{"report_id":"d5e74129-93d8-471b-ac71-6f143b52f922","version":0,"status":"done","tags":[],"date":"2026-06-28T11:23:52Z","url":{"schema":"https","addr":"gfuel.finance","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"gfuel.finance/","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"title":"GFUEL Creator Partner Program — Get Paid in Under 48 Hours","dom":{"size":1260,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"466309a332cae8dac272277f89ac3e12","sha1":"c5fe1bc3a738fa0ea93da4ef7956f0915992dadf","sha256":"3696e7a35959d6f3ef50c689da16f530a0f83f8e81cdacf3f10f279a7215d2ef","sha512":"79a0667a2d24ac36e8d0ba72d643f8969cef4c2188d366fe810e5003694bed4c317151ce43b265da533dfc171e9676dc2391826d8255e843b2409ffb496fbeec","ssdeep":"","tlshash":"492142eab474642b23726590743f211a7066713483683d28f5d5b0b29c783c738d339a","dom_hash":"domhashe7878feada357c83b98d617f7576c066","first_seen":"2026-06-28T11:24:03.511493Z","last_seen":"2026-06-28T11:24:03.511493Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"gfuel.finance","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-02T11:23:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gs.gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"myaccount.gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ayt.gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"t3.gstatic.com","ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-06T20:15:36Z","last_seen":"2026-06-26T18:36:43.349288Z","alert_count":0,"request_count":1,"received_data":1440,"sent_data":597,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gs.gfuel.finance","ip":{"addr":"172.67.130.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-28T11:23:57.205848Z","last_seen":"2026-06-28T11:23:57.205849Z","alert_count":11,"request_count":11,"received_data":1986704,"sent_data":19159,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"gfuel.finance","ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-28T11:23:57.211224Z","last_seen":"2026-06-28T11:23:57.211224Z","alert_count":14,"request_count":14,"received_data":1353377,"sent_data":11675,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Contentsquare","description":"Contentsquare is an enterprise-level UX optimisation platform.","website":"https://contentsquare.com","common_platform_enumeration":"","icon":"Contentsquare.svg","categories":["Analytics","A/B Testing"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-06-21T23:50:19.101112Z","alert_count":0,"request_count":1,"received_data":88176,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-06-21T22:45:06.213681Z","alert_count":0,"request_count":1,"received_data":464,"sent_data":570,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-21T22:19:08.810882Z","alert_count":0,"request_count":4,"received_data":197380,"sent_data":2288,"comment":"","tags":null,"fingerprints":null},{"fqdn":"myaccount.gfuel.finance","ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-28T11:23:57.206746Z","last_seen":"2026-06-28T11:23:57.206746Z","alert_count":1,"request_count":1,"received_data":2163,"sent_data":610,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":1,"received_data":10792,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ayt.gfuel.finance","ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":2889,"sent_data":916,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7e98b8a17c0aad30ba64d47b74e2a6c1","sha1":"3918373cf5559c54b52c7066428f6c4118d31c23","sha256":"5d7f49449ab22deac22d767b89549c554134c8e47de4d38e748049875c83503b","sha512":"3bae7400ab3bf3ce4657060253c393e06cbed140fd3867d920d725ee16b769073fa7440558f4e8bd8ff6c8b720d6cd772f8d2b0c846ac70cc6be6f3499d51a80","ssdeep":"","tlshash":"c71000000000000000000000003000000000c000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-07-01T22:29:56.793928Z","times_seen":809,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"baba354d921a53159cd4b497a6b9055c","sha1":"6ae87d23fd86e62fc940a10bd0d3e0732130f599","sha256":"462400d2087ca3014ff3a1848e6cf64ad19b16fec8ea2cbc759226467b068e58","sha512":"fae03f328154b8d30bfcf9c7c91de56c132b644458b347269a598de5ca375804568d1cc7f9a5aac10cffca0c763a3e17ca90096931a39d7ebe36e654a16d8559","ssdeep":"","tlshash":"58e07d63bdd2446ba4b21641320b4ecc8b393c5599b43c1dc7d7a4848170fc6c45eec3","size":330,"data":"","first_seen":"2026-06-23T13:29:09.404088Z","last_seen":"2026-06-28T11:24:03.532933Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ddd753c3ebbbfe8e950066d7f525f2e4","sha1":"691fdc8e140052784690171d9269fb5449013ff4","sha256":"b2b4b13db183d6b377b049918474cd4aa31522480b2362837aa15ad64aa48ac8","sha512":"409eb2c359578a26adb7eaa3dc4c34882b95cba356b41f3a0384c787b2bfe125c0a7f20646f59071f80f76eff1c9504ca80a463e3f18e8bd8563b53624a3d03b","ssdeep":"","tlshash":"45d097e439a10813d202b09d37c3d402808e1453b26cac4843dfcc39893b4b3c04cf0d","size":237,"data":"","first_seen":"2026-06-23T13:29:09.361177Z","last_seen":"2026-06-28T11:24:03.533868Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8f7dee2f03bdbcf208584de524eddb60","sha1":"e3de0dfe91e44d42be7e29ca68274a6f6bd2239b","sha256":"ad0b16cd7353826df2a3e8ded327f689ceb18bfecf1f3348abc6ff4761144621","sha512":"b9cb13dee0c98154cd1941d4621de97e4f5aed3189d2a0fee3639dcbae0c752150076c4c2df9b27c9806e3a9205e338e1592f1497185d0c682585732b2c2b9f5","ssdeep":"","tlshash":"0ec09256eeddb401f12a0a26631f624a8c956815e906ad001a7ec08057b39b72299687","size":131,"data":"","first_seen":"2026-06-23T13:29:09.414234Z","last_seen":"2026-06-28T11:24:03.534441Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c91f96b4fa6d80b98e35266cea82cdc3","sha1":"25f625b78e1308fa50cbcf4e7d9fe0e68d1b8b09","sha256":"354dce49e3d8088d9e494e7a762fa15e62c4ad5fa2738c6739e405d700135d67","sha512":"6f64d824791343ef7f97e36d644abf3ad3066bed3721853d3926fff48059d3469f558d0f6f0c9596cf4795ed6d4cc10eb7d24f1727ce51f94b4fe09dea447bc0","ssdeep":"","tlshash":"a6a002cebf95340912125566826b10094099548920408815935fd18da7328bf1a66de6","size":59,"data":"","first_seen":"2026-06-23T13:29:09.40967Z","last_seen":"2026-06-28T11:24:03.53576Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dade4cdaefe3e4f05acefae102edc57a","sha1":"3e90858f812b9a77357d67594e7b737ca0b2708b","sha256":"70145ca17626faa22afe3a745e30446a4749ace2f9261ce8edfaa61b4366f6d3","sha512":"ecafd8ab3920f6b0360b6d958510ff05bc47cb808ccbe5489cb8b5c56d14bd3a02ced218bfb735315150889a4bc859f6bd8a195dd0f0424b1b3297fb76023dd9","ssdeep":"","tlshash":"ead05e75fc17e4f4adef59c2c19f8700a664297ae6fd0b0dc2826b00ac4189753bb659","size":280,"data":"","first_seen":"2026-06-23T13:29:09.412299Z","last_seen":"2026-06-28T11:24:03.537246Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"13c52778e46a9de9256d78bcd69e1e21","sha1":"ab87ed36160cc5ec5ab6991d2de911df6c516291","sha256":"bd407d8225289e63d9bef094e6fdc6fe5fe35ebca51a19e9efb8864c6a38aa12","sha512":"fc5a2ed81ea203acb4df6b085efa8133b591afc0d19c5a0397e9411facca66343a3da11e83fb092b6cbb10257178f81494eb357aea509a2c9f7d1ab8454cd46e","ssdeep":"","tlshash":"c7100000000000000000300300000000000000000000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-09-01T19:52:59Z","last_seen":"2026-06-28T11:24:03.538094Z","times_seen":1086,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ca471f4b5f6216843fdc6e3f4b64d032","sha1":"12431f5c25516898e4fdf92809445168273fcc56","sha256":"520f72a99f3ae9df9503e0b3026bbf6e02058a97bdedb22c2e2e14c8d805f887","sha512":"01325c417c11d40385ca0812561428d9b904b10c1ad5497b2afd61d08150eb833f4349ff3a7b5a5ba08e751bc90b6f0f2d881a1d916a7ffc74383c7bf59906c2","ssdeep":"","tlshash":"0ac0c0c5f455443040d144b54c3b1209d5d9c440dc005802c3c0f869027185d053c802","size":166,"data":"","first_seen":"2026-06-23T13:29:09.428194Z","last_seen":"2026-06-28T11:24:03.538811Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a08e2b6e9693c1ae8998cac81dea62a2","sha1":"866a8e953fda74144191c7dfff68117ba7a9c613","sha256":"95d198a74d46118ac6c7a944419c09e2cf16cc51183a538ab2b1da3417680ab5","sha512":"e213867a8f1e4ff789c764afdcff3e851e3607565ee6b9d4e23005f56ae26a421f3a8f061f08b1591bb2ab6c1d66dbf987c67cf747cf59ba8e21dcb1af788dfa","ssdeep":"","tlshash":"2b31d167b8b2133d52bba2960b6ba50c3df1004b4a4fd55435ac5dc25f9ccd2c83e399","size":1836,"data":"","first_seen":"2026-02-17T15:12:36.345585Z","last_seen":"2026-07-22T09:13:38.091718Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1b819cd496f5bb480f5752ba8a8e428a","sha1":"5f50498f1e560cb416d304548007d5a7bee871c6","sha256":"e735a37d3ea6ea6a8c58084ad87774f01962a415e67cbe9764cf61b681ee419f","sha512":"6652b217b3735ebab5923604eeb319ad601e2555ec250ef9100b387fa8d7b7c0cb5756d8e5976388fb69d95ffb085b40a58caf94101b6bd257571f7fab174e38","ssdeep":"","tlshash":"c6b012042918f4c032b211501217242c94b1243050409902928cc44002a3af9035dc47","size":90,"data":"","first_seen":"2026-06-23T13:29:09.43927Z","last_seen":"2026-06-28T11:24:03.540335Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"266745940a5c2691e10fd332d99c6af5","sha1":"3d8c70b20bc913b5d654db5a99dd2844e4f2b8b3","sha256":"d85459bddb5defb2b1602499998c0d87ddbc92dbbe7c2af2b22387bca1d97e72","sha512":"015dd221b34a5bb11c766e97f7c163d5e59aa90e27b30843f2f837385de0df4b76bc7bfa48e4c3bfd077719bde15b838a2499ba47a7a52865da2c476fa3d4928","ssdeep":"","tlshash":"0ad02b4afe8460dfb97b90d50247c0bd82a4968a5a21e0e192dc46308573e468f44f43","size":279,"data":"","first_seen":"2026-06-23T13:29:09.432943Z","last_seen":"2026-06-28T11:24:03.541081Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2c204d849495890a8fad6b44ee78ac73","sha1":"f88b2c03c7c64889b9b57836fce434495b634c16","sha256":"048c79ad93713e3759dccfe3c05059ff8ccbf0445fb21d08de9f255541c8f01b","sha512":"52438a27033e13ddccc71bba40dbf4f3ebaacd4d3db594fbe5fada0db706f4a8cd2d2cc4834e4bdb9498a3be509915748b29570819db78320bc422d1738ee5b9","ssdeep":"","tlshash":"c71000000000030000000c000000000000000000003000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-12T08:57:42Z","last_seen":"2026-08-05T02:26:45.124974Z","times_seen":191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2fe7fa2ef5cd8b29bc0b57e1aded8aab","sha1":"3af89001c4986ca3f2d5f65234ffe261673181cb","sha256":"664445b67b76d2e46c1138034dfa51e09574e4a6d3648793022c240c5ae86c8e","sha512":"20ac8292e7120862a746a3c65197470384874b40d0660cd3a3f57fb942db4fea16aca331eb5515f3dcd7707bd76f95bae639cdb27c6fdcd554aecdfbb7553bad","ssdeep":"","tlshash":"6dd097729051c6a202aaa008a7118ab931867104647a09075b0ac4486b120e8a22cf80","size":230,"data":"","first_seen":"2026-06-23T13:29:09.433709Z","last_seen":"2026-06-28T11:24:03.542415Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3f6d3f080b7cf7f311575e549483a17f","sha1":"1e1bc0742e28ac05ac397ca847092483fbc3537e","sha256":"2babf7d36cac5aa1f5c380f4a3a3cea7bd6bd7788e230a50e245ba768619d19f","sha512":"716273460608b98da58adaacfe37f150ddf23887ac29158ec12ae51c24a73d4e53db3ff71d60987d47c004e14725c8cac99dbd534fc43fabdac5cb0234c5f713","ssdeep":"","tlshash":"01e02620e803e4f45c9b96d2c19f83005a142a2aa4bd0f4dd642e70098708830bf710e","size":319,"data":"","first_seen":"2026-06-23T13:29:09.368366Z","last_seen":"2026-06-28T11:24:03.543366Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bae3f90cb000352645e35fad60da411c","sha1":"00023f94c170125b979cb1914925d06ab1abfbce","sha256":"1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12","sha512":"d83d07979674822b4c966ddcb3bd4feb84830834e1f9fb255774ae237056cc357599e3aab9c6f47242aada2148a65c9ea11c859b1e8f550004535cc363fa02db","ssdeep":"","tlshash":"03800000203008388088000f3032cb8afaa0a22ae2322800c8a88c2cb0e8f80ba28838","size":35,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-09T04:43:20.57594Z","times_seen":185260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"041ded43c6ff6f45b0b74b79e68b3d12","sha1":"dc3175d97aec4d0f2c237f41939ca13bb23ac735","sha256":"eb189ae6ef6211afd952dde69e45e6f913cf0ce25395621658091ecee37dbe50","sha512":"399f9f1ad461ec151a3248305c7b149635df162303aaa40ae3bf1deb8008f84bab3c2757f70dc4329eaa34c1420f7a9bfbca04b0d1d461e46e919f8156868908","ssdeep":"","tlshash":"58b012407e01253165d1e075370b094c01123146a6180e58c70bc5ede9d183f4003de4","size":97,"data":"","first_seen":"2026-06-23T13:29:09.356842Z","last_seen":"2026-06-28T11:24:03.544702Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3110875d48901d93a0763a9e6ac3b2a4","sha1":"74fe402baff9078c69c27e937a4e7814b9e40367","sha256":"b509c251b5ff809bdcb540a5edd93f71e384086bf010feed0f533d2cafd00b4a","sha512":"1edfa3f1b6a4b4af9246475297ff79f236bf119adee70d1ada9c1d69cbcf4161f9b598391aa07df3092b51e69bf72054dec81a2d9c0528efe70f3e0ed0ef325c","ssdeep":"","tlshash":"4cd0978aafec2271f50b945d2255a00c8ac93121fa00fe80e700c8088cf2b36c204a81","size":251,"data":"","first_seen":"2026-06-23T13:29:09.370187Z","last_seen":"2026-06-28T11:24:03.546041Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cda3018e3f7dab9a4fe015a56828095a","sha1":"624b388eb7e5d9cecee521e5c6625c51d313be1a","sha256":"c24539b12589d5b5c4dab12bd6e5838f6b7b1f71e05d23685b67f73096670799","sha512":"e7a6a268ae0c4958d7ea25fc3d2b744888b73787a48c47006c6beb17002e84fa99321e7cb7c86577372be96247d00b8fb5879a6a04d9b35dcc660091934345ef","ssdeep":"","tlshash":"50d022a95ab952c0fb022864c244f62407fa2c02ddc8c1002be978e810a0a7906817a0","size":208,"data":"","first_seen":"2026-06-23T13:29:09.376676Z","last_seen":"2026-06-28T11:24:03.546738Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-09T04:43:58.288271Z","times_seen":341402,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-09T04:42:34.923767Z","times_seen":184625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"03d3f1a78e0888091506ffaebe2a14b2","sha1":"20fc519e9bf549b72efb05372bb89ea15ed4e33c","sha256":"5e7852111e99029127f1cc68832b38891ece4d08279724a504a87e256f8847e9","sha512":"eebd45bf024229717168520c1616680726ee58b14464b5a35d039551e04c60ef2374ed0bb291a035bc051cdc8aa2a2c886d372d769405c94f6dc5fcf7f6bd06e","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000003000000000000000","size":2,"data":"","first_seen":"2023-04-10T13:14:18Z","last_seen":"2026-07-10T12:05:44.690736Z","times_seen":153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e357949e89a91e1bfeef033b8336f9de","sha1":"ede7169b20aca37a1917e143b32b5e87638f9150","sha256":"1925c3b5a231790a54d7b710c38a44aae6a7b275785b39fd37cc600fb178a345","sha512":"1d23cc4d6e54fc65ff2f2e004d6b69d3bfe7f32c7092f4d5dba6777d676b1330ca7f6f51f5111cd5a6dadb15f18dc9c3865a5a5c80a0a0ccce7d37edcf90a119","ssdeep":"","tlshash":"6190025d2c987144257650554247516444a25a173b66151121bd8166057ad2a0925ce6","size":57,"data":"","first_seen":"2026-06-23T13:29:09.398913Z","last_seen":"2026-06-28T11:24:03.554205Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"68ff6a80546c093c0d42fcf4d7193821","sha1":"4a1b87dc1a91731be0d30ad4b0044c64fc5da1cd","sha256":"aec2142a0fd514cda775ed884f3f2c2cf0806b13884835ed89024767f5f047f8","sha512":"223c34514d50f3e51ee094848fd6ac1c3fc22386bbc829dd7805b950ec427344b70f13df4160e58be03e85cd4718f7bb30820b48caa3a8bd1b7aad776b817d47","ssdeep":"","tlshash":"6ec02294b48782288092c3b101370200dcfad4309c285ca96b82e75b827132f0e6a066","size":187,"data":"","first_seen":"2026-06-23T13:29:09.393316Z","last_seen":"2026-06-28T11:24:03.554931Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"224e46d4c8f105c8950932bcc1efa9e7","sha1":"eb1466fad32aeff364312f943484dbef5ce793f0","sha256":"59db3ee6d4d8e829840e9904bebee06ad1195740f6eaeb0b993af46220ef8de5","sha512":"d5889a72dd49603c8ddd7eaa6932ecf3ef984e06d3ecc6fcc38b5a34127281e85c7909985707a526282bcabc74cd71c42d240ddbc4ec2f32d85a848aa68c1219","ssdeep":"","tlshash":"a6c01208fcb5909841a3a251dde7ee89c989e0e0bb304b5d0712ae270de16d8a475d6a","size":184,"data":"","first_seen":"2026-06-23T13:29:09.429454Z","last_seen":"2026-06-28T11:24:03.55566Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"106530dc42baa21c67f8a3af4d7fd9e1","sha1":"9667e8ea57916e541aa28607221b2c49e22fd76d","sha256":"8bf797aa02bd65b7cbd52155f6e010be77bb3d461320dac4c74c12d749d81066","sha512":"2c70dedc552660b8f92acb9719f9e8674a0f6c1f862e058be0a844460c970e2d95dca5f129398d8897cb039f28340e8ff4550b3d6ef5df6fb99377bd4b8845ee","ssdeep":"","tlshash":"c71000000000000000000000000000000003000000000000000000000000000000000c","size":2,"data":"","first_seen":"2023-04-19T13:09:26Z","last_seen":"2026-06-28T11:24:03.556314Z","times_seen":253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b313005f99f04ba08e53c2eba40aa6b9","sha1":"f4cf4aa25a9dce1523a219d56de3858ecf4de1ac","sha256":"b0c27ab93d37fcd6cdaa95e2fdf4b33c93e523ae8dc9064a96c2c92118bdb51b","sha512":"c35a677c15fe8488284019244e38d81d9eb54a78798bcd755ee74337db356cb96e8b6b98653ff0a4c39b18b8f061fe72306e13b81ee6592f3437d3547016b663","ssdeep":"","tlshash":"46a024053f3c5fd440717110305d1014c34d300433037510c14dcc10033343313035c1","size":76,"data":"","first_seen":"2026-06-23T13:29:09.371659Z","last_seen":"2026-06-28T11:24:03.557021Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8465031414d12149f53e9e3247c92a55","sha1":"1c3ab11f1d28a5812c44bbd7edf5997ac7d464ec","sha256":"92451bc614d93d5e85c318a2a3b37df7dcb575e6fc2738d468e11903a61aad14","sha512":"fcd0e93c3ba44874458343a550662621eb042251a3c265c2dbe4cd27d8889e33c4ea9d2a4b3534fe08d5f3177dd811e786eed5ecad856d20394e88289710240f","ssdeep":"","tlshash":"299002846042b454967fb0205127005555292d505428695940552240281889fa4e1a88","size":51,"data":"","first_seen":"2026-06-23T13:29:09.388528Z","last_seen":"2026-06-28T11:24:03.557716Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cf164fe4bb3303010524743842722287","sha1":"77ad6d0da55f59edd770324b3cf156f06389c3b9","sha256":"90794a5ade6562961f8d00c6c95e0086e928aed0f381f1db2ce748ce3fab6648","sha512":"3b35ab35f2767639f1dcb632eb88865f3bf68791caf92f15c2f28eb164420dc908dae17c1517c499eeec988b5720efe83e0be4a3c843d1fc59579c2397fcf9ce","ssdeep":"","tlshash":"360120c791d22321bccae7d1819b9329071aee47ac94b9a84806a1fc52188db8462789","size":760,"data":"","first_seen":"2026-06-23T13:29:09.351164Z","last_seen":"2026-06-28T11:24:03.559718Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f83115b78944508fda11766373a0c56b","sha1":"c335998e420176956747bedfcd6b0498dedc6347","sha256":"2222f089e7d70d4f5e826675600e48726b1807604d464a93a4ff51d75