a55dcb3615ea0551e710bf9fb266f5dd608c3d9f95ba671624b21172f6f6e09d02a2a46d9b5a373de0dd4ee99e35","ssdeep":"6144:XjGRCT+JtMPv5WirA2YdM4wuAATEQIZrMQVTK/oevr8417thdMEPApn4:C4T+YXMirYM4wuAF9fVu/oyrRpt7X","tlshash":"dd84239bc6578492752f28e91d800374f6e376a44bfab9d0b410a643d22c5f630fcba7","first_seen":"2026-06-28T09:53:08.267324Z","last_seen":"2026-06-28T09:53:26.724647Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"wg6-h.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wg6-h.com/images/2025__677158.jpeg","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wg6-h.com/","date":"2026-06-28T09:52:58.822Z","timestamp":1782640378822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wg6-h.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 00:32:03 GMT","end":"Sun, 06 Sep 2026 01:29:42 GMT"},"fingerprint":{"sha1":"C0:A7:84:65:AD:4B:10:76:15:67:D8:89:B5:16:D0:E4:FD:46:15:E6","sha256":"67:A2:D3:FE:AA:EA:59:46:96:BC:3C:EC:E0:C6:04:7D:15:04:DA:F9:36:6B:7A:3B:5A:38:9F:E6:24:2D:37:E9"}}},"request":{"raw":"GET /images/2025__677158.jpeg HTTP/1.1\r\nHost: wg6-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wg6-h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 09:52:58 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 22\r\nlast-modified: Sun, 28 Jun 2026 09:52:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pj6vK%2BBa9u9py0wBZwyk9fb5ihDQ5wwyGChOjDhaSfGNAqXFbE2VRdxLCcB95zv4nDfz7DkttNPmaUn14kaLqstlyU0yhJ6WQ8Zo7VWRbtWehdMIof%2FpbctQSOI%3D\"}]}\r\ncf-ray: a12bcd3faf08b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":349246,"size_decoded":349961,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"43f663b0625d256b1edde62b017f9887","sha1":"44dd4c4c3d3272a0cb78692db6de13b8858fbb7a","sha256":"1da65815696dcbf130d0723a0c5cbd513ef7c2b23287bd27b517a139739c4ce8","sha512":"3eb9fbabd46328a1269490f785415fe9b823ffba44991f948366242334f11bf09ed3c59ad8d73cf3ae5066399e55728755fb8cb07b361d17d1c406b8c3829c61","ssdeep":"6144:UHner2lnidoSX+ko54/qDruBjD21IxLR0VLb9EcZyaqGZk9MyB3RvTXCH:U3idJXqFyBjMIxLeLb9tZOGvGhQ","tlshash":"e57423f4ccbd0c98f45a1e80fc81aca7edf01d46b76f056e21526bce547a605a11bb1b","first_seen":"2026-06-28T09:53:08.261797Z","last_seen":"2026-06-28T09:53:26.726898Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"wg6-h.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wg6-h.com/11/facebook.svg","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wg6-h.com/","date":"2026-06-28T09:52:58.828Z","timestamp":1782640378828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wg6-h.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 00:32:03 GMT","end":"Sun, 06 Sep 2026 01:29:42 GMT"},"fingerprint":{"sha1":"C0:A7:84:65:AD:4B:10:76:15:67:D8:89:B5:16:D0:E4:FD:46:15:E6","sha256":"67:A2:D3:FE:AA:EA:59:46:96:BC:3C:EC:E0:C6:04:7D:15:04:DA:F9:36:6B:7A:3B:5A:38:9F:E6:24:2D:37:E9"}}},"request":{"raw":"GET /11/facebook.svg HTTP/1.1\r\nHost: wg6-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wg6-h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 09:52:58 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"689c8b6b-21a\"\r\nlast-modified: Wed, 13 Aug 2025 12:56:11 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FHVwONNqrFmXpj0WJbeIchRiwqEp0pxv%2Ba3akowYGgq48P%2FPCmVdzahwamqGXdBesJ41MeIAccP4KGlAR%2BBQY1Lz1WLauzb5aYRyt6HiWU7Uav5oQEYKLHgLiF8%3D\"}]}\r\nage: 23\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a12bcd3faf0cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":538,"size_decoded":998,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8a37197b6c140c744a1486254b88f99a","sha1":"6544208c0899e51c1cd038bcb9d9dbff0ab36b8f","sha256":"f57ec60ca0499acc6bd648fdaf3959f84558a732a88a86443608369ea5741a4f","sha512":"1757ad55c5ef20ad40be4ab2a04772845b15ced93a399f97e8fdabf8fc552427f87e239b237cd00a11fc09e60507a3825e61d78417340aefcdbac7832d0e98bd","ssdeep":"","tlshash":"fcf024d047d491dc540453258a38b5f5067d64d41cbb8906768d2922fb464a95156cad","first_seen":"2025-06-24T11:42:37.890452Z","last_seen":"2026-06-28T16:13:49.953921Z","times_seen":138,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"wg6-h.