d65e0bd","sha512":"eb9dc017ae3a40f4219bd860b7051b443bac03c64a7918fa4d4a70945e9d2c5cdbc3319e636ea16e0a8c4752e2e9f5983dfc006c535e3f9ca2ce8e5fc30c873c","ssdeep":"","tlshash":"c7100000000000000000000003000000000c0000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T12:23:48Z","last_seen":"2026-08-04T21:48:11.023805Z","times_seen":3614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a84a4aad67fd422800b440b553d8b47b","sha1":"eacb43f981cc78a1887934f5e88d6f0323c00a7b","sha256":"29b480343dae4c143aea95176532c87380b8765215f37a9a156bb6f394c49770","sha512":"c5dc082abe735aeefea7e31ad3b7e899128736394ebda6000886e771cf0f2a3ff449f611f168816afa07e98384fe536499dcf1bf03d2a589a55a5b171ac23f84","ssdeep":"","tlshash":"c7100000c000000000000000000c00c000000000000000000000000000000000000c00","size":2,"data":"","first_seen":"2023-03-29T23:29:19Z","last_seen":"2026-07-20T06:04:06.346009Z","times_seen":3585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"07a1e196ce7fc6555f6a3a2e53462c48","sha1":"6133fefb149f3023bbbd35170eba86cd42029782","sha256":"45362e324a4937d20ad02e871282a68f787b7f82076fe6f73a92457126702241","sha512":"a803e37655db8f32622b272120f693ab53ff7d55d24bec287508bc48a6eb66a711a1c094b732fa5f8a52dc2e9cfac8c6de97e6cdcc0f737ec60b7016a06a2a6b","ssdeep":"","tlshash":"9e70000a2c082000ba323220000b30080222808000000000800000888c3000b0203828","size":22,"data":"","first_seen":"2026-06-23T13:29:09.369297Z","last_seen":"2026-06-28T11:24:03.561562Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"77ac87d43142889c1390557844516ebe","sha1":"faf5b6f51416aa79224c76c711749bfe60fee96b","sha256":"31d13f4cddb3ab5e520caf0d77f71f2412ac2e2e86eea8c02ec59b87ba31319e","sha512":"12ead6445b12e01fce1430254740d6e529a60d513be56e083a9b895904c878c06cc33f38a8315f7ed1704136963d9c24be65af02a5dc19742f6fb23480002f39","ssdeep":"","tlshash":"ab70000a2c082008b8323222000b30080222808000000000000000888c3002b0303808","size":22,"data":"","first_seen":"2026-06-23T13:29:09.410498Z","last_seen":"2026-06-28T11:24:03.562273Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"006433b37ff9dce8a2a3d436718adcab","sha1":"289fb34922a392c0df8ecedad56341dac929b334","sha256":"21baeb3a7be242f994cec77cf051783ec949259e0fbc73361b8f414e56f8fae0","sha512":"9934ea15bab18ed888d8c57c94f860f772e0108ba553fb17ba6c3ded87b6661f45ad65b09454a6e8cf15f2e4f54327b6784e3ebbd15eb0b58cfc308f7aed6097","ssdeep":"","tlshash":"19a024043f3c5f5440717110304d1114c345300433033510c14dcc43033343313035c1","size":76,"data":"","first_seen":"2026-06-23T13:29:09.365719Z","last_seen":"2026-06-28T11:24:03.562992Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1b4d502463b20a09be211184a33f9705","sha1":"ef6b7b08710337a6a553a59c658b23a18ac33203","sha256":"4347dade7cb9222b0964a2ba6eda90a5fe52ad8422d01a9d36e38bc9fb9eb34d","sha512":"c4992721fc752ad2714ff1ab821f58204e1a57c249bffc4428205ca44bb876059b083100d4d35a673bd7f54c461472905f7840b39cf7e69f245b62a5de62b387","ssdeep":"","tlshash":"50f08b037548ae22d8f70cc346eb959cc1ee49019564aa4ae3f701804eb19dc588eda0","size":562,"data":"","first_seen":"2026-06-23T13:29:09.42687Z","last_seen":"2026-06-28T11:24:03.563615Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gs.gfuel.finance/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=byfTOb,lsjVmc,LEikZe","fqdn":"gs.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"172.67.130.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec72bf416e379817759865fe65daa3e8","sha1":"29f91b71783cc1a536e5203ae1d8a1a88c8b83bf","sha256":"90d33f528861178379264351279289dce654d57218628e7d0413f2c8f622ee9e","sha512":"14177f3f16f7aba91871e649e4fafd166040d7927d7b355b7decd50eef41a30ae8d2804cc6b2acd6273f3fdb9367923c67d262b230b5fad8f259815f6a47146e","ssdeep":"768:GAx8oJmYUL7RrUGKxRLiEoL73wsRwjL4kJLCLrf+l7yp1p9pMC92WtP+h91vMBOi:PgcxRQbLrGlU39pPyq","tlshash":"19f282d8b36170169263f0e4402f52ced37ba4a6b8649e7c719de8d29df440941bbbbc","size":35600,"data":"","first_seen":"2026-06-28T11:24:03.522307Z","last_seen":"2026-06-28T11:24:03.522307Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d2a0cf8b99c32f636994897b6f23b9f8","sha1":"eadf7de96a87dc865ec032e97665daabe217015d","sha256":"9aad9adb7835a74d5538d11a7589fbb6cac17bda8f9c8abbbb8b5ec1f6fc9d79","sha512":"e7b9c24417834231eb0f3f9dc526fb84b847a410f2a66b9b533cb50cfb1f533d30ac2c8d20f985dd2c3e2be8026773614bd5392383eaec672d41ab9a4254e85b","ssdeep":"","tlshash":"c710000000000000000000000000003000000000300030000003000000000000000000","size":2,"data":"","first_seen":"2023-03-07T12:25:56Z","last_seen":"2026-06-28T11:24:03.564188Z","times_seen":1871,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"40700aa58cb7d3c8a035a1a21e6491dc","sha1":"bddd8a18e3615bd97c86cff8c83cc1a96290c97d","sha256":"3de113cc4c6553923695965e01eba1b9cccf10e65446dfd0284a91173994f7dd","sha512":"988d97732710d197db6ad75f9f8df47c6469708f4d374f212139bb53060b761921f8fcd07b35f3426309adcc564e31abbe9f3847a221e24e474b6ffa8fb91d78","ssdeep":"","tlshash":"00b01258f9e01ad400437024d737721ce0f13530e8481d0f3943c18ad5b5bc515e2f07","size":107,"data":"","first_seen":"2026-06-23T13:29:09.403194Z","last_seen":"2026-06-28T11:24:03.564727Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0e7ea3a043bb484470aacbf654aa247c","sha1":"740a7128f39a5a6dd001fd23cb8da8d8d69341e8","sha256":"fc34b998c4945509bed261fc3f38a1118b08ba0d68a1259105ef80bea91d4d9b","sha512":"345201c106c4c6c7ed090ffe251572c274a4a9c85f30a6ec9d272b5d2bf3ac8a12497101e4272f2070272374c60b930909de28df6f5cbea7b4806e71f65a2b22","ssdeep":"","tlshash":"29c0c08430410759811bc3d0260304ff4c1005582408071ccb11c243c5143c304faea3","size":174,"data":"","first_seen":"2026-06-23T13:29:09.421691Z","last_seen":"2026-06-28T11:24:03.565284Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ayt.gfuel.finance/_/mss/boq-identity/_/js/k=boq-identity.AccountsDomaincookiesCheckconnectionJs.en_US._aAm_TUkenE.2018.O/d=1/rs=AOaEmlH8AYv0NXFPydvCe8Dm7IL7jDffPA/m=base","fqdn":"ayt.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5960627e964bc9ffcb66e7149c78389d","sha1":"1d3d4d7d20ad2e89c087b5886df06e0eb3e31d21","sha256":"dfaf7b04a99d806396808e9c5a40c8d04da62161d1b0d05374590cef2fd31337","sha512":"eb090b8d17226579fe08960e962aeb4ef5e4ae7a6b6864b55fe93b21527461d1087aa633a85c91d3245dee1f63abaa74c0429d8d3089d60d7717240deae246ab","ssdeep":"","tlshash":"96210feab074606723636590743f215a7076257483683d2cf595b0a35cb86c634d33aa","size":1173,"data":"","first_seen":"2026-06-28T11:24:03.565858Z","last_seen":"2026-06-28T11:24:03.565858Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c4ca4238a0b923820dcc509a6f75849b","sha1":"356a192b7913b04c54574d18c28d46e6395428ab","sha256":"6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b","sha512":"4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a","ssdeep":"","tlshash":"c70000000c000000c00000300000000000000000000000000000000000000000000030","size":1,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-08-09T04:43:58.264619Z","times_seen":137226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gs.gfuel.finance/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=CMcBD,DqMihc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NLiXbe,PrPYRd,SCuOPb,SD8Jgb,SpsfSb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,ZSzced,_b,_tp,byfTOb,cYShmd,cciGGe,eWuMIe,gJzDyc,hc6Ubd,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,qmdT9,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xQtZb,xiZRqc,y5vRwf,z0u0L,zbML3c,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=UMu52b,rmumx,E87wgc,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,oqkvIf,aXwZ4c,yRXbo,bTi8wc,ywOR5c,PHUIyb","fqdn":"gs.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"172.67.130.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc301c726d0cdea827fdaf7a5034ba5c","sha1":"6fc6ec507a61e016da01c5b3811ecec5d837e3f8","sha256":"252d4e85c8a6874598c8832853b7404e4686bfe26b24ae6c5e57d17aa52ca66e","sha512":"92f23738ccc695e9fe158f210a93ca89f1db326d9d20e49a3e757aaa2da434ff3f54b6d4956f22c6561ca337e2b1b8ad627059be03d0daab3272f4b79407e2de","ssdeep":"96:ovJwRRMzC1/zP2BkdiHYiZ0wPDAVeowYcccFihv2Ey8S6yw:wsMz6/z+ZHYiZ0wQwzFC+E+6n","tlshash":"83c1119df362b1112363f1f4287f024ee33b606d946546adb388d6e19ef45088637b79","size":5956,"data":"","first_seen":"2026-06-23T13:29:09.290925Z","last_seen":"2026-06-30T19:13:48.642022Z","times_seen":331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"076c2cd5a3db5b8c1ea98f159c000548","sha1":"88ea308963e7b2c3d16b4be2624093114bf268ff","sha256":"bb2dfbd41403ab52eee6b60f81ad1c4292ab87eafd66560ab105fa42751da514","sha512":"4f1da64012194844c8fc4b97b1ce47d1f1f43b955df046ae88b160ece451082b35bf39671a37c757d5c5e55c49eeb0bb43d68fb4bfbd75b4c1762b381c502dcf","ssdeep":"","tlshash":"dbd02b35fc03d0f45cdb14c2c1df8b005615192aa6fd0b0dc2467b005c048c303b7119","size":280,"data":"","first_seen":"2026-06-23T13:29:09.357791Z","last_seen":"2026-06-28T11:24:03.568353Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7cac9a4de7edff457fd46903d99d580a","sha1":"1786dbff86a02de8ecc8932f9f3e9ce75206d83b","sha256":"f6c09c170c5b62f1ec15e40d0949ca8ac96c133993fc137afac7ab5f8ae6c72b","sha512":"196bf405ddccd057922706829ba7cb99ebb249ada997a60484e9456aad18e5184090521079d47fde77b1f265dc305bd0bfdcbce88f13ee069442f0e146b16933","ssdeep":"","tlshash":"89d02e35fc03e0f8aceb18c2c1df8b009a16292aa6fd0b0dc2867b009c048c303bb209","size":278,"data":"","first_seen":"2026-06-23T13:29:09.336552Z","last_seen":"2026-06-28T11:24:03.569076Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"96baa6ae04f194046b5da66fb3f147fd","sha1":"a2e21a619ea3657b8e486800e7574261385e3f0b","sha256":"03dc2d00750bd768cb8e81ea6e159ab2049adb59dad4bacfdef11402ef7ab7ff","sha512":"db4d6f8bb636e13928d8ca22d148a1a374148d692af98251d19f4ff2b9f883d62bc7395ff9a062f1b2f4d246fae075a76cc927c064974414143fd000e93b38bf","ssdeep":"","tlshash":"b77000083c0830000022b820020ba0880022c00080008000820020800cb000e2222808","size":22,"data":"","first_seen":"2026-06-23T13:29:09.435059Z","last_seen":"2026-06-28T11:24:03.569706Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"75a0a039ef39aec750ee09b6e73e1c5c","sha1":"de4ec5aa67258c2b732401de040c3e91d6f7f773","sha256":"a76b583b7d5df34cd17992e9d50ed1bd1b5b2edbd75a25bd82b64d3d21126dd5","sha512":"5b401b89aaddb52151204ae86d18cf7555b7f63acb062f63621fea57ced9f3360c3419008bd293be82534d1f7651e3ea3a9007abca090ec1edb685ac23159027","ssdeep":"","tlshash":"e3f09ec5abd0dff6685f11d289435e2291e720013c9d783bbd8d76ac4021517309ad85","size":488,"data":"","first_seen":"2026-06-23T13:29:09.306717Z","last_seen":"2026-06-28T11:24:03.570585Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5cc63dce02b6fd40662160f59082d77f","sha1":"574c373472ad1aa8a21c579e8b0b3dbcaf657ea6","sha256":"a8aecc593df06110a87fe2c5f054ab39a3e544b3d351491b48a0b13c006b19cf","sha512":"eceea03993663a3ad2a997a2df5d85602d61e972fa8639d8d0e3b6075d0bde07161554fb0323808bc8c76224f81a7ecdbeeddda0ff25734956941fa6fcc59f7d","ssdeep":"","tlshash":"fb11daea14b6a4fa04fb104946431561b3eb1097278be085755c92921f2ce5f86e3aa9","size":1095,"data":"","first_seen":"2026-06-28T11:24:03.571308Z","last_seen":"2026-06-28T11:24:03.571308Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"33511035a4810e0c4a3d36121940fe96","sha1":"0e2b8536811dd2f104f7dc04b0651a6dc21e5b3a","sha256":"3958eb10a54345b67159618cad7e28bc028f789f82286bb15347821572742bc3","sha512":"ca7de70fdbe76680f885d49f5050d580488b3cce62ea9b33296c8a0c6332244f2d34e8c6a67742c752dbb1cbc87004213740ffc72c08c2e34d3359b7819161fc","ssdeep":"192:ZhN9dt6TP8yZN97rLeNkl1V65kNJK18d6NLWPfFTbnJkWWQxOsm8uGv:ZLsTP8yZN9vSNkl1V65k/K8d6NsFCWWI","tlshash":"cd42db8667119cf9ee7a1c93d5a29d9d7d2c023fd9c2283bb6d08d3427925ff060629c","size":12122,"data":"","first_seen":"2026-06-28T11:24:03.572618Z","last_seen":"2026-06-28T11:24:03.572618Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d3a143652a43a33cea2752dafcd07d9d","sha1":"34a2899183765b8f36e18e23247c4c9ccee0e17c","sha256":"7cdba993fe331f47a93cea452c6a3347584d682f0521db74dd90feb50141eb18","sha512":"a00050e106881e2e9fcb9756e7e84347b6b63ade4419ea324d5a85667da3e50e6e5e707a022543d330efe62a62548f4016c2785d5d04a0a59cda927e90cebcac","ssdeep":"","tlshash":"b7c08c6c234a10092913644c7b1b7a39d8fe2abc32a86a0ff080e240f99b8128850c24","size":167,"data":"","first_seen":"2026-06-20T19:47:44.426071Z","last_seen":"2026-06-29T22:15:06.300947Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8161f84d468d4bac8fe60cbf6f43a798","sha1":"df3f9ecb375d9f08aa222d77fc117aae33afd761","sha256":"4b29f74f2b853ae35a630e26054c98887a1389fc1bf87b77bd0fe58691ab791f","sha512":"e93f3dd93cd08b07177e8c2856780e33752d800067ef8debac157b68aca0f78a90e4a63e5464bfda326a98158b7a70ba355eb4decf4c7a1238c65c7cd754cd91","ssdeep":"","tlshash":"903194f971a271319893a26ea1efe24e10323615070b95588faec0605c7865b36faf3d","size":1727,"data":"","first_seen":"2024-06-12T12:53:38Z","last_seen":"2026-08-07T10:14:12.619339Z","times_seen":15281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"96f5e57189895f63eb2462692d40ae31","sha1":"86073a8e84635387b16656732b30c42cd3b7dc9c","sha256":"aa14fd092395f1053078dedaf340e5c23d5fa550a72a0520ef9b78b0e1f93b0a","sha512":"6a73adda554e7e1a6ccaad92bb94a26a1b148c1f71d908f20f3448b3abea82e4cb8f3e558a78f502949a9efb94c2c74923a2dfdc49436112e0b0965a5dcc9cc2","ssdeep":"","tlshash":"f8c0801fe132a4275d57b56874d90d6516c2c35c15d857352540f5037ca3610490f731","size":171,"data":"","first_seen":"2026-06-24T10:16:33.117061Z","last_seen":"2026-06-29T05:46:00.924694Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e5b17204cd55d18a8a2a41824d9fec28","sha1":"40e8060add70f00c034257f9d49a50dd799ba846","sha256":"3d0c04a7592aa05499634991244c8d7cce5e5f8b7a414ef8b83d6442b6d52612","sha512":"90e62bc6a184c80b47d53e87cdacee11b2b0ba45fae0ffa147da41bb89b96539f269aa1c8f0f3fa3829d919c26e10509e2496642e372229717380fe8c9aca5ba","ssdeep":"","tlshash":"a2600000030030c00000c03c3000000c0c0000c30303c030c000c0003c3000000300f3","size":12,"data":"","first_seen":"2023-03-07T01:11:32Z","last_seen":"2026-08-09T04:48:41.245146Z","times_seen":166786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"59c770fcdc07cfa415e22cba5b04e15c","sha1":"170e40b376a62d5c4b829e08b60b3d8b38aa57fd","sha256":"69e05fc44008871ae7b355e9efcc1c884eae5df9efe913161115e372d5332242","sha512":"feffedaa85f42e99be5ad9acee6ccafbc91a3dc358b29c00e4dc4f0857edbf96849a4722fee83064fba18a40ec560ca3f321d59ae2a2f2d741137fc24e640028","ssdeep":"","tlshash":"e751a9ddb2167c26078357d6715f110a797778a6a598443970dcc4e03bf1c3446abf3a","size":3118,"data":"","first_seen":"2026-05-25T18:50:54.531586Z","last_seen":"2026-08-09T04:48:41.245657Z","times_seen":9684,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b90579d967def1905d8e58bde1d6baa6","sha1":"d90906655ce68eb39abb59c16153675683d53d5c","sha256":"f984f4834618294a8c88f19ce3af90459eb4eef60144b2b9cb6a79d12a4621d5","sha512":"72173c364cfa1e41999bb6f938174991a5717eaba62253ddc31fbf21c9b5dde599d40dfb04d56b5d9fa4b975c85df0bf9f026779e4b864830fdd79947756d159","ssdeep":"","tlshash":"01c02b331383d9304d59d0173d6d23001c9a81cf0a02d40391004800bc10443a036ca2","size":130,"data":"","first_seen":"2023-03-07T01:11:32Z","last_seen":"2026-08-09T04:48:41.246209Z","times_seen":124431,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea79e3ed91d1a0ae87bf9c8213939982","sha1":"4e508577606ce1539ca31a5fdd167143161de46e","sha256":"8cea5f85878d166fd396c1eb0f652567af0ecdbeb879d2e8c189c22754b30dc5","sha512":"1a387542862cf7e0cb32670a1786c0dfeacaa2716335d1c90a400c2e2c82593c115f49ae1ccc0afcee3a15fc57445f2e4c84c224a6440e0a95a0e73d2101c6c5","ssdeep":"","tlshash":"ed9002f8a018e080c92361b1c26777046492020f3942481044004299665162b450558c","size":53,"data":"","first_seen":"2026-05-25T18:50:54.534401Z","last_seen":"2026-08-09T04:48:41.246777Z","times_seen":9869,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e55237ed6d5f7ce83bde8d0cca42e61","sha1":"946433d944cec22230c6079404ae7822fbd4d2c4","sha256":"749ef2a56cd808c47d0d1e4ef159a9dfb1b9cd1a87e98c9f976c9a8444e650ec","sha512":"de3ed4d5f1065d80b4af07a6f5c730ec3a775cb74ff030d410a4513123dfc2b411670382bdcd937047c532153a7e0c27e622794fa4c68f8f634306393dc49b73","ssdeep":"","tlshash":"bd9000b038088c3c2a8e000cbc3ce3e83c3208a0ba2b3880c0bc38882030eca0c00e8c","size":44,"data":"","first_seen":"2023-03-07T01:20:09Z","last_seen":"2026-08-07T10:14:12.62254Z","times_seen":16548,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"37b70da2f9cb46ce70cf4c5f99abed6f","sha1":"f701660e2e601404bd92a80cdb0ac1cbba37eee2","sha256":"b9730761a1da57d3a78b1f520559f4a35dd2816a2a8588263eb0b30c11601c9d","sha512":"46fcd7d87df475e661f939aa1d90b4d1517632bed2c55b05b451f7ba5c0878acc7cc34309e6e75ca5989eb50a803f73174286a96a56d90e2eba0681032c47614","ssdeep":"","tlshash":"d231fec7a9472cf3ff91a3405820fb49783d963b9fa4e1768ed40d9c00a8ca3a71848c","size":1756,"data":"","first_seen":"2026-06-28T11:24:03.582398Z","last_seen":"2026-06-28T11:24:03.582398Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9eaf65b651946aba5175ce8bc6c4938c","sha1":"5eb88eaaf88be1619ad0b5929e904211d93797d9","sha256":"9ab46daedc2ddce26f244b083b3e21eeb78406434f8f02a121a4cb1bbc6d923a","sha512":"17ab8345b2beead6fa88948e7993534cb4273fd65ac14f78f0f3c84d07169042798a0c684d774b8b66ee57c9738444abdebb64f820d31c55b0d493e05ec2db94","ssdeep":"","tlshash":"6ba00200e6013158d038c8c9f387734036cc7c61738a120e09302052b3f72c7c8a13c5","size":86,"data":"","first_seen":"2023-03-07T01:20:09Z","last_seen":"2026-08-07T10:14:12.623839Z","times_seen":16374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"436b4f3efc57ec4bf34f81a394b0dbd1","sha1":"2cfae37686f83abcad29a5d5200a3d7a8e01b826","sha256":"9063437b676e77d082b20d7a2dd0683aeecea8950a63ddb1ed721d5d061cb269","sha512":"cf9b164e8015fc2abfdb2443a3ce8366f0a55af087dbcb10472b08a86e8de4528fb2d54ef50db063f5f38ca41d604cc5a82c899b776befb56cbd38cb9192b8a4","ssdeep":"","tlshash":"06111274780836722c5747f0781bb5841413711f4b8bd601a26cf9a15a7ad6e1c7979c","size":881,"data":"","first_seen":"2026-06-11T21:01:03.721527Z","last_seen":"2026-08-09T04:48:41.249193Z","times_seen":8670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a1e67beef935488d4f2183e03a6e0652","sha1":"65896e9e74dde54823ec744991ce3de570f055ef","sha256":"08b441b2dfca436025c1bc3e1391b8a547797911b22f3aae17da2a6e42621504","sha512":"11c1021dfcaf958cf74516884a760e9daed5ccfea32b4861b356842f5b841723d8fd1f12b203dfb15533eaa27b7c84284d18d29fe0a16e785f1a9929e30a6f91","ssdeep":"768:OEwq70zsEfeKAQ7NA5QkvozQO9IQev3/O2slt1cESTbjCKAJhZwoGg9y49Q8tufo:d7VEvHOuZsdo","tlshash":"e793123a4112a425ebf79c6332c92e696d0c203783c69467e52e8dec8ed707f17797a4","size":90983,"data":"","first_seen":"2026-06-28T11:24:03.585361Z","last_seen":"2026-06-28T11:24:03.585361Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6971f916a8a13f901ada0e8607440d9c","sha1":"d21f54ccdeeae4ac490263b704d0e4ad0acb25a5","sha256":"3a4cafcb9a7fd4647700cad457d6812e3d8ed8a11ea63408ca23a62bbfacf8af","sha512":"422cc184f8670cbbafa7f3ae75f9e29cf49d0b21795f0abe2b9721bad2eeb9487655cd99cbe418d2e20249cdee5c7b3823c3e1f59172678bac7e58f4d250fc3e","ssdeep":"","tlshash":"6c113a6b71112cb7ff166700c831a85729ac663b47d43abc8de41e6852684e33e5b298","size":907,"data":"","first_seen":"2026-06-28T11:24:03.586448Z","last_seen":"2026-06-28T11:24:03.586448Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e8952c366e9a60554a7f71116454851","sha1":"d8963a9a25ef84a654ec8507b14c25fe5b6a6345","sha256":"939214f282a1f6c694222b65366d79fb5ddbec8afcf0520fdce377506f50b7fe","sha512":"970184f3304bfa3e7c1a1be9dac1982a6912494a44cc566b2c435d3a29097e17763aeaae3eed48c2b83940ea0687b8ae87e51d06e327a5e2e1f4cb6e93626646","ssdeep":"","tlshash":"03a022caa00330033f222b030088c2a08b88aa02c8c800000fb00a8ceac82c2a2382c8","size":73,"data":"","first_seen":"2024-06-09T23:04:43Z","last_seen":"2026-07-22T14:44:51.155156Z","times_seen":5967,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"27c196f7ec21d4a27456d34417ab31f1","sha1":"164f9588f61cdd054b69cfdb03951a6a63d2c407","sha256":"f8029e422e572dc228bb8a2bc5b990c2278e77389828ac53051a5659e9736a5a","sha512":"03b3320b0ea058ea286b63a7b3107218526cb1175e2c01f5dd0125cbfad311d688cb5e7216fc92b747b356652ec229628e9f753233555f77e258eef74be2544c","ssdeep":"","tlshash":"cdd022e721023283bf2a4fd05a24af4ca42b5742cfc480384db0811bdff8bb19a090c8","size":210,"data":"","first_seen":"2026-06-28T11:24:03.588383Z","last_seen":"2026-06-28T11:24:03.588383Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"452d69aee834de11fa51f93f5c92dd83","sha1":"132436030e51263ce9099355e9a11e92848599c5","sha256":"90d7569b06ff6c80442b863e3ff45b14ae1becc1646c4d36e3449239edf7a3c6","sha512":"cd33831e444e95a5bd181dec9e59c670481120e719436059e9f19a880d7b9a74aa67aca79a7f93e6bfd3a8856afab7056699b455b0d77e405b2122fc9dc0a56d","ssdeep":"1536:zOPnTuDfyZeC/fFro6J6DXcQH1K18N4gJT7BY/Y8LOinUh/U8eXJoXJ34cWnp20b:dEfVaVK0JT+Oig/U8ea34cIriEfAI","tlshash":"58d3094aa3b47a9f48a3bde3ee3bec0e55ee1d64444cd48d2d33a68dc57d4152c29e20","size":132530,"data":"","first_seen":"2026-06-28T11:24:03.589573Z","last_seen":"2026-06-28T11:24:03.589573Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bca81aa2bd25f6ec299e265df47d132","sha1":"33d0286c0004b5316cbed7e5317e434477dd24fe","sha256":"b8294fda31af0b2dbfbafadd7d8bc2af0ba008858629110919a466f64fb5e3ce","sha512":"6a4bd488e7a578f1caad2663120f864b63e062678db1e61c8693d0522bebbacf64ea93a93ce641f7274ee7be0d61acc3499a1a056533ce922152624238fa0b2d","ssdeep":"","tlshash":"4841624c56df0defb569271200142eba0dad352da39ba501289c2de58fc03f3416a65b","size":2023,"data":"","first_seen":"2023-07-13T07:32:25Z","last_seen":"2026-07-29T18:22:39.624973Z","times_seen":802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8221d40184df2e985b8b2300e0fac7ae","sha1":"c4cbbfebe277f66200e66af52d5e12a64d28e0fc","sha256":"245f781c8ff21b19b929acf650c47e7e72a4f1f42e1078e5c4d9fc2e98029744","sha512":"d5c91d0d75ca8f1250a3d6c193e49dad600ec84910981a8d15c21c92a1e4443e3c18685b152beacf076d8725124b8801ef9d1494c9e321210be4aec563db759f","ssdeep":"","tlshash":"ffd095585106731edd37539284f1c2094b08b15ec6dd48015dd2153ddddd07292446c4","size":254,"data":"","first_seen":"2026-06-28T11:24:03.594569Z","last_seen":"2026-06-28T11:24:03.594569Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"50371200cd5f1f923ab39ef2ef84f798","sha1":"5a3bbc0639a7a75c53fc1ce7a8c7a0433f6b3285","sha256":"6f32e65215e120986a7ab3e61b08961abcf448f7d1986d12f94dbab7ac2ccadc","sha512":"73908688f3f29f482cb37bd9fb39ef01210dc083cb39555b8ef7adcb75df7c03259f5a1ced11debc74d2ead9228f9113ef18581d470943eca8f49e2b3f7c6b41","ssdeep":"","tlshash":"90a001b2011ac0c0cd7056b6e377234179db292f68536e8088a891e93a2a717cd28ada","size":84,"data":"","first_seen":"2023-03-07T01:11:32Z","last_seen":"2026-08-09T04:48:41.254238Z","times_seen":114347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"86340eaa15f7d21ef77bdd87fe5f8152","sha1":"c51ea42d8f35237182957fa0efc3dd97ee395d60","sha256":"da9ab11578a64739cbf8079c36f7d6e74c5fcc1e3dd6c7608c370ab47cfd7e3b","sha512":"f2db0edd685ca94ddd9d3f00740c6d08ceefd726e4371412eb4bc99d4468f5aac2f4f72c415c2254e04a10b7ac856e5d700bb3caad89e571c362a169a3693f1f","ssdeep":"","tlshash":"05b09202e8001126e034c888ab17370532ca1c527a462909441151a675e3203dca02c0","size":104,"data":"","first_seen":"2025-03-03T03:46:29.515539Z","last_seen":"2026-08-09T04:48:41.255222Z","times_seen":83595,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc27fd65ac9d559e410d5f9e59fa2af9","sha1":"12cb4bb9a62a06bc0b0332ce5ec65b6940f9e796","sha256":"3f1052fd24552c91b3fc267e57efcf2b8f77c8163ef05039fba04328bf97e4cc","sha512":"2803cd6f723d0d53695925fd83a26debb3dbf4735ad949176c181ec06626ab769a59666cfe0f4a82101921c3d91d0037ccc4d3ffdfc57d1dbbe7d8a531eeff37","ssdeep":"","tlshash":"d8a00100e6013564d035c8c86347730432cc6811738a110a88703052b2f7357c8a03c4","size":86,"data":"","first_seen":"2023-03-07T01:20:09Z","last_seen":"2026-08-07T10:14:12.631998Z","times_seen":14116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9acdbc05ab7c5f2b2576422f0400963a","sha1":"143be00a352c9dc9fb12da7791c366233b5e95ff","sha256":"6fd2a6981e2ee5ba0aeef97b7bfe07df86aebd3b1f3f49a60331dd23be694de2","sha512":"f65139a3b586546763e8969f12b90495fda9b6b76686ba2a196a78ff8a898a50a2dc2a42d0a934a48c7bf343d420c785c392b62117c2413d9b1c72e72e18f470","ssdeep":"","tlshash":"c710000000000000000000000300000000000000003000000000000000000000030000","size":2,"data":"","first_seen":"2023-03-07T12:23:58Z","last_seen":"2026-06-28T11:24:03.609903Z","times_seen":1673,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c1e950443de5b49ee54370f0ad51ee3f","sha1":"49e557e5ce1b61b3afb9270226960b4437f141b7","sha256":"ef0e89391d5d65fdb40c51a34b8f5c68758965fae12f805d1f6d2d931b575b19","sha512":"8d4da17af19ff40f7f312beec0f2bab800f475c415c35929a41a723883150c8b2aa5cad4cb47230b3766ea0af5e6f60cd58140da6063997e9a59ec9d96cbb158","ssdeep":"","tlshash":"97c0802571d493dd15c714d545cb45bb04419912fd4d750f53d115d4792454ee471c09","size":171,"data":"","first_seen":"2026-06-23T13:29:09.333925Z","last_seen":"2026-06-28T11:24:03.610921Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0cc175b9c0f1b6a831c399e269772661","sha1":"86f7e437faa5a7fce15d1ddcb9eaeaea377667b8","sha256":"ca978112ca1bbdcafac231b39a23dc4da786eff8147c4e72b9807785afee48bb","sha512":"1f40fc92da241694750979ee6cf582f2d5d7d28e18335de05abc54d0560e0f5302860c652bf08d560252aa5e74210546f369fbbbce8c12cfc7957b2652fe9a75","ssdeep":"","tlshash":"c700000000000000c000003000000000000000000000000000000000000c0000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-08T18:49:33.461449Z","times_seen":79569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"13c614b1b5cd094a7b275f3fed3eff65","sha1":"dc27a5bc393b00d04864e62f577a032565dde463","sha256":"0af925eb4cafb06846ae255e9787cc028c0f1a43aae4451fe907b69ebc0fb3a5","sha512":"26fa32426c03146480094bb3bdf55e9b1c0073f3b0d09a79ecacdc57946c5203a1999a5f704bef94ce73839aebcc34461af216b360e4d297eef63ec2257062cb","ssdeep":"","tlshash":"37a022ac38202c0030b20000230f002c2c82a0c0f3828830c2ecc88a832f83b8202c80","size":70,"data":"","first_seen":"2026-06-23T13:29:09.424429Z","last_seen":"2026-06-28T11:24:03.612167Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"61a6f2652a0b6db05139abddb9b96ab7","sha1":"05548eab56f32db3c8c42fd2487a3f3b3ccf0ee1","sha256":"cc6e0d6af3dc4f620458aa79c4f4c0631ebc1bd55a148f5e9a06ea8874885831","sha512":"f2f89b1252cfe849de0cb4e8e8b7ee29cf99c563c5113ede3c45d470d5d14c45e0a3e30e560a79d14bfd4c46943c24a8444a1e81e4a0e93addf71ebdeaccaef4","ssdeep":"","tlshash":"4780047cdd4c5c350f157415001740441177700d50150005170004c44f311c5140fddc","size":38,"data":"","first_seen":"2023-03-11T13:53:37Z","last_seen":"2026-08-09T04:43:58.254177Z","times_seen":268907,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"29665dd77b61df9eb94ae4ab5908a788","sha1":"9481b6790f4711627658c96eb609f97ccad38021","sha256":"7e6b6bdca1a3fc8aa08a0793bd11af8aaf5e8c3c12f3bed848fae10572b27d95","sha512":"30fc053f4fb11f8ed5689d4a0097546bfa1aa367179fd78e9e97cb103458a53a41dc7e8addd2ad0aaa65924f61b9e2f83d5edd81dedad5e400a1a076471bd6e8","ssdeep":"1536:LITt2e4kEW59rCf9ecede6YuuOvjOh8Can:Ft69rCFecederuu0jOM","tlshash":"14432acfb1d2673159e3b2e1405b810d92be6a269c54291fba12e7f85a70ccb407bf35","size":60562,"data":"","first_seen":"2026-06-28T11:24:03.613247Z","last_seen":"2026-06-28T11:24:03.613247Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"adc16ca3600ca14de7576230cd07fbdf","sha1":"f26878cf5684f78567d6b81b5ef196c8c6a3dae1","sha256":"9687d2d7e6db967bffbf8348a3f3c1fc5f02a68814a602bfe951ecf26bc38602","sha512":"fa87f3886c019220cfd60ddf66e96b94be607f63410d3874d5cc1d44ab1e58afd2929c66730b20d8055b3c96d4aced786913e9512d12ff58cee05d943ef33376","ssdeep":"","tlshash":"c710000000000000000000000300000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T15:08:33Z","last_seen":"2026-07-22T22:17:21.768189Z","times_seen":4474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6bee02ab4f56d19e54ea5c98f475dcea","sha1":"fecb99bd8fdcf05d831e86d1a5975db1d0a75e06","sha256":"851e4b0917dddd5d912f3827ddd49681702d51dea55d977a68db0de2c227a9b0","sha512":"8db05d8509f5892a15b75f4b3c41e2f33aeb21ee187f23be8a9701e902c86a46b081fe6a6383d368f3d1c1adcaf554d4c387fde1614f2132763f7402ed9866c3","ssdeep":"","tlshash":"1fb0122eae54d500000e3cf4134b0a4ac1548414d048dc40e31cc8c4c72676e4d00dc3","size":96,"data":"","first_seen":"2026-06-23T13:29:09.332105Z","last_seen":"2026-06-28T11:24:03.614971Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2ca83e99aae29e53042e322a51236b78","sha1":"590bf391dd01dbe6ef6880215e6bce99fd9c08e7","sha256":"322682cebc7c198b37fac8eb57c549f9a516091b01f20cc414e3e8275eea4241","sha512":"7a938ff49077d5c599bca9500728b293ace8af3ff4be2249ab0cd5509a658bc1849b1f096ea04b646716e8a1000a561949963c40f7f96df39a9c8d4755a2a445","ssdeep":"","tlshash":"dba0028c94805ed605e3b610504793c8b751792c318a951a8a3bf1c057eedf76037e07","size":71,"data":"","first_seen":"2026-06-23T13:29:09.406803Z","last_seen":"2026-06-28T11:24:03.615477Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c5a4420ddb97961d52efe9fc567c2139","sha1":"21844f1bf5f389b6f52feb5530b52c9de3538146","sha256":"832cdf9e8bed2c39c833fe1003a670dd582fe3f2be0999348ec1c5e5b4ad05df","sha512":"9651bbb081c86504b75c276e4f5ea106349238d4ff3b590172fb71bcbb302086a49aae6def32ac622f6173a7e04988aae7ad13adc3ca07e87bb8dfc03679aefd","ssdeep":"","tlshash":"51c022c8ba61980c42c2907f8a7b1310d8ec8826ed080a64d350fa18a0e05e96268925","size":185,"data":"","first_seen":"2026-06-23T13:29:09.416278Z","last_seen":"2026-06-28T11:24:03.615979Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dd7536794b63bf90eccfd37f9b147d7f","sha1":"ca73ab65568cd125c2d27a22bbd9e863c10b675d","sha256":"a83dd0ccbffe39d071cc317ddf6e97f5c6b1c87af91919271f9fa140b0508c6c","sha512":"32b1786eca2b9f815b4c52b999e2b34dae877a86c00e8f745e7ac23388665c0703a947085bd7f975c5210ffab9b5a8f3931ab40b26cd7bccc4d7690cd19a4277","ssdeep":"","tlshash":"c700000000c00000c000003000000000000000000000000000000000000c0000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-08-09T02:36:33.175488Z","times_seen":56176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fd382fd71992c0b96f23211b827a2a2b","sha1":"f3cdd7afa3c14d3f898be96dd41e8b86d0e61e1a","sha256":"a894b45ef2e84c8bf8c6f23ad9bb1a14f6b668ddae97f0b930d8768973ec3bbb","sha512":"274d516d903406aed87da6908f6b9636351c8478e1ea9484ea89b1ff39a3862b9f028a421a0350178bdcd63aef2e02ac3da94d12a86494b3b0a2db822ad2270e","ssdeep":"","tlshash":"adc0809de559f15d43133672a04f14499119274014587c50d145009075329954493f65","size":156,"data":"","first_seen":"2026-06-23T13:29:09.353445Z","last_seen":"2026-06-28T11:24:03.616945Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"99e1bc0670147c7b56f509eba09131e4","sha1":"e8a84c5c21a5c4b46e5bd7124ac313e52e8a3c8c","sha256":"e7b713eab6fcb1e78b06042a0f8f2d7159c55ca25f57f7021796efd6bdbb948f","sha512":"48f123f2fe1f76f7aee3f3d2a2b51114ba6a79c13da597a45e7e903db873d7ad8c81f2608bb38feaa87b13131c901748076c69f9d015609892d801707d834235","ssdeep":"","tlshash":"54c0c08431410759811bc3d0260304ff4c1005582808071ccb11c243c5143c304faea3","size":176,"data":"","first_seen":"2026-06-23T13:29:09.373879Z","last_seen":"2026-06-28T11:24:03.617452Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0d21ea94dc454acb8b977f712f96e2bc","sha1":"00b89969e3e824c59a6523a32a70e00164203b6a","sha256":"29623e3fa140bc2002479b2316d974c81b428d4d2bd4118021519e930f0ad00b","sha512":"58366ed5795f58c9df8c99c4585b44881b1219124e55aa6c454141a6f0d3854e49dc3565306faaccafb5367bd5960cbb4fe2213a768bd8692242121bdc3cb5bc","ssdeep":"","tlshash":"d1d097f8300c8339a23b20c12ceb0c8c24eab4a822655f080f79202108f41eca2fe343","size":237,"data":"","first_seen":"2026-06-23T13:29:09.425271Z","last_seen":"2026-06-28T11:24:03.618167Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c9512565ef6194ca664dc41ec0de7a53","sha1":"ef48c8d0df5118edd036315d2021412c3ca49d8a","sha256":"5b950e77941d01cdf246d00b1ece546bc95234b77d98b44c9187e2733afa696a","sha512":"c761f2aa7ecb2d4fedbe0c36391e3b92d402b267ee499a5216e9c5b3a1f08b3553c4ab206601be1ef6b5957f114100f389248f1f7e27271e49f4c8b7838996a8","ssdeep":"","tlshash":"c71000000000000000030000000000000000000000000000000003000000000000000c","size":2,"data":"","first_seen":"2023-03-26T05:45:07Z","last_seen":"2026-06-28T11:24:03.618647Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ea03e4eab77660bf3c9541541b2bcef4","sha1":"ee1d9e79aa64bd5ee66ace1dcb1389b3663845ad","sha256":"3a89fcda7de56250d6bfbecad4fc28e1677fe1bf19a9d7aede3957ff92851462","sha512":"b9380baba8b39dbe9d9e4a57b45101d1a7ad587e914eeac5c04eedbeaeaab05fbd825fd95c453b99282479f6852600b37ad599b5828146f9b1e1af3493fca316","ssdeep":"","tlshash":"ea8000082c0c200032823ca8080b280e0032a0220a08088008c800888c3022a8233e08","size":26,"data":"","first_seen":"2026-06-23T13:29:09.310431Z","last_seen":"2026-06-28T11:24:03.61942Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b32fb2978d9616301153b6f8fddf1e2b","sha1":"fb10cd1e58bb0e660788127e9a4b48b9bec17748","sha256":"5cbc2fa1c292771ee316858f4994dd5b176a2968b91576345e91ea8b92bf165a","sha512":"2ee05b15346c58a567b27b3192bca4d9d67cfb38ca73f77ff3fd693ee21ba4e0128ad6260d387cf352c4b47e8df603c9e4368d14698ef2c6a63d6140b5a16226","ssdeep":"","tlshash":"eb9002846042b454967fa0205127005555192d505428591940551240281889fa4e1a08","size":49,"data":"","first_seen":"2026-06-23T13:29:09.385486Z","last_seen":"2026-06-28T11:24:03.619885Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ad2d8ee7d788dcf41f399818f639cb64","sha1":"32da67dd40a93c62a68b2ad9daeb9f2c124165ed","sha256":"ad2acd3b69fbf4091ad72c7f5fa23f9f1ec16141b5c18a3f6d42814c4d0d5475","sha512":"11abcccef42d4d79bdbbe31f9e569a115cc5eb5cf415b389d9f6e08efbf544a2c6c4679c410e91a8a68ad3b28532adc065a2efce6643fe0db80da690329b3183","ssdeep":"","tlshash":"c710000000000000000000000000000000000000030300000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T17:30:42Z","last_seen":"2026-07-31T17:46:30.881505Z","times_seen":399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b9ece18c950afbfa6b0fdbfa4ff731d3","sha1":"c2c53d66948214258a26ca9ca845d7ac0c17f8e7","sha256":"e632b7095b0bf32c260fa4c539e9fd7b852d0de454e9be26f24d0d6f91d069d3","sha512":"b2396a002fe7aec008808687d7cbacb340b7f7a090008382f3c95870f6fb10415f61f5737c102d4bfec58fe525407ea2001e761dab1da8a501d9523921f0ec21","ssdeep":"","tlshash":"c700000000000000c000003000000000000000000000000000000c0000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-08-05T07:58:11.232065Z","times_seen":53756,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"48dd2b9c7395aa96196f11bdd4916d2c","sha1":"23b09d08de8238af1ca2c6cadd4496c02cb89172","sha256":"bc544751a2c817629b208220494aac4521f50aded11a25e6ce27249cf9490aef","sha512":"d1ebd8cc4b4cfdebe1900e04a84a1d086857e2a20bc41baf754238c3c9e0b2f78d271d6919da6de5d396e9c777b06f859aa22e5b790d3f4421663ea50548407b","ssdeep":"","tlshash":"09a012502b84840034031687104b001740109c62410c6c102128c040877b9985583cc2","size":82,"data":"","first_seen":"2026-06-23T13:29:09.337437Z","last_seen":"2026-06-28T11:24:03.621824Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"14ba08fc2d5f29387ac047263a256aa4","sha1":"7476bf6de38cefbdb3a636d8580ae957194ce7c5","sha256":"5abec738646ddc82d58bc5669e4df06bdf27bfad1d8752d9db625ba1bf36155c","sha512":"98dd4a7282a51aa641628ae0e550a6d292f5369931ca1cbe69d5707f09d6e5876a09960d8855b431ba4b0b34e305e2e661b61e9328129ffd5f127cc64e052721","ssdeep":"","tlshash":"c50165c83004b58bf3fd8737ba9f17291b29741277a90e0a4102d0a4e56dc65c2a1e02","size":748,"data":"","first_seen":"2026-06-23T13:29:09.380991Z","last_seen":"2026-06-28T11:24:03.622356Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a16bd0462760e6d962a2105dc3d353af","sha1":"67db65bd1beb409615e5030a383673b321fddd98","sha256":"ea7098cda65f6ce9ff9766e4c2c427800da998cde430bb86f0ea4153905d2fd2","sha512":"7aa2747a36fd278354e2e4bee582bf0576997883a3a06dd2510018b433d104a4b9de5867058418435e2e513a7471aaf5edcc14f2a525687e1e7f701fb6fb1cf6","ssdeep":"","tlshash":"41a024043f3c5f5440717110304d1014c345700433033513c15dcc00033343313035c5","size":76,"data":"","first_seen":"2026-06-23T13:29:09.329543Z","last_seen":"2026-06-28T11:24:03.623088Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"67b52b6e2ba10c0400f3bdf222e5341b","sha1":"08702c35c20b1e6b02956f50b2b6be9b1f59559b","sha256":"a789758dd8557bd22c16f6e1ae2f9262cf1984fc35c92ea2b424ed076a1c43ed","sha512":"159eb02099d0157864583ad84e9ec7a8f54be17ae98b8d5268ef8bc3cc50aa78bf042743973c6f0423088c30b87c5d1cdc4938cc7a37b57aba6b2dbb76afd94d","ssdeep":"","tlshash":"c7100000000000000c0000000300000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T08:11:36Z","last_seen":"2026-07-22T22:17:21.794562Z","times_seen":3328,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"88800e01ddfbc70463cb160a034ff09b","sha1":"8c854f4ab189cdecd5fb4ccb3956e279ad3b7aa2","sha256":"d94b0fd2cd52295bc060bd1314d4b6394cac0b0ab68508f68f2811b21cd91787","sha512":"ff880e5b290c2b383ace8be7edcf7cffcde3e889a6dfc957f64320d507ce7b16cfecbd3337d6018104fe0b8905135e1d2e6e2850a4fd181a77760d5dacaa6ec0","ssdeep":"","tlshash":"a7c0c0c5f455443040d144b54c3b1209d5d9c440dc005806c3c0f86912b185d053c812","size":168,"data":"","first_seen":"2026-06-23T13:29:09.331281Z","last_seen":"2026-06-28T11:24:03.624554Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4f03938b1939de99f01aa224a897d73d","sha1":"6761b2bc2a3d68ed86dcfc92f08d3dd9bc43b855","sha256":"6262ddefb139cebc0fa06e7e613ca5952b71cad7d59c2ab811e43936e6ba16a6","sha512":"efb4c442be41c6924cd31a8955fa19e0715ca9d5ca9ffca488100e6c3a266de8833b9601e858d5c332119b273f9e55a5e6d09eb68a00c4ba08b0b749e4347629","ssdeep":"","tlshash":"5f110ed06977b8b6c99e183a9516d314a3e44303dc6b300fe306128293b7aa48cbd640","size":999,"data":"","first_seen":"2026-06-23T13:29:09.378052Z","last_seen":"2026-06-28T11:24:03.625258Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dbb9547bf6a1e9bc46c1c2e3ebba94be","sha1":"9a5e5e5f4f4197d6d76bdc15d9cf9398e2afc969","sha256":"c949a386750d5a07e9267ef714bdbcd1f6f529825fa2e44a1c5b9a8caa01d811","sha512":"7348d66c6729eb6a246fad586eb6b3e6ffdb75743678320bd483220378b73fc8ae552da576f86bcd46dfc57fb28e70cb25b9106bbd3a8f24b2df7cc618aeef58","ssdeep":"","tlshash":"62c02be854e0bc102291b171e036301cb8517d006844070f801471ec8be588f8d37e69","size":135,"data":"","first_seen":"2026-06-23T13:29:09.395888Z","last_seen":"2026-06-28T11:24:03.625844Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gs.gfuel.finance/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=CMcBD,DqMihc,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NLiXbe,PHUIyb,PrPYRd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UMu52b,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,YgOFye,ZSzced,_b,_tp,aXwZ4c,bTi8wc,byfTOb,cYShmd,cciGGe,eWuMIe,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,oqkvIf,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=p3hmRc,LvGhrf,RqjULd","fqdn":"gs.