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wg6-h.com/11/instagram.svg","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wg6-h.com/","date":"2026-06-28T09:52:58.829Z","timestamp":1782640378829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wg6-h.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 00:32:03 GMT","end":"Sun, 06 Sep 2026 01:29:42 GMT"},"fingerprint":{"sha1":"C0:A7:84:65:AD:4B:10:76:15:67:D8:89:B5:16:D0:E4:FD:46:15:E6","sha256":"67:A2:D3:FE:AA:EA:59:46:96:BC:3C:EC:E0:C6:04:7D:15:04:DA:F9:36:6B:7A:3B:5A:38:9F:E6:24:2D:37:E9"}}},"request":{"raw":"GET /11/instagram.svg HTTP/1.1\r\nHost: wg6-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wg6-h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 09:52:58 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 13 Aug 2025 12:56:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"689c8b6a-d0c\"\r\ncontent-encoding: gzip\r\nage: 23\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xLwMQf6tXGAb0RUF%2BSGI95iIaSSGsRnB%2BHiGqe4pGDI9uQdIrtRJO6cmfuDExYft3X5aqdavCvKQYXN%2F%2BRRAq3SyjgVAeFPQfqJg1fIx3gZw1rGweOy9gwt5qIw%3D\"}]}\r\ncf-ray: a12bcd3faf0eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3340,"size_decoded":2051,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2596e760ef39b6652856155799f8679","sha1":"986e590d5a43f0d100edfd875e0b3e7b745f7246","sha256":"846f1196bca0d924d00e66c04c3e87348884d1b3d7056ee8c521b994dea2f007","sha512":"88a948c5d16d8ce3af98198fb4d10bb00f7f73c4349d02b61f2f9d6d4ef5522c6c057eadce9989ee97d70a0a22f7bc30fe4305218c07b681c6210f1bf27297a4","ssdeep":"","tlshash":"bb6113e56788f2d1a249dbb4452fe9713f6e34fe7837c85852ad6dd1e6063ae0089880","first_seen":"2025-06-28T13:54:05.642637Z","last_seen":"2026-06-28T16:13:49.95479Z","times_seen":126,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"wg6-h.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wg6-h.com/11/x.svg","fqdn":"wg6-h.com","domain":"wg6-h.com","tld":"com"},"ip":{"addr":"104.21.4.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wg6-h.com/","date":"2026-06-28T09:52:58.831Z","timestamp":1782640378831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wg6-h.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 00:32:03 GMT","end":"Sun, 06 Sep 2026 01:29:42 GMT"},"fingerprint":{"sha1":"C0:A7:84:65:AD:4B:10:76:15:67:D8:89:B5:16:D0:E4:FD:46:15:E6","sha256":"67:A2:D3:FE:AA:EA:59:46:96:BC:3C:EC:E0:C6:04:7D:15:04:DA:F9:36:6B:7A:3B:5A:38:9F:E6:24:2D:37:E9"}}},"request":{"raw":"GET /11/x.svg HTTP/1.1\r\nHost: wg6-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wg6-h.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 09:52:58 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"689c8b6a-2a6\"\r\nlast-modified: Wed, 13 Aug 2025 12:56:10 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HMP6jYXUiRZXevKyM7zY6xbwRKqKE0Kprj8F1y1J7aZ58WywXlFIVNYWr09u1dOfKikVsvzzdLJDzfwcIrvzGzFq4JPMj5L%2F8voy57NzYQuRyd8jNmrFB3dUyMA%3D\"}]}\r\nage: 23\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a12bcd3fbf10b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":678,"size_decoded":1079,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c5dd88dec3bb9943b7f61ae0651794a6","sha1":"b5b8d284e6522a32d5e2e93c6181b42b910f8f35","sha256":"a3770e43e59ceb6a892326ca0af796a61b72c0f1adecdd905604b54b3d276033","sha512":"c4d6cb775a6aef23a2846cf8c88658bfc37cc98ef614fb5b6cf9bf6fe8f95978211cee735acf04f5917067ab42c47b8677f477ce4990d94398c4ac1d511b4f43","ssdeep":"","tlshash":"69019eb532a8434a4a4857688a7d30b271b4e8e58f648a1077d03b3b6c3b16a1435ded","first_seen":"2025-04-19T10:53:23.293559Z","last_seen":"2026-06-28T16:13:49.971461Z","times_seen":137,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-28","alert":"Phishing Block","trigger":"wg6-h.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"wg6-h.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}