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"172.67.130.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e42363ebded14c970880a8a210a9ecf3","sha1":"a58ed73f24f4401d796f2d4a8cd88dc7651f889f","sha256":"a28590368e09d0da1ff564f90b67db3464c68ac427e62b41afcac0abeeabb3cf","sha512":"69a2a320b25b94389aa85ab24756d6156d7db750ea58b79d5bfbd6f3597f458b1d8177bdfb51c207213a3df7528cdfb41fbcf987d277ab2d86bce8f7ea39da6f","ssdeep":"384:kvYtEkSPyUMidenGmlyEEoJrY66ePfNa09GZe7o7wYJLxBNK8K95VCTe10M:kPkS/MirEEoJ9N9IaKi5wTe10M","tlshash":"7ab21bacf281317653b3f074c02f230be73ba96569158c6c65add6c46ebc489112bf6e","size":24346,"data":"","first_seen":"2026-06-23T13:29:09.273968Z","last_seen":"2026-06-30T19:13:48.644172Z","times_seen":364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e27b3ee4eaedfdef95030c7e8de3b48","sha1":"ed726459ad45c5692dd852969daa9f95e357cd33","sha256":"9e073e4220ee15ac4791ac17677d599d1d71f4b262ea0267ddcc584bd1cea59b","sha512":"6b415091fccb94e40cd860a355a80b39219c2e58b349d1afbce1b21521e98b40bc74b4ab908aff2d072ceb0cc0c7b1d68831863742ebeffefedb6828daf1fed2","ssdeep":"","tlshash":"cc7000083c08b8080022b02002cba0080022c00080088000820020800cb080a0202808","size":22,"data":"","first_seen":"2026-06-23T13:29:09.401772Z","last_seen":"2026-06-28T11:24:03.626345Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0553ca1f5e2d26b9344d44e947a68195","sha1":"9832747ee01d4881ea4e97ac5adbac6f5bccd082","sha256":"c5f19c705984af4c7d805ccd9b1562f09c325a57daecf65e7a460a58005d5b97","sha512":"ee874b76721d56273f400bb086af3c1faa79993b706fee55b6782c47a25391b92cb478dcccd974466086c94653d0da50ff9047a26ab1e1ccf773e0e901e5adb1","ssdeep":"","tlshash":"1070000a2c0a2000b0323220000b30080222c0800a000028000080888c3000b0203808","size":22,"data":"","first_seen":"2026-06-23T13:29:09.438326Z","last_seen":"2026-06-28T11:24:03.626823Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d48a24ae9672ee573050e4d3aeeebe4d","sha1":"8f8c4d27852980a1ec5a8b1aba30769001314ec8","sha256":"53e5b7d706a350fe98d52499058624e15cddc1541f17370f94a899a386c50255","sha512":"02dd385ce15083c89617859325e29ce885ae235c8c5be416828066dcb5db78e69229802d87aaf759224e2656ab4c23bf1740ae1d357cfdb57ebf78ab77488921","ssdeep":"","tlshash":"43800020202088288888200b20308b8abaa0a228a83a2000a08c8e2cb822e80a038820","size":29,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-09T04:43:58.318046Z","times_seen":189242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d9781f41e6e37cb88fc2f7a2667a7afd","sha1":"4f22508bced724f32132c30897042d51cf852223","sha256":"49922aa7e6810ffecc0324df72706b100cd67e08466e668a5da679f89911e781","sha512":"6a7aca14ebece655acdfa4c5b4f1a30f1d0bf8798e48aeb7447c5b8d602624952c3af94916e7004f7b9ea3a8fb2897783ba37ef2191bebc43abb0b3af22f5486","ssdeep":"","tlshash":"c7100000c000000000000000000c000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-29T23:34:47Z","last_seen":"2026-08-08T18:49:33.431968Z","times_seen":4231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ca63bbb28c746cf9bc617ef99a666d6d","sha1":"955ae643001b4601f1825f78192ad61a49813d98","sha256":"6ebce8d8f03938d2e10efab26c02bfbc893cb9f28265a83a598069cffbec424e","sha512":"3eaf12a377e43ad0047d30784bfb517dc17e1ae683f6c34c37cab81277e7fa787a7b9b56068f94bbe2f28432fe90cb2ab584c24d3a65d4da635cd12792fd20ec","ssdeep":"","tlshash":"e8d02b83954e0d36de9d22f113c3f62ec14cf4022214b1941049dc30e163a83cba8b53","size":260,"data":"","first_seen":"2026-06-23T13:29:09.384225Z","last_seen":"2026-06-28T11:24:03.628298Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gs.gfuel.finance/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=n73qwf,SCuOPb,IZT63,YYmHzb,vfuNJf,UUJqVe,ws9Tlc,KUM7Z,siKnQd,gJzDyc,cciGGe,m9oV,vjKJJ,y5vRwf,DqMihc,K1ZKnb,ZSzced,lkFgGf,SD8Jgb,mvkUhe,CMcBD,Fndnac,t2srLd,EN3i8d,z0u0L,xiZRqc,L9OGUe,PrPYRd,MpJwZc,cYShmd,hc6Ubd,inNHtf,oLggrd,eWuMIe,WpP9Yc,xQtZb,lwddkf,SpsfSb,tUnxGc,EFQ78c,zbML3c,zr1jrb,vHEMJe,YTxL4,YHI3We,Uas9Hd,zy0vNb,K0PMbc,MY7mZe,qmdT9,GwYlN,NLiXbe,LDQI","fqdn":"gs.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"172.67.130.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec2cdee9896689551f8618c0e0fc7a4e","sha1":"34548fcf10cc1abfd32fcf83554df8fbe294914f","sha256":"d7e12f58023551e8542635a43c4295e8fc046493ffd707cd88e35eba74454315","sha512":"e55e1e8ceb8683e971395b0f04169acabb25bd33f6f21b12328cf5c07e564eef596d62d3f45d6db92d20c4fdb61f4f7744ed3131d107fa3ac929fd816471ccf7","ssdeep":"6144:+p/e2o3bT0q7c+V+O7w6BjQDfHtG5o34CVYSrVVBYVkVc5WRFni8jq7hlZtfuUUR:+urTX/+Sr5o3mSbhc5+3jqlxu/TF","tlshash":"1405d69cb2a270525363f4b0413f124eb23f6896f4590cadb658d9d2aef484941b3fbd","size":857072,"data":"","first_seen":"2026-06-28T11:24:03.513642Z","last_seen":"2026-06-28T11:24:03.513642Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5f5a0f4ed6bfee5659729e9aee5099ad","sha1":"2b17d0637a2998f358501ad34998cbfdc5ecc9ad","sha256":"cd4b36d70f254260850ff784c79712e779ef294014f7478a880a7895c0b69e19","sha512":"becb1510d6fbf14fe5d2a558c54b5084efb0fc8036e0d1c001a88936c081b22b5cce63fb66deb3b15fc850456b95482877244a4ee1a328b1b6876c87885977a2","ssdeep":"","tlshash":"0780000c2f2c2008320238a8000b220e80b288022228080000c200800c3222a8233e88","size":26,"data":"","first_seen":"2026-06-23T13:29:09.440152Z","last_seen":"2026-06-28T11:24:03.629262Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"29b9915f800687b90149f58f95b43523","sha1":"a76374f5130f76b6395f0fdbc6fd213aee6bc626","sha256":"26d8007dfff7075caa7035a12aef391ed134e83beb29296f761fe3d2ce401efa","sha512":"4a6924d1f744a1325008f99d4c6917e111e30fa57aee5d7bc2b232c2928353a628dccc0f5f98172170c21b270cd2198b1d9f0c1af6300b1fcaab0064d6038a07","ssdeep":"","tlshash":"97f05cfa71506054c5d46410c76b333b79d27134b849290b8356eb308a755879a58efb","size":443,"data":"","first_seen":"2026-06-23T13:29:09.355563Z","last_seen":"2026-06-28T11:24:03.629783Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b736abed708b32338241bee4ca7f754d","sha1":"a491a0e00e779b6391bd0d76c69a13222b95227e","sha256":"3a5b48a3d3c676a113eec69329515f53b2d04396960987fdbaefa317a3e3edf2","sha512":"b679d88aaa72d42f1a39531ea63f37613f0de671ca4baff92973839c4bd727d7b6340a091f22d8256ab8379114f6083053a4ae5123f9ea5e3f546eb6756d39bc","ssdeep":"","tlshash":"6fc08ce692491361aa66e1616c23d00c58d1f7822c8f9b8aca1dc60046588ef346e922","size":161,"data":"","first_seen":"2026-06-23T13:29:09.386443Z","last_seen":"2026-06-28T11:24:03.630282Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f1b9a9237fed3f5dadb2f8fee90ed43","sha1":"6a287ea9350f5f1152f24ca722e02a5c8cad4b8d","sha256":"7f88b05a93b2397f9b03b1ad209536f48df767d5668b4b9734987794a971c077","sha512":"2c896295d9a3f965d2f326b6d8bb62675442dd2813b8c83b54dc588baa73701401cf1f40d66c4a8ff74095cdf2b1f2bafe2c7acba338ca9878525c630d8fb157","ssdeep":"","tlshash":"8231339bf03818bf48fb4afb61eb5790b5151080b84a44112bfd9ccd07d9ec268b76e6","size":1818,"data":"","first_seen":"2026-06-28T11:24:03.630781Z","last_seen":"2026-06-28T11:24:03.630781Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5b72677f98ea0ef526a9762bd666ecfa","sha1":"11669b3f19029b3bb259424cbb8d01c9c091259a","sha256":"9697595a03a5025e7e0223a70fe63a8b03743a386c3cd9afb98720cc7985322e","sha512":"628514d7dc77f82e4f0da13cbcec413f8252a9d2bb212551a8428f91cfc75f7120e14c80c714e05668d402934024373f63fc1ad608f1a07ecc9affb040a7c910","ssdeep":"","tlshash":"2dc022647a2007fa00e3a2a252faaf09103a20a062065596c63e44e04e10c49b2438dc","size":187,"data":"","first_seen":"2026-06-28T11:24:03.631947Z","last_seen":"2026-06-28T11:24:03.631947Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","size":1,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T04:48:43.2901Z","times_seen":504188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4c576bf38b9d543d07408fc6b30dc5aa","sha1":"d19f71427c952c68c870d799aafa4cb09c796aaf","sha256":"dbf6743154c455ef7d4b58c4453bd920c8fc1ad6f50875cea9e8edd73254113f","sha512":"99619a06e177b6394a6da4d00872b518bd44d8a477d102354d5b74d343f154fb2904f7c3b3507fd38c619320466cd1efc21c1dd82ff22d0d3c0013349dddc3da","ssdeep":"","tlshash":"c71000000000000000000000030000000000000000000000000000000000c000000003","size":2,"data":"","first_seen":"2023-03-08T08:11:36Z","last_seen":"2026-07-14T06:42:56.600457Z","times_seen":6200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"697f4490424c93c44f37a184d56e2047","sha1":"c98547cf48b49ce24fc1a9776c364327bcd4dc78","sha256":"c0e17df5beae0ba74fddc2fd91f202464834b21bd8a2d596bdd15c58fc9bf3da","sha512":"a40770a039aa893d8e4531a954738cf11f065227e3f68f05d281044245b81b2074fe8a9325bfa7ff9df7924d22c7dde11d8a450830baf7b80ac106d6ecf08757","ssdeep":"","tlshash":"04a012599b243e1401c03105100e440c10280145722084041096c84404aac962825457","size":82,"data":"","first_seen":"2026-06-23T13:29:09.381796Z","last_seen":"2026-06-28T11:24:03.63405Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5a423082f7039ed5fd50538462854422","sha1":"32acbdc0f038c45a817dccb1822073166c07116b","sha256":"04e92094dfb999d798e8c549bef54d3d2fb262db60b2a6f11858c305921d88e5","sha512":"e4cc677afa7c88df6622acaf45f7881bd6c33f69497128e263ab58c7fad014f0074a126592e0bf009b40bebce97d902ad9d50218d0276da8f27351be3c697115","ssdeep":"1536:bITt2e4kEW59rCf9ecede6YuuOvjOh8Can:Vt69rCFecederuu0jOM","tlshash":"2a5319cff1d2673159e3a2f1405b810d92be6a26dc54291fba12e7f85a70c8b406bf35","size":62408,"data":"","first_seen":"2026-06-28T11:24:03.634567Z","last_seen":"2026-06-28T11:24:03.634567Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fdc45335910df08320623d1caa31017d","sha1":"d92e919120d8d536e5fd1c1bbba85d3fa4e02441","sha256":"12b075b00f7048d44a8e4690d1a4a612eadeb676eec2de507410b94ed107b965","sha512":"affe838ed3f7637b22b815a3924135a491d63d231e7b12abe0c2fe85dd060a92331acef60ab23c781828ae312f94cec1cace5f83554bd31bbb990c0b6ca78aff","ssdeep":"","tlshash":"14b092d8e3902671604186866872a625f1e62882760128bac1a1e80fb490a8e45bd112","size":118,"data":"","first_seen":"2026-06-23T13:29:09.352558Z","last_seen":"2026-06-28T11:24:03.635484Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e068305e5c437941c8275aed0f62128b","sha1":"e63cf1f29e012aa46dad867b36a9f556d5f4678f","sha256":"030904d829b7bbbb4c73a9383abd4e182496644d44a7b3f563aea45430aba5d5","sha512":"bfddbcd8c58830c0805bb7377f8ac723f7fdcdab964d68a3a5d318127a2864a07eac76bacdc7309e7d17f2a36416b86bcaf330be5583cf3aa7d4564ee0dbfb58","ssdeep":"","tlshash":"79a0228c38002c0030b32000330f002c2c82a0c0cb028830c2ecc88acbabc3b8203e80","size":71,"data":"","first_seen":"2026-06-23T13:29:09.358798Z","last_seen":"2026-06-28T11:24:03.636249Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"162be2138cde40d81d695eacf0308bc7","sha1":"67acb7d11d67255e236f8cb7326572f7d3fde46f","sha256":"087860d1bf4d90ae85ccc952a56eac14e795b86b92eb8b08eb188a4c4b7bcc7c","sha512":"68631e0c5d772545a9d01aa0f4651b0ea7856c54d95ae720e16821ec853fdf98b78d7cc264dd4dd6409594e4ed08301037bfa3d72ac98bb6558efc521590529b","ssdeep":"","tlshash":"cbc022c8ba61980c42c290bf8a7b1310d8ec8826ed080a68d350fa18b0e05e96268925","size":187,"data":"","first_seen":"2026-06-23T13:29:09.307525Z","last_seen":"2026-06-28T11:24:03.636705Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1f24a1c46a65ba78b8bb641556504a66","sha1":"1526c072a3cbd5e5c59133f5e4ffb1bb436cf584","sha256":"2f49da02ee34b31248c886db63d391e1fc65694961ed0299e132d8abf60680c7","sha512":"398e5714794e31ea48d64bfe7945673419aedd8ad43dbb50a55f71c0b4867b514044bceae7c552036dcbf48acf6cb5129fc87423833978cb08cf2547137a95c1","ssdeep":"","tlshash":"ae1123507ad2112d55f4c72e050755488a40f231fb565ea3b714caa4c534a9319b74fa","size":871,"data":"","first_seen":"2026-06-23T13:29:09.396754Z","last_seen":"2026-06-28T11:24:03.637161Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e96d2bdcedafefb3157ba21ac8086f7","sha1":"7ab8d2cbc0b19aa2a1ded4ca07f719fc70435bde","sha256":"12adce29da4a7abd63b80a21239d09dc80cf9687a8a46992426d744053385af3","sha512":"dda6f40ece59590989317d8341ae7bad4c98623cdb3ed62131d8bcdf9d03dc3e2caa63f795c121d4c96e152d42ef6454d9b15ff4924e8a86cdb332ffbe457d4a","ssdeep":"","tlshash":"d6b012419b051523755281a27f0f10258882a000d5350f15c74ce194ffe69f790118d4","size":96,"data":"","first_seen":"2026-06-23T13:29:09.389472Z","last_seen":"2026-06-28T11:24:03.637608Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c928bcf68ecca45038475c2416aec94d","sha1":"dc12d9d24e1a252b059c9ad4fdc96ace233c8669","sha256":"4dcaec9f4a2cbd15b1637f6b6774c3147ade087c647c6aaf5db935467e0c54f5","sha512":"6af36c4f3df2668915600378ad089a16da763cd64fa80bfac580420710b19b3f93ad6cd570dd001751ff3c287b3f5913a245dd305be4514db14482dc7ea0f80d","ssdeep":"","tlshash":"8db0120d2a40245834933610614f0004814b10604d829d31514fc4e003234b65113d27","size":89,"data":"","first_seen":"2026-06-23T13:29:09.420931Z","last_seen":"2026-06-28T11:24:03.638052Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"59c6461cd6621cfc0e6fa66d78afb1f9","sha1":"4cfba21a3fb45e39e466bbd1a2685e536dc0a97d","sha256":"ebd32da545a24c3c1da859f789b02b2a2813975fe7a702b3f321c5c93ceef55a","sha512":"c4d71203a92e3e870161f4bf25994c9fdf5122f039c4dac54f9d5e7a6deb2f687f9d954da9274c7df1fc63cd7f9e48130364ba41272baea00f03fecabe241a2d","ssdeep":"","tlshash":"23e0685205718015b16228c2edd7f2a8a1302ef4c9853dae93417380a7b5cfbc444825","size":349,"data":"","first_seen":"2026-06-23T13:29:09.363425Z","last_seen":"2026-06-28T11:24:03.638917Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"732cb95b6d366cadff8da7f06144350f","sha1":"bbc9f1c04b4e9b44a917a5fe53e1a4c8f7699c28","sha256":"aa0bcb0b1bee2d4eaf7b70c57e3009be80c1ecfa7c6c4c6e12ed2d227b57c562","sha512":"a92a3d5b2ae3dc1442d430f31ed5466183e376ac4d3f0e90124510c5810f11c8d292c05a146480da66865c42d17448a89c503dce57d490d364a17cf764731cce","ssdeep":"","tlshash":"c3a024043f3c5f5440717110304d5014c345340433033510c14dcc40133343313035c1","size":76,"data":"","first_seen":"2026-06-23T13:29:09.348123Z","last_seen":"2026-06-28T11:24:03.639408Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"efad7abb323e3d4016284c8a6da076a1","sha1":"00762ccfa703393e0daff813a6ecc19f7cd02421","sha256":"ad9a67fefa847de87753df6794a0ae466431e76ad1fb4db58fbbe836d1dde0e7","sha512":"9ae86a653727e8ae8dea9c09f38b991f724c9b57ba7b2a929fde4529e210f5e6c8a7b5835f776d2ede0196599b809aed2ef6966b92880ab5e109a95e32fcb1d7","ssdeep":"","tlshash":"c71000c000000000000000000000000000003000000000000000000000000003000000","size":2,"data":"","first_seen":"2023-04-06T16:00:30Z","last_seen":"2026-07-07T13:24:18.922368Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"736d1f78c2675240dd8fbba891939729","sha1":"ab5ac869fb3b09fdb388db2498f5881daa1d33b5","sha256":"3f97fb2d8b7044b850880fc3a2a962d788d8c832786704bc74208416db499174","sha512":"c436e6b4e772f1525d62ee58cbcda5c2f48bd49a58a59093ad0531a8c74c68a0840e346bbe473e801c09ff97f215ce441b07e39adc1a498960e2f266eb9f6f36","ssdeep":"","tlshash":"800120c791d22321bccae3d1819b9329071aee47ac54b9a44806a1fc52188db8462789","size":758,"data":"","first_seen":"2026-06-23T13:29:09.37937Z","last_seen":"2026-06-28T11:24:03.640385Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a624f3bbe50d8a2c3e62e7c8a2477596","sha1":"9463838fdfbdefc556c33122f17e55b3d1f6ce60","sha256":"5a68600020a8a12cb9c3cfe55920d59182fe12d17d5e7b7253c84d5c9f5d58dd","sha512":"f63389ddd429d1e5513603b95a918f76a48c1e45c89b671dacca0a6dbeb302ae4182fcbf8c6bea1c5ea0bf2068f23c6065739a9d1198a8690658186e3615281c","ssdeep":"","tlshash":"dce0685205718015b16268c2ede7f2a8a1302ef4c9853dae93417380a7b5cfbc444825","size":351,"data":"","first_seen":"2026-06-23T13:29:09.445552Z","last_seen":"2026-06-28T11:24:03.641244Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f9131848d774287de7d9b93aa617e491","sha1":"c66a9e6b6581fb3cb6992b4bf063b05c06b8edc5","sha256":"dc1b3a60016527d0aca5f2e78956a5564754a3021f796e083c4ec401fc3a989f","sha512":"046e3ca9712e411c717896c01d19ce9796211bb86aaad976eb2f0353e3ef4e1bf5c35b1501d8198254fe2c5c84898e4f199463c2911bd8502c6d3f7c39285ce6","ssdeep":"","tlshash":"f60165c83004b58bf3fd8737ba9f17291b29741277a90e0e4102d0a4e56dc65c2a1e02","size":750,"data":"","first_seen":"2026-06-23T13:29:09.341536Z","last_seen":"2026-06-28T11:24:03.641722Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7b774effe4a349c6dd82ad4f4f21d34c","sha1":"51e69892ab49df85c6230ccc57f8e1d1606caccc","sha256":"0bfe935e70c321c7ca3afc75ce0d0ca2f98b5422e008bb31c00c6d7f1f1c0ad6","sha512":"58007911bf9f66711ef65e807b26c396a2d6fb464f4381520c5d4a575dbb81510f79d35e349604128a771acf2a117a2afdedc012d83b0eb822668aee0def4747","ssdeep":"","tlshash":"c7000000000c00c0c000003c0000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-08-08T13:26:03.213537Z","times_seen":48329,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"373633ec8af28e5afaf6e5f4fd87469b","sha1":"a454492e42fd9810e577ebee548c7e59bd883bca","sha256":"8833cb57eb821d629899ba0015aec1aa8efc7c2472f0590bedd1cebe28107cd6","sha512":"358eaaeb986c2fd54d0f1c1ba07988dc624125a7f117db8b6d354af38c47f3015e5eeb3bd39800a413a1b4d837a239c3fc327bc042dcce296ba4d80878302944","ssdeep":"","tlshash":"c7100000000000000000000000000000000000003000000000000c0000000000000000","size":2,"data":"","first_seen":"2023-03-14T04:05:54Z","last_seen":"2026-06-28T11:24:03.642719Z","times_seen":4644,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3574e2cb52e5c804b072f721a27cc96b","sha1":"aa62e6a2ea00f4c86088af226dfb185690789b25","sha256":"b266c29203594867523f1e1922fd7f5d466c4256a8723c0a0346d3ee29974b29","sha512":"cb22a32d25743a73d1f0dcba3c56f96ff0be3af623d5351605311d1c5fe127c668ec9ce5f4fe86287d8b877fc7e6acf44198321bbc04d4e4266eecd76f7053d3","ssdeep":"","tlshash":"cf1123507ad2112d55f4c72e050755488a40f231fb565ea3b714caa4c534a9319b74fa","size":873,"data":"","first_seen":"2026-06-23T13:29:09.422568Z","last_seen":"2026-06-28T11:24:03.643681Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ff04f8df117b84009370ec575f99d26f","sha1":"a27cae9aeb9b0cea99e3315234e17998819c207d","sha256":"cbbbaf32894ecb294136905581041f5c594af54af8a7c409afc0c45d58d77a13","sha512":"90d134f9a6c162521832f6fdbaca08be4c5da23296428d6313eb4ec58713d49ffb0221c6208ce6700ebb00611309f208d0aaca6f18c7fa4ac2e04b29311d3d92","ssdeep":"","tlshash":"a9c0c04a703bc0f7319f30d909c7c04101c010002830be150771d0000d7bf02c705b00","size":182,"data":"","first_seen":"2026-06-23T13:29:09.340057Z","last_seen":"2026-06-28T11:24:03.644177Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"61e9c06ea9a85a5088a499df6458d276","sha1":"e2415cb7f63df0c9de23362326ad3c37a9adfc96","sha256":"fcb5f40df9be6bae66c1d77a6c15968866a9e6cbd7314ca432b019d17392f6f4","sha512":"61037724a2fb00a12fa8a53ada233f54ff7fc6ee02048e579b83a127ce79fc03906c35b5307beb18a3cf5021fe031ae6587448d4d60a082d73252fe2e2f4ae7f","ssdeep":"","tlshash":"c700000000000000c00000300000000000c00000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-08T11:57:38.869419Z","times_seen":79797,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1349fca5f6631fb8591ed7381266183a","sha1":"8b9f314cf719554aeba8975957464e6d8f1c36ba","sha256":"37556a76cdfc86f690fc45c9ad903958d52945e5931ec54bf41d6c81aa8b82be","sha512":"9e1dae272f556f1f9aaa9b131d06aef06be6277be9fddf31b75a9e3990d5f8b0eed1293c4f7f71daa903830327ab5e5b6670b229e5411aa1094f8ca3a62cb166","ssdeep":"","tlshash":"c710000000000000000000000000000300000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T22:48:07Z","last_seen":"2026-06-28T11:24:03.64544Z","times_seen":6889,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5b7d9df3b1385274889686ff9a56d151","sha1":"11f13ddde137a4b0e5c312890c4bd7e1c42c2e24","sha256":"755f26d6bd87859de5d6c90ce9278f3b9866038f510d34ecfdd3040cbc2cb531","sha512":"0f9cd69ccad8262b864afdc26102f321e69e925673af253865d3e1eba387016546cc76cd119b173226180c0a059ff2666e3009c3dbf421b416deba6bab188c13","ssdeep":"","tlshash":"bdd02e2abe4e269cb2794be30a2b411c9692a11cce22f430521a8c21c94af0c0f08e09","size":264,"data":"","first_seen":"2026-06-23T13:29:09.375783Z","last_seen":"2026-06-28T11:24:03.645926Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"33216b43b389dc84a0811849a082a334","sha1":"e3910ac79a7e51d04757c3d6266a1d3e77847d2e","sha256":"66338548a3c04ad4ce4a6298db5b009f89494f66dfa2d898c39ce7223c28bae9","sha512":"b16c1d6b567c031ed1ddbc7cbfe3835e0351b42a843bd52875ae926c470ba4184415e57d302da4f07da3a272cdf2df45cc159e2b4a9317e0cebd2675383d6e63","ssdeep":"","tlshash":"adc08c282ae84928828b961569a70a0aece406100c8c2bec8322604065e8f8201ddc12","size":149,"data":"","first_seen":"2026-06-23T13:29:09.367509Z","last_seen":"2026-06-28T11:24:03.646438Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2712a524c556f9fd74822f1fd3a6f3bb","sha1":"ca8a689ca0a756890d8527f01bf555ce0d3f82a6","sha256":"7df357677c34b3fc5953659ad6b5a24cc589a035a000b649047b9d873966b2d6","sha512":"b7fa87aa857f337c98c64727818508eff5b8786622ee3acec0cab1d6bd216be4fa87c6edf76cf56d1889336b5a2861a8c9eba2ba7174de99b7927321b766567c","ssdeep":"","tlshash":"fd8000082e0c2008328a38b0080b200c002280020b0a088028c000888c30a2a8303e88","size":26,"data":"","first_seen":"2026-06-23T13:29:09.330375Z","last_seen":"2026-06-28T11:24:03.6469Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gs.gfuel.finance/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlGEBklL208WT59JvLy1mmuy8W09pQ/dti=1/m=_b,_tp","fqdn":"gs.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"172.67.130.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c81b50f2a720783bf932d27a9c99dd49","sha1":"5c053682e324a9376c3c7d8131807f31a1cf5013","sha256":"1c2fef86470bcc316295deb594432279ce7f9467171d8e41cd45472acfeb5a47","sha512":"2d36e98a71628b7f37ddfd027e79b51a7f045d1afdd71ac3afec22bcab5524b54b7cce7befc0446687e6e1643ba9e59dcaad8adf8229efcc450d806700e7d90c","ssdeep":"6144:k72/VWsf20lJWnOZCgnRwkHGlIu7/9v2lXkPaDMd8ZjIIVDJY8duIvpn:k72/Vokzuo9pn","tlshash":"3a253df976e0b453532367b0c02b111eb26f2869a21d4458f0e6dbd2beb0d6d45b7f28","size":1037652,"data":"","first_seen":"2026-06-28T11:24:03.521338Z","last_seen":"2026-06-28T11:24:03.521338Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5457ca9413ecf3a12bbf3bd343d0ac24","sha1":"d207cca41a9b4fc5bd19a5985ae5475685433fde","sha256":"0996b7186478b6e149e8e2332f3d9ce64cdff9ec3be6fbc1204779413ac0b0fc","sha512":"07b9440f3f6c27a25be7275270d27fe7bb67d1e31c909c36becc29296ea9bb07ccb7900b79cfcb70738b1a49dc0ea139c2f2c0d9554a62311b0ddab876d2a812","ssdeep":"","tlshash":"c5f0551e3667c1908aec3056a84b7c046cbed970052ca52e863136f046e39fb4cd9fa0","size":471,"data":"","first_seen":"2026-06-23T13:29:09.345676Z","last_seen":"2026-06-28T11:24:03.647405Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5969283e2464033447386342f665ec4f","sha1":"7bccb3151ce62cee4ed6d3c53ff5a4488fe3bda4","sha256":"7d1d6ebd4f67097bf9b5029f1f0438f16775323ceb20d15d8168d25fc755a715","sha512":"3dfacf27dcc2ca40020d8eba2898bad0aa1fedaa76d96d1e170e544bd60adfa7a5f24d1490b2b82f9b8f5272312cce691afcc319f666184b4f8d2c34204a9c7b","ssdeep":"","tlshash":"cfd0a56fa33d3f7653927fe86dc7505436e0c5223e0415dcc1136c6884655cfd445529","size":255,"data":"","first_seen":"2026-06-23T13:29:09.309572Z","last_seen":"2026-06-28T11:24:03.648766Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"731eb23194f911ab7ca3b34ea908ac0b","sha1":"301e75b0f8d393154d9b468c2203f4e03b43c150","sha256":"a7b4fac06175a79f76fef0f248107f251a1a795e269aaf276fb5d3f864a7371f","sha512":"bc3adc6a514c4ce5ecabd6a3ee9194de63afc5a03c5af966b7d5a99d57d703dcda7124521a341169acb3ca3eb7306661ea453a43c6adeb2b8daa350491c4767b","ssdeep":"","tlshash":"7fe0c0896737945ef5a654c313a58237707482050a3234722711165ccb557fb41acf34","size":345,"data":"","first_seen":"2026-06-23T13:29:09.435902Z","last_seen":"2026-06-28T11:24:03.649833Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9b5a67295e5540c6368d6f3a67984fad","sha1":"f65a0ea5725dfaa4a08c9cfc153389cde48fdf42","sha256":"6385e7644d771232f72b371d77f076326bfae29a8f520ac763b6ac8cfe271e58","sha512":"20b088e64106a6f7ec2167a8c7e782e572682979ae60ada0c0180d4de833ad7ddfd8af8fbddc830f953ad8962aa04c4ecec11b00d96ee5378a9d4d506421ed97","ssdeep":"","tlshash":"c71000000000000000000000c000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T20:50:39Z","last_seen":"2026-06-28T11:24:03.650365Z","times_seen":314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f4842dcb685d490e2a43212b8072a6fe","sha1":"691a77cd21a31b1b144537311a05b0bb5ff8fd2d","sha256":"f130559f0e7ff9f8dc605831a5fc02c8b6ecd02cb9df94fc1a90f8ff98709608","sha512":"b4c804894dc2e2bdf6fc7f8a9b74ac4c5d137ee5b613b7b95fb115967c9587cd0d86a641f12bb0a281095d06196824b8efb36deeb78011bdbe3ac4277d66745d","ssdeep":"","tlshash":"c7100000000000000000000000000000000000000c000000000000000000000000c000","size":2,"data":"","first_seen":"2023-04-05T10:16:08Z","last_seen":"2026-08-09T05:23:07.537887Z","times_seen":602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7b8b965ad4bca0e41ab51de7b31363a1","sha1":"d1854cae891ec7b29161ccaf79a24b00c274bdaa","sha256":"1b16b1df538ba12dc3f97edbb85caa7050d46c148134290feba80f8236c83db9","sha512":"917148ec47923f2e0e3d73142ac4f94ec4c73078865ba6d29f0ea172cd6f4bf34db699af5c33535d3694d4aef91a11f916004d0382f794448a8550623d34c985","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000c00000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-08T06:07:28.991699Z","times_seen":63510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/side.js?a=13","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"182276a3168f58192fabc0b2a8314d96","sha1":"b7708b650d14a70d923182e5ae41e805b19863bc","sha256":"bbf5c140ae5a313dbfa7d2576e829e7c20903d810d2b3f658193d5486910aa5d","sha512":"1abaecb449ff31344b7e7ee9e367d55c57336d645288fd8fdf5852f157ba37189db551b641bdc83b9bf4f9964151f7cf8cfd8723704bb614b3c860e4d3a521eb","ssdeep":"","tlshash":"1851321d24b9407613b7a02e8b87d34d7226209b6004ec4a37dc5b407fc5d6d93b3bda","size":2848,"data":"","first_seen":"2026-06-28T11:24:03.530105Z","last_seen":"2026-06-28T11:24:03.530105Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8277e0910d750195b448797616e091ad","sha1":"3c363836cf4e16666669a25da280a1865c2d2874","sha256":"18ac3e7343f016890c510e93f935261169d9e3f565436429830faf0934f4f8e4","sha512":"48fb10b15f3d44a09dc82d02b06581e0c0c69478c9fd2cf8f9093659019a1687baecdbb38c9e72b12169dc4148690f87467f9154f5931c5df665c6496cbfd5f5","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000030000","size":1,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-08-09T02:36:33.177428Z","times_seen":58213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gs.gfuel.finance/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=A7fCU,CMcBD,DqMihc,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,LvGhrf,MY7mZe,MpJwZc,NLiXbe,PHUIyb,PrPYRd,RMhBfe,RqjULd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UMu52b,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,YgOFye,ZDZcre,ZSzced,ZwDk9d,_b,_tp,aXwZ4c,bTi8wc,byfTOb,cYShmd,cciGGe,eWuMIe,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=iAskyc,ziXSP","fqdn":"gs.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"172.67.130.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b0323efe1e1d34bc6fabdaafb535076","sha1":"4ec78f2b0ce403db83cb72c842774e370031acfd","sha256":"5aeb99db77f7b7a1752bdcb386bdd30f45dc394714aa60ff312b89d077502ad6","sha512":"5139ac27ac1a92b072e2f5d23dba1a6a0a1b285785221dcdfa5e3f0379a73d3c515c40f3d54456c6f0c85683584e557b3cd47d467d27ca5b91c4c6e067f66064","ssdeep":"","tlshash":"9c41e19cf112f10472a3fca4617fa21d263b367ee7842a1c694945e27ff004b911bb6e","size":2423,"data":"","first_seen":"2026-06-23T13:29:09.276122Z","last_seen":"2026-06-30T19:13:48.647274Z","times_seen":362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2510c39011c5be704182423e3a695e91","sha1":"27d5482eebd075de44389774fce28c69f45c8a75","sha256":"aaa9402664f1a41f40ebbc52c9993eb66aeb366602958fdfaa283b71e64db123","sha512":"2241bc8fc70705b42efead371fd4982c5ba69917e5b4b895810002644f0386da9c3131793458c2bf47608480d64a07278133c99912e0ba2daf23098f3520eb97","ssdeep":"","tlshash":"c700000300000000c00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-08-04T18:55:31.786423Z","times_seen":60811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"89d98464c93cd91b6133165079630b6a","sha1":"25b23d416ceb39176353925ab5819be60049c0d8","sha256":"93160f6cae55fd6d6c66dd66b436860f1d3684786e6c581f59815dae02847dda","sha512":"e191a0e1084608f2e4b81afd4f4544cee9f7092ed49a290c60629f93dbbe19fb3c3ba2a57d6195f1a7e95911b3bf1aa44467b44c966970b8fe57212c669778e4","ssdeep":"","tlshash":"28d02bc6fd95a0a418cfa4d293b650305568304130cead41e58f54c0947394708a7b12","size":264,"data":"","first_seen":"2026-06-23T13:29:09.442552Z","last_seen":"2026-06-28T11:24:03.656075Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e8494ade287db646323fb6f2c0849fb","sha1":"6e5e65c18dcc5a7d2bb20a981548be2796b18899","sha256":"51458a29ff2d8817eadc41dc18b4a2f3d77a6d28e01611bb2027528ab73783de","sha512":"f4e4b934869d7cad35e40fd63b5cb7afdf9e23fc2c2fa6743a2550faf55d785bd490c2f44ea1b6b78c2585b997f272776e41f1d95fbd0529c130ec3171df8011","ssdeep":"","tlshash":"aee08c38293453eee5836941c9a6b54802ab5a82b405a13e94537e848719eeaa34c578","size":293,"data":"","first_seen":"2026-06-23T13:29:09.426129Z","last_seen":"2026-06-28T11:24:03.656646Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c213d15c524d3447ec3d11e951782264","sha1":"71b5e2758ac04d6a93dc87dcdbe4d667503f9438","sha256":"b968897b280fcb11911ad9d9777ac842a5237fa79e69b359238b2f16aee05012","sha512":"44a373909d16c9290745dc8dabd4046f010b2c7cfeb582f36d428c9312bfa087e5cd333e2e9e44a5c7de2126365d23d274df3e93585c08b8d25d9ebf6366609c","ssdeep":"","tlshash":"32b0120027c8208281510845734f101802c62d1182008c0067b9808083a563102e0583","size":92,"data":"","first_seen":"2026-06-23T13:29:09.449877Z","last_seen":"2026-06-28T11:24:03.657258Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"93b48ce0648fb4a15e5351fd4864cfe8","sha1":"acd82e60dbbe46553dee2d5afaa7506e366a1103","sha256":"f416e4790dd2a17bfdd497800ff2610ea31f58cdf5a934fce751fe0882348191","sha512":"5c73a6617cfcc571700dd31e495fea617f98540ced858112ea754be7c5ebceffc933d697498bbdcc6d8dcfabd49cfd92caff4b5b0f906b927b24f9f060484433","ssdeep":"","tlshash":"687000883c0830000032b020020ba0080022800080008e00c20020802cb000a020282a","size":22,"data":"","first_seen":"2026-06-23T13:29:09.415422Z","last_seen":"2026-06-28T11:24:03.657808Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2b7218d87688862dde511592f8fe6eba","sha1":"7eab886eee1bb0bcd46f95a56c2c214bd12f0e2e","sha256":"4e017bf5ed44854ebc1ef24e42c43aeaaa61797a3983f11fb23cc1929f381c53","sha512":"572c25c51d78197ea6278336baee3d52021ca776815f8d1fd30567c2d42c3c616b997d588cc7063de4f85cacc44052428f7154f16430771972af968c572f1977","ssdeep":"","tlshash":"6cd097729051c6a202aaa008a7118ab9318a7104647a09075b0ec4486b120e8e22cf80","size":232,"data":"","first_seen":"2026-06-23T13:29:09.3924Z","last_seen":"2026-06-28T11:24:03.659053Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1ca6a7ea6b2ae3314234eea0db27f3e2","sha1":"c35b61926758a5051c3fa0802674954c06d220e1","sha256":"58a0b970305bb8ac36fcb9b2d6128a07f8b119b407581bcdd1ed60be2433c690","sha512":"a061ae2d018a069f62dc2b36040e563c5fcc97abc8697a83dfb7adfea91c60f6cbf83c3548f97f33013a4a7a6d46323399f4688e1df08319a4d15ce33f467084","ssdeep":"","tlshash":"dbb012419b091523255280523f0f102588826040d9350f55c74ce194ffe69f790128d4","size":95,"data":"","first_seen":"2026-06-23T13:29:09.387649Z","last_seen":"2026-06-28T11:24:03.659573Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"61c0a53785643abfeb6c633d63aa9146","sha1":"4dc0a0b87da59fdc455b1454a711cc172e2a4d32","sha256":"6f4aaca43883ecddfdb42a4cd754d16e372e15c9197d80f6a46c868daed500c2","sha512":"b08cf5d752612e836b5801ce964d644a9439f60889080e3d2728cb5dc5b25188f067f3cf6ade2df7ec52ba01b92c019a462b2bc3db2c8eb2211bf2ace416dbdc","ssdeep":"","tlshash":"11e07d07f744896271a2835623cf551d4199904be064b8509b4c80a124f3d75883cb60","size":298,"data":"","first_seen":"2026-06-23T13:29:09.372444Z","last_seen":"2026-06-28T11:24:03.660105Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gs.gfuel.finance/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=CMcBD,DqMihc,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,LvGhrf,MY7mZe,MpJwZc,NLiXbe,PHUIyb,PrPYRd,RqjULd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UMu52b,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,YgOFye,ZSzced,_b,_tp,aXwZ4c,bTi8wc,byfTOb,cYShmd,cciGGe,eWuMIe,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=ZwDk9d,RMhBfe","fqdn":"gs.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"172.67.130.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"992c5e07183b9ebc7465726f004b3998","sha1":"4d9a6036d1f00f19797ed6f7871302b63d2d4ea3","sha256":"20b940adc9ffffffad80adcfa65d61e676bd1f6a1aac1a277e2e6473fb766c6d","sha512":"9b2e1d6b5169ad5025bea9ccd840512d4caebc56ed764e7ac3d6a8f853352679a5843a749b3ffbe9b8b5cdd2804eeca8109f762f7161b6ed522ec1b27c395646","ssdeep":"","tlshash":"455163de72e3b06257727460922b114bf26bfd5129992c2cb440c5813cf891ed07bb79","size":3167,"data":"","first_seen":"2026-06-23T13:29:09.275231Z","last_seen":"2026-06-30T19:13:48.642802Z","times_seen":363,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"796a9601e5f5a37e3b966312e4f18255","sha1":"1fb7cbd52bc969fa78df0adaebbc5fd077452126","sha256":"9d6f33c299b44ffd8a6f7822c2315f795f33ac1ba7dcf63780a0fb914d4ea495","sha512":"813f9d412570ff70499ad127e19be1fd8177efde11be8f6a943a73ad0aea29691a1a90c2ae63aa0c3407c666eef5bd13575c8a844083be7edeb4885ab8a069fe","ssdeep":"","tlshash":"cd70000a2c882000b0323222008b30080222888000000000000000888e3000b8203808","size":22,"data":"","first_seen":"2026-06-23T13:29:09.332947Z","last_seen":"2026-06-28T11:24:03.660956Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gs.gfuel.finance/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=A7fCU,CMcBD,DqMihc,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,LvGhrf,MY7mZe,MpJwZc,NLiXbe,PHUIyb,PrPYRd,RMhBfe,RqjULd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UMu52b,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,YgOFye,ZDZcre,ZSzced,ZwDk9d,_b,_tp,aXwZ4c,bTi8wc,byfTOb,cYShmd,cciGGe,eWuMIe,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=P6sQOc","fqdn":"gs.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"172.67.130.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67eebeeb03f07d692f43adafaa9f0174","sha1":"d9a28705cf13cf131dce59b1805ade83784c63af","sha256":"b7f123e2ee9825573a9ecf0aae9b5101ed55259fb6bf426cbc0fb7a13d0df4b0","sha512":"7516c7efc896f36e837e47ccd643a2de527c5281e8f89e31fcf8c795eecceb6b696278af5fe11918f17ada50365b7f03b3fbe3ca35e2a10217660ed769ef4649","ssdeep":"","tlshash":"d341428d7063b0021762b0f0501f21dfa2abbd7624d87d1db650f8c49db4845d59b7bc","size":2076,"data":"","first_seen":"2026-06-23T13:29:09.300442Z","last_seen":"2026-06-30T19:13:48.641141Z","times_seen":362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f07f77408b7312746aab28502318c679","sha1":"2ea99fbf8faf346b88602a5e7307f5c919667a5a","sha256":"09304f3f5a2ab11a820f3f3b8a1f954e06d4dffec2432b2fa14110b2eef2dc47","sha512":"69a55e54bce3976aa87fd559ada403f588c3ae139ab4f1742f0e60d1e18ac30c2241671a85c6243274efcee8b1e706d052e6acf76d3e5ae7414c292a0ed3fbcf","ssdeep":"","tlshash":"91f047e04752baed47017cf111ff301a91f79d655c397e04c125e2f94120fea9886909","size":596,"data":"","first_seen":"2026-06-23T13:29:09.31141Z","last_seen":"2026-06-28T11:24:03.661466Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1edfa7dec2d9a5f8b16e19257e5836e2","sha1":"dac720a0f6fdeb68e6be8ad5ea9035e39413723d","sha256":"e2b54f7eae45e041eaa912b2300aeedf013fb52ba28b08b6eaad9a7f3aa322ac","sha512":"c8ff3bd559afbbb8a6ccad3a7a5d9090cabcf0d334b8784809dc6bfca140f00f84cf4379dfd34e30b235696d51a92988a04b6c685d55d4561cb1cff3a53540dc","ssdeep":"","tlshash":"abe02620e803e4f45c9b96d2c19f83005a142a2aa4bd0f4dd642e700a8708870bf710e","size":321,"data":"","first_seen":"2026-06-23T13:29:09.441659Z","last_seen":"2026-06-28T11:24:03.661971Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gs.gfuel.finance/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=A7fCU,CMcBD,DqMihc,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,LvGhrf,MY7mZe,MpJwZc,NLiXbe,P6sQOc,PHUIyb,PrPYRd,RMhBfe,RqjULd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UMu52b,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,YgOFye,ZDZcre,ZSzced,ZwDk9d,_b,_tp,aXwZ4c,bTi8wc,byfTOb,cYShmd,cciGGe,eWuMIe,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=wg1P6b","fqdn":"gs.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"172.67.130.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1f1f3fb0d2a103cedbf075109cc40fe","sha1":"7048c2096c93dcf88fe653daa514031d74e7bab7","sha256":"4934f00cd80ecdcf48b007d429a944a55337b45e9897acf6cc54c957bb25f824","sha512":"004131e4c8b2d7f343c80753dfa96f1d8d0f6a9718486b13e0063ab7655edc4b97de4364b2748d8c20905534050277646e4b612d877fdeb0fd5beca69efa8538","ssdeep":"96:oeZbPCw88kVZTd3PK++BOhaWokAbqlNfKzLmEeVxh1McP6K4fCOw:TB6Td3y9CJWWyler6PCb","tlshash":"21b1518d76b27122b7a2f0f4527b421eb33a28ac9419562df5c884d77eb550409f3fb8","size":5245,"data":"","first_seen":"2026-06-23T13:29:09.304562Z","last_seen":"2026-06-30T19:13:48.645403Z","times_seen":327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c2b8a8421089a08b7ca67a32aaaa9b69","sha1":"eaaf8d468bbb58a7a2c0b06fd6f8371d4d7d82f7","sha256":"5be6cc6955704ed5f74a5d711eb1b007599dca1979ed84f12279c4728ceae98b","sha512":"502cf13842c13ccd34c07ab312f8c23cc0c0955bcdb018e356915ed9b1a2239e9f6afe7b1d5057555055d501d18e7c96755f96c5e35533e21dad55a48cdd25ee","ssdeep":"","tlshash":"8dd0a7f4740c8379a27b21c16ceb5d9c24aab5a822655f091f79216148f41eca2fe747","size":235,"data":"","first_seen":"2026-06-23T13:29:09.338725Z","last_seen":"2026-06-28T11:24:03.66248Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4d6b7e30ddc6ad50a18894f8c2735af7","sha1":"73fed5fbd4e6166ed136ae30269f396b7a62fd4f","sha256":"6e4dfb370b11857d9981e6738f4bcfbb99ae35e2b3a48b995f748f487c70a9d7","sha512":"32b2dcb6afcdddb30121f10523e58476ffe6f475c37443bfe22b6e1c8165c26b5d01063fc38ea7a41b35b93ec550286c5aad79c5962a69b9d22242c4d2cff25b","ssdeep":"","tlshash":"f1c01208fcb5909841a3a251dde7ee88c949e0e0bb304b5d0312ae270de16d89475d6a","size":182,"data":"","first_seen":"2026-06-23T13:29:09.38019Z","last_seen":"2026-06-28T11:24:03.663372Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5dbc98dcc983a70728bd082d1a47546e","sha1":"02aa629c8b16cd17a44f3a0efec2feed43937642","sha256":"8de0b3c47f112c59745f717a626932264c422a7563954872e237b223af4ad643","sha512":"0daa7cc9865200b82c0ebe57497197a804fdc301ef7a088dcf0acad7e04a007f52e7d0d9fc6aea387b333a4c72de4fbee3876dc48f19692739f7c0ed4a3eddb2","ssdeep":"","tlshash":"c700000000000000c0000030c000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-09T04:43:58.280463Z","times_seen":50694,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7c2900869bc58499f725b0a6f43794e1","sha1":"5c80d290dfce9b15a2b7633502b0b0de836aa6e5","sha256":"abdd1373893bb872973ac8b2071656b0a1db44f30ed4e0aebfae4c598a98dc06","sha512":"0ebfe6c223024c754c78c655f2b91ac083a69fba828357ce4594e43332d5943ecf7c40dc8e274f7f6346c5212805fb6de2aafe16cecf0e255a255091df2c9d5e","ssdeep":"","tlshash":"e1f0a217f774864255e240d615bbe6ac50ad22089c776f0b275151d40997fdf809fb60","size":592,"data":"","first_seen":"2026-06-23T13:29:09.391117Z","last_seen":"2026-06-28T11:24:03.664365Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1eb20b652ce618f98821226b75bc970c","sha1":"d04a5b7b563f45404d38eeea1ea3a0619ff98496","sha256":"ddd75f2148772e978671a0c3257d0185401e0d416f205e8310b44b40d536f452","sha512":"e840a215745567ef9c3038ebe91ced63e8a8aeedc6021dc12f016320101f757ff743847373dd7adcd29c9e17e96693ea6bc972d9bbd37368d4bd61f58806b9be","ssdeep":"","tlshash":"c8b012183918f48072b211d0121b142884f1283010009806928cc4642263af41359c47","size":91,"data":"","first_seen":"2026-06-23T13:29:09.404963Z","last_seen":"2026-06-28T11:24:03.66487Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gs.gfuel.finance/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=A7fCU,CMcBD,DqMihc,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,LvGhrf,MY7mZe,MpJwZc,NLiXbe,P6sQOc,PHUIyb,PrPYRd,RMhBfe,RqjULd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UMu52b,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,YgOFye,ZDZcre,ZSzced,ZwDk9d,_b,_tp,aXwZ4c,bTi8wc,byfTOb,cYShmd,cciGGe,eWuMIe,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,wg1P6b,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=Wt6vjf,hhhU8,FCpbqb,WhJNk","fqdn":"gs.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"172.67.130.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4d117cd5fddcdb0a47fb2907b80a5e5","sha1":"d5cc2387afc1d64845afaa80a7bba3fb56b91144","sha256":"f035ab1b51033033cebc3f32c6b8f807a25266290a3e0e1826a3be13576d91c5","sha512":"3753fc14ea7a4b3d5f7bf716c461b6765f28c6d69a8cb6f936d4026e138d35279ba24f3e3d585aff9dc774cc609c0eae5aea449653e7f8bb42a54e032efb850f","ssdeep":"","tlshash":"4c7182f4b5b63095d6b2b1ac813b0709c0b356a6a4e0675c79ded8c0adf940b423fbb4","size":3519,"data":"","first_seen":"2026-06-23T13:29:09.280562Z","last_seen":"2026-06-30T19:13:48.648561Z","times_seen":354,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b0038d67abd3de01eecb56ddc2508635","sha1":"3eeb6c8e2f220ecf1bfe0f6110b581dcc8b63652","sha256":"0745f2ca97524a16b486351ca2707efb76b74a3cf7b82f47bf3e6284e5b3e54f","sha512":"2de6b30cdcc6990962a7ddae49572f525226d00ee5b3d96128a4d81ae9e4a7a08da387377215ad0ac52100b1faa2ceb648647dfb6d384baf67077256ec5518b1","ssdeep":"","tlshash":"aac02284b48782288092c3b101370200dcfad4309c285ca56b82e75b827122f0e6a056","size":185,"data":"","first_seen":"2026-06-23T13:29:09.344151Z","last_seen":"2026-06-28T11:24:03.665815Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/zalupka.js?v=20260602","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a2bae0ee95b4c61c5f4a6fc257512b2","sha1":"0ce65f0eebbdaa5525ea7a9a5343ba5defcc1899","sha256":"b568a81122a85b8fe44ab9141e800c6982fe2e0424c0c4826d84c4d1c6518c77","sha512":"0fe35ebb8b6d26fa310134ba78928ca8be9de2aa80fbbe8d7535bfe9709d34685a1eba2e28c99566adf26255e70007babf9d2732d00541c391327a697c739bd0","ssdeep":"768:f4qC1ioyX7wAMlgHzSYCYHc485IaRg3WTOEd6R0rguYcFqxqO3PImClA84MKscIE:DX7wAMljYCY+Ceg3WTOEUmrgucxV3PmM","tlshash":"3923c667cd0f2e124360498326ee5bd11d2c578eb8d244cdb94fd394cb6ea3649e92ec","size":48924,"data":"","first_seen":"2026-06-28T11:24:03.520546Z","last_seen":"2026-06-28T11:24:03.520546Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/v3/signin/identifier?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB\u0026ifkv=AcDsRvwk86xNamdyBXrmLVNqWtEvYw-fbpbpDNPQIQ1yn8lVfr1EWR4u4K_OG2OBlFK1Osrz5mfyQA\u0026dsh=S-350060519%3A1782645800141420\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f61207e14e28ca8484b4df487915b55","sha1":"364336a5de92bec3aec3b05c759f251048ffdacb","sha256":"49fc76e5859c091b2ceaf6f74537da083dfcc3663cb7b700eb94350cdc965fd8","sha512":"3a5e6218b67accb67fead37d6483cc6995366f2689b7a0d3c646e31d86de57d944d915c3b89a475b5c978845f4856325c9431d29d55e023a10d5b6d2e70e0a33","ssdeep":"1536:jkQI6nt2e4uEW59rC99ecede6YuuOvjOh8Ua3:IQOr69rCHecederuu0jOa","tlshash":"91533acfb1d2773059e3b2e1406b910d92be6a259c54295fba12ebf45a70ccb403bf25","size":65039,"data":"","first_seen":"2026-06-28T11:24:03.666368Z","last_seen":"2026-06-28T11:24:03.666368Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3bd9391fe1954f47380da7173aed0ba2","sha1":"85a4998980d3c700015034b99395a15a8a597b02","sha256":"183dbc3e7ba2db3b7dcd4a239a8f0cdf67abb7a642014051804ffa1e959e19f4","sha512":"722f0e893d5e4f8a6dbd849a1c863d90d4d629f61938e6319924ab836d24bff0bcf29d61f6c2c59c649763f003949e83a857a10baad349eb113022b1c056b7d2","ssdeep":"","tlshash":"5bd05e75fc17e4f4adef59c2c19f8700a664297aa6fd0b0dc2826b009c4189743bb649","size":278,"data":"","first_seen":"2026-06-23T13:29:09.364424Z","last_seen":"2026-06-28T11:24:03.667344Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gs.gfuel.finance/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=CMcBD,DqMihc,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,LvGhrf,MY7mZe,MpJwZc,NLiXbe,PHUIyb,PrPYRd,RMhBfe,RqjULd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UMu52b,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,YgOFye,ZSzced,ZwDk9d,_b,_tp,aXwZ4c,bTi8wc,byfTOb,cYShmd,cciGGe,eWuMIe,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=ZDZcre,w9hDv,A7fCU","fqdn":"gs.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"172.67.130.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"79fee56db7e23da793fc31a2464fc076","sha1":"d34ba312129664338296ea7ddf5a1d62ea082e42","sha256":"e085e22e5b1e799296650b6da2615ff30aaf250666137d6dd94b1a55be2e9cff","sha512":"683ef4ead74815c9880308068e1c7fa3aca5d55d32e323d8bdbc959efb634110e8172c58e8735f6e6597705cc9a69384c961403d09bc1457c36d5a6a0e7cd0ba","ssdeep":"","tlshash":"e03153ed72c5b1419376b014bc7f528d52eb3bc9b4b02a08b548d8e15df448c541bb7e","size":1515,"data":"","first_seen":"2026-06-23T13:29:09.303536Z","last_seen":"2026-06-30T19:13:48.644782Z","times_seen":362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"sidesinstalling","filename":"https://gfuel.finance/side.js?a=13","line_number":2,"column_number":11},{"level":"log","text":"some","filename":"https://gfuel.finance/side.js?a=13","line_number":7,"column_number":17},{"level":"log","text":"can't access property \"register\", worker.sync is undefined","filename":"https://gfuel.finance/side.js?a=13","line_number":12,"column_number":29},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj110 class:Array extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[items:[https://myaccount.gfuel.finance/two-step-verification/backup-codes ] kind:ArrayLike length:2] sealed:false type:object]","filename":"https://gfuel.finance/side.js?a=13","line_number":73,"column_number":15},{"level":"log","text":"","filename":"https://gfuel.finance/side.js?a=13","line_number":75,"column_number":15}]},"http":[{"url":{"schema":"https","addr":"t3.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=accounts.google.com\u0026size=16","fqdn":"t3.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gfuel.finance/","date":"2026-06-28T11:23:17.572Z","timestamp":1782645797572,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://accounts.google.com\u0026size=16 HTTP/1.1\r\nHost: t3.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gfuel.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-location: https://accounts.google.com/favicon.ico\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 614\r\ndate: Sun, 28 Jun 2026 11:23:17 GMT\r\nexpires: Sun, 05 Jul 2026 11:23:17 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Tue, 17 Mar 2020 10:46:56 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":614,"size_decoded":1440,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"d4e2ea355216eb1b397d074140ba3123","sha1":"05cfeac2da1a7120e772e8a36ca25d938ed53660","sha256":"48f20dc3130552095a8548e4e25de6aaeea058a00b813d023be861a52bc9bc38","sha512":"c12a483d4c914a810841766aedb85b3d4e399904caf084cbe51e6b3a1842c454cb370df0d0ea4df13480ec66ebfbc2ac6d557b5d6a787c73e72af80baafd1142","ssdeep":"","tlshash":"64f002c8f6e792ffca59037bff5e1956ec5210252a1c5b29ae40d94cf645e802076c49","first_seen":"2023-05-12T18:43:29Z","last_seen":"2026-07-31T12:44:54.771236Z","times_seen":125,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":3,"connect":17,"send":0,"wait":29,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gs.gfuel.finance/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=n73qwf,SCuOPb,IZT63,YYmHzb,vfuNJf,UUJqVe,ws9Tlc,KUM7Z,siKnQd,gJzDyc,cciGGe,m9oV,vjKJJ,y5vRwf,DqMihc,K1ZKnb,ZSzced,lkFgGf,SD8Jgb,mvkUhe,CMcBD,Fndnac,t2srLd,EN3i8d,z0u0L,xiZRqc,L9OGUe,PrPYRd,MpJwZc,cYShmd,hc6Ubd,inNHtf,oLggrd,eWuMIe,WpP9Yc,xQtZb,lwddkf,SpsfSb,tUnxGc,EFQ78c,zbML3c,zr1jrb,vHEMJe,YTxL4,YHI3We,Uas9Hd,zy0vNb,K0PMbc,MY7mZe,qmdT9,GwYlN,NLiXbe,LDQI","fqdn":"gs.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"172.67.130.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","date":"2026-06-28T11:23:24.345Z","timestamp":1782645804345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=n73qwf,SCuOPb,IZT63,YYmHzb,vfuNJf,UUJqVe,ws9Tlc,KUM7Z,siKnQd,gJzDyc,cciGGe,m9oV,vjKJJ,y5vRwf,DqMihc,K1ZKnb,ZSzced,lkFgGf,SD8Jgb,mvkUhe,CMcBD,Fndnac,t2srLd,EN3i8d,z0u0L,xiZRqc,L9OGUe,PrPYRd,MpJwZc,cYShmd,hc6Ubd,inNHtf,oLggrd,eWuMIe,WpP9Yc,xQtZb,lwddkf,SpsfSb,tUnxGc,EFQ78c,zbML3c,zr1jrb,vHEMJe,YTxL4,YHI3We,Uas9Hd,zy0vNb,K0PMbc,MY7mZe,qmdT9,GwYlN,NLiXbe,LDQI HTTP/1.1\r\nHost: gs.gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gfuel.finance/\r\nOrigin: https://gfuel.finance\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:24 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"boq-infra/identity-boq-js-css-signers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Mon, 28 Jun 2027 09:37:59 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nvary: Accept-Encoding, Origin\r\nage: 6325\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: https://gfuel.finance\r\ncf-ray: a12c51b52a3c8be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":857072,"size_decoded":246549,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6791)","md5":"ec2cdee9896689551f8618c0e0fc7a4e","sha1":"34548fcf10cc1abfd32fcf83554df8fbe294914f","sha256":"d7e12f58023551e8542635a43c4295e8fc046493ffd707cd88e35eba74454315","sha512":"e55e1e8ceb8683e971395b0f04169acabb25bd33f6f21b12328cf5c07e564eef596d62d3f45d6db92d20c4fdb61f4f7744ed3131d107fa3ac929fd816471ccf7","ssdeep":"6144:+p/e2o3bT0q7c+V+O7w6BjQDfHtG5o34CVYSrVVBYVkVc5WRFni8jq7hlZtfuUUR:+urTX/+Sr5o3mSbhc5+3jqlxu/TF","tlshash":"1405d69cb2a270525363f4b0413f124eb23f6896f4590cadb658d9d2aef484941b3fbd","first_seen":"2026-06-28T11:24:03.513642Z","last_seen":"2026-06-28T11:24:03.513642Z","times_seen":1,"resource_available":true,"data":null}},"time_used":682,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":586,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gs.gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gs.gfuel.finance/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=CMcBD,DqMihc,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,LvGhrf,MY7mZe,MpJwZc,NLiXbe,PHUIyb,PrPYRd,RMhBfe,RqjULd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UMu52b,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,YgOFye,ZSzced,ZwDk9d,_b,_tp,aXwZ4c,bTi8wc,byfTOb,cYShmd,cciGGe,eWuMIe,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=ZDZcre,w9hDv,A7fCU","fqdn":"gs.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"172.67.130.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","date":"2026-06-28T11:23:25.209Z","timestamp":1782645805209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=CMcBD,DqMihc,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,LvGhrf,MY7mZe,MpJwZc,NLiXbe,PHUIyb,PrPYRd,RMhBfe,RqjULd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UMu52b,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,YgOFye,ZSzced,ZwDk9d,_b,_tp,aXwZ4c,bTi8wc,byfTOb,cYShmd,cciGGe,eWuMIe,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=ZDZcre,w9hDv,A7fCU HTTP/1.1\r\nHost: gs.gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gfuel.finance/\r\nOrigin: https://gfuel.finance\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:25 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"boq-infra/identity-boq-js-css-signers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Mon, 28 Jun 2027 09:37:59 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nvary: Accept-Encoding, Origin\r\nage: 6326\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: https://gfuel.finance\r\ncf-ray: a12c51ba9aef8be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1515,"size_decoded":1495,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (367)","md5":"79fee56db7e23da793fc31a2464fc076","sha1":"d34ba312129664338296ea7ddf5a1d62ea082e42","sha256":"e085e22e5b1e799296650b6da2615ff30aaf250666137d6dd94b1a55be2e9cff","sha512":"683ef4ead74815c9880308068e1c7fa3aca5d55d32e323d8bdbc959efb634110e8172c58e8735f6e6597705cc9a69384c961403d09bc1457c36d5a6a0e7cd0ba","ssdeep":"","tlshash":"e03153ed72c5b1419376b014bc7f528d52eb3bc9b4b02a08b548d8e15df448c541bb7e","first_seen":"2026-06-23T13:29:09.303536Z","last_seen":"2026-06-30T19:13:48.644782Z","times_seen":362,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gs.gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gs.gfuel.finance/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=A7fCU,CMcBD,DqMihc,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,LvGhrf,MY7mZe,MpJwZc,NLiXbe,PHUIyb,PrPYRd,RMhBfe,RqjULd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UMu52b,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,YgOFye,ZDZcre,ZSzced,ZwDk9d,_b,_tp,aXwZ4c,bTi8wc,byfTOb,cYShmd,cciGGe,eWuMIe,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=iAskyc,ziXSP","fqdn":"gs.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"172.67.130.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","date":"2026-06-28T11:23:25.220Z","timestamp":1782645805220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=A7fCU,CMcBD,DqMihc,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,LvGhrf,MY7mZe,MpJwZc,NLiXbe,PHUIyb,PrPYRd,RMhBfe,RqjULd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UMu52b,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,YgOFye,ZDZcre,ZSzced,ZwDk9d,_b,_tp,aXwZ4c,bTi8wc,byfTOb,cYShmd,cciGGe,eWuMIe,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=iAskyc,ziXSP HTTP/1.1\r\nHost: gs.gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gfuel.finance/\r\nOrigin: https://gfuel.finance\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:25 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"boq-infra/identity-boq-js-css-signers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Sun, 27 Jun 2027 07:48:58 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nvary: Accept-Encoding, Origin\r\nage: 99267\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: https://gfuel.finance\r\ncf-ray: a12c51baaaf18be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2423,"size_decoded":1740,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (505)","md5":"4b0323efe1e1d34bc6fabdaafb535076","sha1":"4ec78f2b0ce403db83cb72c842774e370031acfd","sha256":"5aeb99db77f7b7a1752bdcb386bdd30f45dc394714aa60ff312b89d077502ad6","sha512":"5139ac27ac1a92b072e2f5d23dba1a6a0a1b285785221dcdfa5e3f0379a73d3c515c40f3d54456c6f0c85683584e557b3cd47d467d27ca5b91c4c6e067f66064","ssdeep":"","tlshash":"9c41e19cf112f10472a3fca4617fa21d263b367ee7842a1c694945e27ff004b911bb6e","first_seen":"2026-06-23T13:29:09.276122Z","last_seen":"2026-06-30T19:13:48.647274Z","times_seen":362,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gs.gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/style.css","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gfuel.finance/","date":"2026-06-28T11:23:16.993Z","timestamp":1782645796993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gfuel.finance/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:17 GMT\r\ncontent-type: text/css\r\netag: W/\"6a3bc3d0-408f\"\r\nlast-modified: Wed, 24 Jun 2026 11:47:28 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zlXhfkbA3pawOIN0OfA%2Feq2iOKnT5AQ94iPN1n1pAO7Tmx0gzov3gqVtFJ9ns6ibXnvjQxOv7ZhncpDOMbhIEMNcQISS9A2OxaDHZOBksjKUmxT2I4kEtVT4yAEA5ZCZ\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a12c51873c6d56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16527,"size_decoded":5462,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"9f57809314322d7b92e5824c8d0977a8","sha1":"26522ada1a1ab6883571e4807aaa10dd54029572","sha256":"0e986aa35160ea54ceb30d2d21c188306285c68c82ea231200e376a7eb4275ca","sha512":"b36ff2c87717910de3d91a336e96172f7a602d807a8ab85a45ef1d8154cb4f6243cbfaa84b793ab981ef40492528b17136e2bf28e7462697036179e899e61bf9","ssdeep":"384:2sUAxj+YwIQvcGF4ax3M+a4Xpe2dBIJRjp6D:lxj+YwIQvXF4au+a4ZX0J1YD","tlshash":"f07274b0b260f138f877e881abc56a6e7024e413d93747d9e991a124c8c7af71b7178d","first_seen":"2026-06-28T11:24:03.515783Z","last_seen":"2026-06-28T11:24:03.515783Z","times_seen":1,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gfuel.finance/","date":"2026-06-28T11:23:17.259Z","timestamp":1782645797259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gfuel.finance\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 01:48:06 GMT\r\nexpires: Fri, 25 Jun 2027 01:48:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 293711\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-09T04:48:29.425066Z","times_seen":255182,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":5,"connect":38,"send":0,"wait":20,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/userid/Z2Z1ZWwuZmluYW5jZTowLmxzeGh5OWQ2MTZt","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://gfuel.finance/","date":"2026-06-28T11:23:17.414Z","timestamp":1782645797414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET /userid/Z2Z1ZWwuZmluYW5jZTowLmxzeGh5OWQ2MTZt HTTP/1.1\r\nHost: gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gfuel.finance/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:17 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nset-cookie: ver=Z2Z1ZWwuZmluYW5jZTowLmxzeGh5OWQ2MTZt; Path=/; Domain=.gfuel.finance; SameSite=None; Secure\r\nlocation: /?v=1\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dxf2U2TfGnu7Lf3oIgeArIJL9HSC0kNzAHNVe41oixA4ixmJbpftVWnw%2BswRgxYDZB17R6tKn3bf2aa8exNQWfGcO0Kkr6xSxPOUrN5Tvj3cv5TSSQ%2B9S3xFbj01MpLG\"}]}\r\ncf-ray: a12c5189dcdb56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T04:49:09.285495Z","times_seen":17793346,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myaccount.gfuel.finance/two-step-verification/backup-codes?","fqdn":"myaccount.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://gfuel.finance/","date":"2026-06-28T11:23:17.588Z","timestamp":1782645797588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET /two-step-verification/backup-codes? HTTP/1.1\r\nHost: myaccount.gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gfuel.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ver=Z2Z1ZWwuZmluYW5jZTowLmxzeGh5OWQ2MTZt\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:18 GMT\r\ncontent-type: application/binary\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\nlocation: https://gfuel.finance/save.do/SzRT?peervid=MTIwOTYwMA\u0026osid=1\u0026continue=https://myaccount.gfuel.finance/two-step-verification/backup-codes\u0026followup=https://myaccount.gfuel.finance/two-step-verification/backup-codes\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nstrict-transport-security: max-age=31536000\r\ncross-origin-resource-policy: same-site\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nset-cookie: NID=532=xJ9O6dkjHtBC5uPzZWRzIiPdJuc9bK6UtBvo2dX86teR1rOp_viMo1Pa1LBCm0_BQPMBVecZYVMjAGsYuFjWB9LetyT8KKI9ps7qKf_Hovsynvf3o2Exdagncr_DkcRMjpLGyvh80AvVDA9847jqGfkKc22q5yvbEmkOPvoi_UUhYedfFHV6xN3hYvb-CtRs4DGuZGSsqArYL4PUoUagUUMtmcQrRxDv_y9Embj0xj0T; expires=Mon, 28-Dec-2026 11:23:18 GMT; path=/; domain=.gfuel.finance; HttpOnly; SameSite=None; Secure\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: https://gfuel.finance\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JpkgA79yIEz6UdeOZq3AbGtB6oUbH1uPYBEwnrctt1o7PINB3HTcgr3%2FvcMBORjWveVcOevIlZFCkU9Fsr%2B%2BwTSTENXpzOv6CxC6aRiIWfCJ1JvI0pKFD3jJREK9ir15nvHy084Br%2F4juA%3D%3D\"}]}\r\ncf-ray: a12c518afd2656a5-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T04:49:09.285495Z","times_seen":17793346,"resource_available":true,"data":null}},"time_used":1393,"timings":{"blocked":0,"dns":7,"connect":1,"send":0,"wait":1385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"myaccount.gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gs.gfuel.finance/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=CMcBD,DqMihc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NLiXbe,PrPYRd,SCuOPb,SD8Jgb,SpsfSb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,ZSzced,_b,_tp,byfTOb,cYShmd,cciGGe,eWuMIe,gJzDyc,hc6Ubd,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,qmdT9,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xQtZb,xiZRqc,y5vRwf,z0u0L,zbML3c,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=UMu52b,rmumx,E87wgc,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,oqkvIf,aXwZ4c,yRXbo,bTi8wc,ywOR5c,PHUIyb","fqdn":"gs.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"172.67.130.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","date":"2026-06-28T11:23:24.364Z","timestamp":1782645804364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=CMcBD,DqMihc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NLiXbe,PrPYRd,SCuOPb,SD8Jgb,SpsfSb,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,ZSzced,_b,_tp,byfTOb,cYShmd,cciGGe,eWuMIe,gJzDyc,hc6Ubd,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,qmdT9,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xQtZb,xiZRqc,y5vRwf,z0u0L,zbML3c,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=UMu52b,rmumx,E87wgc,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,oqkvIf,aXwZ4c,yRXbo,bTi8wc,ywOR5c,PHUIyb HTTP/1.1\r\nHost: gs.gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gfuel.finance/\r\nOrigin: https://gfuel.finance\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:24 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"boq-infra/identity-boq-js-css-signers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Mon, 28 Jun 2027 09:37:59 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nvary: Accept-Encoding, Origin\r\nage: 6325\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: https://gfuel.finance\r\ncf-ray: a12c51b54a408be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5956,"size_decoded":3168,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (510)","md5":"fc301c726d0cdea827fdaf7a5034ba5c","sha1":"6fc6ec507a61e016da01c5b3811ecec5d837e3f8","sha256":"252d4e85c8a6874598c8832853b7404e4686bfe26b24ae6c5e57d17aa52ca66e","sha512":"92f23738ccc695e9fe158f210a93ca89f1db326d9d20e49a3e757aaa2da434ff3f54b6d4956f22c6561ca337e2b1b8ad627059be03d0daab3272f4b79407e2de","ssdeep":"96:ovJwRRMzC1/zP2BkdiHYiZ0wPDAVeowYcccFihv2Ey8S6yw:wsMz6/z+ZHYiZ0wQwzFC+E+6n","tlshash":"83c1119df362b1112363f1f4287f024ee33b606d946546adb388d6e19ef45088637b79","first_seen":"2026-06-23T13:29:09.290925Z","last_seen":"2026-06-30T19:13:48.642022Z","times_seen":331,"resource_available":true,"data":null}},"time_used":582,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":582,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gs.gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gs.gfuel.finance/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=CMcBD,DqMihc,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NLiXbe,PHUIyb,PrPYRd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UMu52b,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,YgOFye,ZSzced,_b,_tp,aXwZ4c,bTi8wc,byfTOb,cYShmd,cciGGe,eWuMIe,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,oqkvIf,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=p3hmRc,LvGhrf,RqjULd","fqdn":"gs.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"172.67.130.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","date":"2026-06-28T11:23:25.129Z","timestamp":1782645805129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=CMcBD,DqMihc,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NLiXbe,PHUIyb,PrPYRd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UMu52b,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,YgOFye,ZSzced,_b,_tp,aXwZ4c,bTi8wc,byfTOb,cYShmd,cciGGe,eWuMIe,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,oqkvIf,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=p3hmRc,LvGhrf,RqjULd HTTP/1.1\r\nHost: gs.gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gfuel.finance/\r\nOrigin: https://gfuel.finance\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:25 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"boq-infra/identity-boq-js-css-signers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Mon, 28 Jun 2027 09:37:59 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nvary: Accept-Encoding, Origin\r\nage: 6326\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: https://gfuel.finance\r\ncf-ray: a12c51ba1ad88be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24346,"size_decoded":10003,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2071)","md5":"e42363ebded14c970880a8a210a9ecf3","sha1":"a58ed73f24f4401d796f2d4a8cd88dc7651f889f","sha256":"a28590368e09d0da1ff564f90b67db3464c68ac427e62b41afcac0abeeabb3cf","sha512":"69a2a320b25b94389aa85ab24756d6156d7db750ea58b79d5bfbd6f3597f458b1d8177bdfb51c207213a3df7528cdfb41fbcf987d277ab2d86bce8f7ea39da6f","ssdeep":"384:kvYtEkSPyUMidenGmlyEEoJrY66ePfNa09GZe7o7wYJLxBNK8K95VCTe10M:kPkS/MirEEoJ9N9IaKi5wTe10M","tlshash":"7ab21bacf281317653b3f074c02f230be73ba96569158c6c65add6c46ebc489112bf6e","first_seen":"2026-06-23T13:29:09.273968Z","last_seen":"2026-06-30T19:13:48.644172Z","times_seen":364,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":236,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gs.gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/log?hasfast=true\u0026authuser=0\u0026format=json","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","date":"2026-06-28T11:23:26.182Z","timestamp":1782645806182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"POST /log?hasfast=true\u0026authuser=0\u0026format=json HTTP/1.1\r\nHost: gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 395\r\nReferer: https://gfuel.finance/\r\nOrigin: https://gfuel.finance\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: ver=Z2Z1ZWwuZmluYW5jZTowLmxzeGh5OWQ2MTZt; NID=532=A2xFD0XcXxJVPMWEg_maD7Q5b6o58v7BWWCiYHn7pDfsIR-mtjwrQJjl76dPxANcN7UVfYCamigkjzcAwD79FIg5tMmoIxLJ4LDYKzh9ypkrhm923GLPI5U_n84EH2A7DlUgsc0tinxaq67GrDZy93cjU4J3g1FNquJdQm2hDzLr3nNUGaDCbxJX0TXpceRn8WYgTeOLmTBnNHaF3NVffHLnf63Ejp3B--5CdVUvXnyO; __Host-GAPS=1:UA4EkPheDyACkj7etyQXECh3vKGRgw:Y5c-vJZnO8u2dqNm\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:26 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rWQRQQfP3KmNp2CUeDvkWiZxsB2mXcIUxDKqzq0KPrHNqe%2FbUYomsoLi3vKU2BBbMdcZlxp7odUR4db4atC2AsnCfByUlD7UpTxKDdt%2BqmeKVGBiLcflgDkw4KTjNu4w\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\ncf-ray: a12c51c0aee656a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1826,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T04:49:09.285495Z","times_seen":17793346,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T11:23:16.253Z","timestamp":1782645796253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 28 Jun 2026 11:23:16 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Jun 2026 11:47:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vZdww9GuamWcVTDkUQ4M%2BS%2B0DjwWiZRgpzUYIkq4pvET0je%2FVXLALHI2iaX%2BICdgoF7VgozTI11NwY1rtdXCuqwudMTEYQ1Y9uejm7tagg1X16ZIe0vl%2FwFTXggktdGV\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a12c51832ecf56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20055,"size_decoded":7131,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (356), with CRLF line terminators","md5":"8b4bc9bbe81cd019b494c12134990a77","sha1":"7837dc46e87cb491cd8ac497061345c64e4a3002","sha256":"6e81984d49065989657ae37841281f8ec76ce3a4f0893cf5a18534f674d35b9b","sha512":"f56b0975a9acd2121cf328523a28191e5d99aac90b185a6ce28559b3836fdaa4a2753ba2876e26c984d1e6968c29cab3c2959dbd19194302f74af45719da1382","ssdeep":"192:SyWcf4RGIIiPopTH6Zv1lBjWJ2iNko/+oalGJu7ixMBF88Lti+NI+7XMr+3Hfc5b:3IIFeiOo/fbxm9XMr+E+DIB7","tlshash":"2c922a35b4c8603b01b780e166642b9afa96c247de4b821476fd2bdb1ff7e91dd23064","first_seen":"2026-06-28T11:24:03.518768Z","last_seen":"2026-06-28T11:24:03.518768Z","times_seen":1,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":69,"connect":1,"send":0,"wait":112,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gfuel.finance/","date":"2026-06-28T11:23:16.989Z","timestamp":1782645796989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gfuel.finance/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 28 Jun 2026 11:23:17 GMT\r\ndate: Sun, 28 Jun 2026 11:23:17 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-09T03:57:44.90882Z","times_seen":39778,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":35,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/zalupka.js?v=20260602","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gfuel.finance/","date":"2026-06-28T11:23:16.992Z","timestamp":1782645796992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET /zalupka.js?v=20260602 HTTP/1.1\r\nHost: gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gfuel.finance/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:17 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a3bc3d0-bf1c\"\r\nlast-modified: Wed, 24 Jun 2026 11:47:28 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ealu8GfzhYSrCmjXYuniqa606tk%2B9nM4LSUUbE6sdwbdBCLK4eeGNMQxrbOtmrveuYfsqnhTZN8S9ioTY%2Bl7udvoW1r%2Fv1fAfrH4XKt98jboTg6ev2BVED4pZ9gyYPrs\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a12c51873c6c56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48924,"size_decoded":13969,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (8742)","md5":"4a2bae0ee95b4c61c5f4a6fc257512b2","sha1":"0ce65f0eebbdaa5525ea7a9a5343ba5defcc1899","sha256":"b568a81122a85b8fe44ab9141e800c6982fe2e0424c0c4826d84c4d1c6518c77","sha512":"0fe35ebb8b6d26fa310134ba78928ca8be9de2aa80fbbe8d7535bfe9709d34685a1eba2e28c99566adf26255e70007babf9d2732d00541c391327a697c739bd0","ssdeep":"768:f4qC1ioyX7wAMlgHzSYCYHc485IaRg3WTOEd6R0rguYcFqxqO3PImClA84MKscIE:DX7wAMljYCY+Ceg3WTOEUmrgucxV3PmM","tlshash":"3923c667cd0f2e124360498326ee5bd11d2c578eb8d244cdb94fd394cb6ea3649e92ec","first_seen":"2026-06-28T11:24:03.520546Z","last_seen":"2026-06-28T11:24:03.520546Z","times_seen":1,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gfuel.finance/","date":"2026-06-28T11:23:17.263Z","timestamp":1782645797263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gfuel.finance\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 01:48:06 GMT\r\nexpires: Fri, 25 Jun 2027 01:48:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 293711\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-09T04:48:29.425066Z","times_seen":255182,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":23,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gs.gfuel.finance/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlGEBklL208WT59JvLy1mmuy8W09pQ/dti=1/m=_b,_tp","fqdn":"gs.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"172.67.130.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","date":"2026-06-28T11:23:21.666Z","timestamp":1782645801666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlGEBklL208WT59JvLy1mmuy8W09pQ/dti=1/m=_b,_tp HTTP/1.1\r\nHost: gs.gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gfuel.finance/\r\nOrigin: https://gfuel.finance\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:23 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"boq-infra/identity-boq-js-css-signers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Mon, 28 Jun 2027 05:36:39 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nvary: Accept-Encoding, Origin\r\nage: 20804\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: https://gfuel.finance\r\ncf-ray: a12c51a48fee8be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1037652,"size_decoded":215199,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (616)","md5":"c81b50f2a720783bf932d27a9c99dd49","sha1":"5c053682e324a9376c3c7d8131807f31a1cf5013","sha256":"1c2fef86470bcc316295deb594432279ce7f9467171d8e41cd45472acfeb5a47","sha512":"2d36e98a71628b7f37ddfd027e79b51a7f045d1afdd71ac3afec22bcab5524b54b7cce7befc0446687e6e1643ba9e59dcaad8adf8229efcc450d806700e7d90c","ssdeep":"6144:k72/VWsf20lJWnOZCgnRwkHGlIu7/9v2lXkPaDMd8ZjIIVDJY8duIvpn:k72/Vokzuo9pn","tlshash":"3a253df976e0b453532367b0c02b111eb26f2869a21d4458f0e6dbd2beb0d6d45b7f28","first_seen":"2026-06-28T11:24:03.521338Z","last_seen":"2026-06-28T11:24:03.521338Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2461,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":2173,"receive":275,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gs.gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gs.gfuel.finance/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=byfTOb,lsjVmc,LEikZe","fqdn":"gs.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"172.67.130.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","date":"2026-06-28T11:23:24.342Z","timestamp":1782645804342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=byfTOb,lsjVmc,LEikZe HTTP/1.1\r\nHost: gs.gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gfuel.finance/\r\nOrigin: https://gfuel.finance\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:24 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding, Origin\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"boq-infra/identity-boq-js-css-signers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers\"}]}\r\nexpires: Mon, 28 Jun 2027 11:23:24 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: https://gfuel.finance\r\ncf-ray: a12c51b52a3b8be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35600,"size_decoded":14864,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1640)","md5":"ec72bf416e379817759865fe65daa3e8","sha1":"29f91b71783cc1a536e5203ae1d8a1a88c8b83bf","sha256":"90d33f528861178379264351279289dce654d57218628e7d0413f2c8f622ee9e","sha512":"14177f3f16f7aba91871e649e4fafd166040d7927d7b355b7decd50eef41a30ae8d2804cc6b2acd6273f3fdb9367923c67d262b230b5fad8f259815f6a47146e","ssdeep":"768:GAx8oJmYUL7RrUGKxRLiEoL73wsRwjL4kJLCLrf+l7yp1p9pMC92WtP+h91vMBOi:PgcxRQbLrGlU39pPyq","tlshash":"19f282d8b36170169263f0e4402f52ced37ba4a6b8649e7c719de8d29df440941bbbbc","first_seen":"2026-06-28T11:24:03.522307Z","last_seen":"2026-06-28T11:24:03.522307Z","times_seen":1,"resource_available":true,"data":null}},"time_used":656,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gs.gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","date":"2026-06-28T11:23:35.237Z","timestamp":1782645815237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"POST /log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/binary\r\nContent-Length: 261\r\nReferer: https://gfuel.finance/\r\nX-Goog-AuthUser: 0\r\nContent-Encoding: gzip\r\nOrigin: https://gfuel.finance\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: ver=Z2Z1ZWwuZmluYW5jZTowLmxzeGh5OWQ2MTZt; NID=532=A2xFD0XcXxJVPMWEg_maD7Q5b6o58v7BWWCiYHn7pDfsIR-mtjwrQJjl76dPxANcN7UVfYCamigkjzcAwD79FIg5tMmoIxLJ4LDYKzh9ypkrhm923GLPI5U_n84EH2A7DlUgsc0tinxaq67GrDZy93cjU4J3g1FNquJdQm2hDzLr3nNUGaDCbxJX0TXpceRn8WYgTeOLmTBnNHaF3NVffHLnf63Ejp3B--5CdVUvXnyO; __Host-GAPS=1:UA4EkPheDyACkj7etyQXECh3vKGRgw:Y5c-vJZnO8u2dqNm; OTZ=8672363_56_56__56_\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:35 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nIdmHMcawOcaWW1exJqjESomqUE51NsdN9%2FukoC8S0CjMcf2g7hDTlZQyEF8%2BdXDUgKhVerOsP6LXtRFCe9hsPvmvi%2F0VEuaKuffhjrPDF1TLyLBge1dAsLmGQPJuEdd\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: a12c51f9491e56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1796,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T04:49:09.285495Z","times_seen":17793346,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/?v=1","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://gfuel.finance/","date":"2026-06-28T11:23:17.525Z","timestamp":1782645797525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET /?v=1 HTTP/1.1\r\nHost: gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gfuel.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ver=Z2Z1ZWwuZmluYW5jZTowLmxzeGh5OWQ2MTZt\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:17 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlocation: https://myaccount.gfuel.finance/two-step-verification/backup-codes?\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B6MriPTkYbMdKL1gLWmKHir1dw0DO69yqaJP5VzNEfxRS%2FL6p9q5n23PrAiG2vpwXB6Pk1mCImUJ%2F35MdJhWDa52gmAKtWDpLL2A%2FbwNyJwjsr7nIZ1%2FTzdAKgoq9pjI\"}]}\r\ncf-ray: a12c518a8cf356a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T04:49:09.285495Z","times_seen":17793346,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/notify.php","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gfuel.finance/","date":"2026-06-28T11:23:17.217Z","timestamp":1782645797217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET /notify.php HTTP/1.1\r\nHost: gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gfuel.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:17 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pYR3qT%2FB0dyJ4iklBlUXxLpvkOpYvsDvOvS2KycQY9PyVHORoM3c%2Fu4lVTqrFnlzdx4MNAZKG1pHUiuBHMBPRkhuimdgZ2VJdPeAz1kjoB2Z5VifSIKA%2F3iz2gwCEdZb\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a12c5188ac9556a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":727,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-09T04:35:19.88719Z","times_seen":180882,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gfuel.finance/","date":"2026-06-28T11:23:17.262Z","timestamp":1782645797262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gfuel.finance\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 01:48:06 GMT\r\nexpires: Fri, 25 Jun 2027 01:48:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 293711\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-09T04:48:29.425066Z","times_seen":255182,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":30,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gfuel.finance/","date":"2026-06-28T11:23:17.266Z","timestamp":1782645797266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gfuel.finance\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 01:48:06 GMT\r\nexpires: Fri, 25 Jun 2027 01:48:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 293711\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-09T04:48:29.425066Z","times_seen":255182,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":39,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gfuel.finance/","date":"2026-06-28T11:23:17.269Z","timestamp":1782645797269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gfuel.finance/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-155ed\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 28 Jun 2026 11:23:17 GMT\r\nage: 1727917\r\nx-served-by: cache-lga21978-LGA, cache-bma-essb1270024-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 583362, 115629\r\nx-timer: S1782645797.316776,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87533,"size_decoded":30979,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-09T04:42:34.923767Z","times_seen":184625,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":6,"connect":10,"send":0,"wait":13,"receive":2,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gs.gfuel.finance/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=A7fCU,CMcBD,DqMihc,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,LvGhrf,MY7mZe,MpJwZc,NLiXbe,PHUIyb,PrPYRd,RMhBfe,RqjULd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UMu52b,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,YgOFye,ZDZcre,ZSzced,ZwDk9d,_b,_tp,aXwZ4c,bTi8wc,byfTOb,cYShmd,cciGGe,eWuMIe,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=P6sQOc","fqdn":"gs.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"172.67.130.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","date":"2026-06-28T11:23:25.241Z","timestamp":1782645805241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=A7fCU,CMcBD,DqMihc,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,LvGhrf,MY7mZe,MpJwZc,NLiXbe,PHUIyb,PrPYRd,RMhBfe,RqjULd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UMu52b,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,YgOFye,ZDZcre,ZSzced,ZwDk9d,_b,_tp,aXwZ4c,bTi8wc,byfTOb,cYShmd,cciGGe,eWuMIe,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=P6sQOc HTTP/1.1\r\nHost: gs.gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gfuel.finance/\r\nOrigin: https://gfuel.finance\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:25 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"boq-infra/identity-boq-js-css-signers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Mon, 28 Jun 2027 09:37:59 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nvary: Accept-Encoding, Origin\r\nage: 6326\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: https://gfuel.finance\r\ncf-ray: a12c51bacb018be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2076,"size_decoded":1853,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (642)","md5":"67eebeeb03f07d692f43adafaa9f0174","sha1":"d9a28705cf13cf131dce59b1805ade83784c63af","sha256":"b7f123e2ee9825573a9ecf0aae9b5101ed55259fb6bf426cbc0fb7a13d0df4b0","sha512":"7516c7efc896f36e837e47ccd643a2de527c5281e8f89e31fcf8c795eecceb6b696278af5fe11918f17ada50365b7f03b3fbe3ca35e2a10217660ed769ef4649","ssdeep":"","tlshash":"d341428d7063b0021762b0f0501f21dfa2abbd7624d87d1db650f8c49db4845d59b7bc","first_seen":"2026-06-23T13:29:09.300442Z","last_seen":"2026-06-30T19:13:48.641141Z","times_seen":362,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gs.gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/save.do/SzRT?peervid=MTIwOTYwMA\u0026osid=1\u0026continue=https://myaccount.gfuel.finance/two-step-verification/backup-codes\u0026followup=https://myaccount.gfuel.finance/two-step-verification/backup-codes\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://gfuel.finance/","date":"2026-06-28T11:23:18.986Z","timestamp":1782645798986,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET /save.do/SzRT?peervid=MTIwOTYwMA\u0026osid=1\u0026continue=https://myaccount.gfuel.finance/two-step-verification/backup-codes\u0026followup=https://myaccount.gfuel.finance/two-step-verification/backup-codes\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI HTTP/1.1\r\nHost: gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gfuel.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ver=Z2Z1ZWwuZmluYW5jZTowLmxzeGh5OWQ2MTZt; NID=532=xJ9O6dkjHtBC5uPzZWRzIiPdJuc9bK6UtBvo2dX86teR1rOp_viMo1Pa1LBCm0_BQPMBVecZYVMjAGsYuFjWB9LetyT8KKI9ps7qKf_Hovsynvf3o2Exdagncr_DkcRMjpLGyvh80AvVDA9847jqGfkKc22q5yvbEmkOPvoi_UUhYedfFHV6xN3hYvb-CtRs4DGuZGSsqArYL4PUoUagUUMtmcQrRxDv_y9Embj0xj0T\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:20 GMT\r\ncontent-type: application/binary\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nset-cookie: __Host-GAPS=1:UA4EkPheDyACkj7etyQXECh3vKGRgw:Y5c-vJZnO8u2dqNm; Expires=Tue, 27-Jun-2028 11:23:20 GMT; Path=/; HttpOnly; Priority=HIGH; SameSite=None; Secure\nNID=532=A2xFD0XcXxJVPMWEg_maD7Q5b6o58v7BWWCiYHn7pDfsIR-mtjwrQJjl76dPxANcN7UVfYCamigkjzcAwD79FIg5tMmoIxLJ4LDYKzh9ypkrhm923GLPI5U_n84EH2A7DlUgsc0tinxaq67GrDZy93cjU4J3g1FNquJdQm2hDzLr3nNUGaDCbxJX0TXpceRn8WYgTeOLmTBnNHaF3NVffHLnf63Ejp3B--5CdVUvXnyO; expires=Mon, 28-Dec-2026 11:23:18 GMT; path=/; domain=.gfuel.finance; HttpOnly; SameSite=None; Secure\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\nlocation: /auth.do/SzRT?continue=https://myaccount.gfuel.finance/two-step-verification/backup-codes\u0026followup=https://myaccount.gfuel.finance/two-step-verification/backup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026SzRTd=Uy0zNTAwNjA1MTk6MTc4MjY0NTgwMDE0MTQyMA\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-resource-policy: cross-origin\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u0X0UHseUV0FKJrySo9ADFt2AnSvv6V8V70XaXmY2ZzvaB1XCN858ShEe5LIhIk7v4c%2F9wuKcb5drNo5fLn%2Bbd9PPDxevMmJU5tdj17xBQtLzPHAQwQhog2loFdxoMSp\"}]}\r\ncf-ray: a12c5193ad9156a5-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T04:49:09.285495Z","times_seen":17793346,"resource_available":true,"data":null}},"time_used":1301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ayt.gfuel.finance/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com\u0026v=-1536560524\u0026timestamp=1782645805428","fqdn":"ayt.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","date":"2026-06-28T11:23:25.434Z","timestamp":1782645805434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com\u0026v=-1536560524\u0026timestamp=1782645805428 HTTP/1.1\r\nHost: ayt.gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gfuel.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ver=Z2Z1ZWwuZmluYW5jZTowLmxzeGh5OWQ2MTZt; NID=532=A2xFD0XcXxJVPMWEg_maD7Q5b6o58v7BWWCiYHn7pDfsIR-mtjwrQJjl76dPxANcN7UVfYCamigkjzcAwD79FIg5tMmoIxLJ4LDYKzh9ypkrhm923GLPI5U_n84EH2A7DlUgsc0tinxaq67GrDZy93cjU4J3g1FNquJdQm2hDzLr3nNUGaDCbxJX0TXpceRn8WYgTeOLmTBnNHaF3NVffHLnf63Ejp3B--5CdVUvXnyO\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nreporting-endpoints: default=\"/_/AccountsDomainCookiesCheckConnectionHttp/web-reports?context=eJzjytDikmII1pBiaL15jnUyEJcsOs_aBMRdQDwDiA0VLrHaA3GRxBXWBiD-VHWDVaD6BuvJK3dYzwKxpp4vmy4Qfyv2ZWMp8WUzn-jPZg3EpiGBbM5APCE8jG0KEAvxcKzraLnEJtCw5Fozk5JeUn5hfGZKal5JZkllSn5uYmZecn5-dmZqcXFqUVlqUbyRgZGZgZmhhZ6BWXyBAQB9MTw3\"\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DzMo2UY3eFGQY5zCWis77RYUbbB6WBHt2dVpK8UALVHj1PBblobg41ps78XTJCTD2ePOVv5zfoLAShC5EiSC%2BeRo0NRDJkiO8suK1zeHCuvJ7mXXc0E1bpz%2FOEe2WZAs%2BQYJZQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a12c51bc0ea356a5-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1247,"size_decoded":2385,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"93e1f03654936c043110e5aa8f5284e5","sha1":"ec65a7ede0c20ace2f708ab935101b32c564d4e9","sha256":"48c222a69c04321acf391fcd9b36b54557f8a4490e4e649db5e9fb03b1b563d9","sha512":"244b01a9ccc61d32ba991d6dfa79023b9a7a68351906a02454dd9c9a950e2adebec156c4c728534816f9f8213a0729b58522a83d48b011b7759eb1955bb32925","ssdeep":"","tlshash":"782110eab4b4646723a26990783f211a7076357483683d28f5d5b0b29c787c638d33aa","first_seen":"2026-06-28T11:24:03.525124Z","last_seen":"2026-06-28T11:24:03.525124Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1234,"timings":{"blocked":0,"dns":5,"connect":1,"send":0,"wait":1229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"ayt.gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/log?hasfast=true\u0026authuser=0\u0026format=json","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","date":"2026-06-28T11:23:26.178Z","timestamp":1782645806178,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"POST /log?hasfast=true\u0026authuser=0\u0026format=json HTTP/1.1\r\nHost: gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 395\r\nReferer: https://gfuel.finance/\r\nOrigin: https://gfuel.finance\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: ver=Z2Z1ZWwuZmluYW5jZTowLmxzeGh5OWQ2MTZt; NID=532=A2xFD0XcXxJVPMWEg_maD7Q5b6o58v7BWWCiYHn7pDfsIR-mtjwrQJjl76dPxANcN7UVfYCamigkjzcAwD79FIg5tMmoIxLJ4LDYKzh9ypkrhm923GLPI5U_n84EH2A7DlUgsc0tinxaq67GrDZy93cjU4J3g1FNquJdQm2hDzLr3nNUGaDCbxJX0TXpceRn8WYgTeOLmTBnNHaF3NVffHLnf63Ejp3B--5CdVUvXnyO; __Host-GAPS=1:UA4EkPheDyACkj7etyQXECh3vKGRgw:Y5c-vJZnO8u2dqNm\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:26 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cln9V69qmeIZz50vuugeM%2BglQae%2FetXVpxA%2BXAZ36SDBRGw%2FWlQOpPUDRNUp5oUDhyTTFAUbN3alDA7KolmQw%2BA9lgZXfd4MAWhw55g5J%2B4iXICHjBlaFH2eKR7Q37Ft\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\ncf-ray: a12c51c0aee556a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1834,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T04:49:09.285495Z","times_seen":17793346,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=accounts.google.com\u0026sz=16","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gfuel.finance/","date":"2026-06-28T11:23:17.420Z","timestamp":1782645797420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:36:04 GMT","end":"Mon, 31 Aug 2026 08:36:03 GMT"},"fingerprint":{"sha1":"5F:07:F9:B7:51:F8:4F:BF:84:9B:CE:9B:35:32:67:B4:8F:4D:E1:E1","sha256":"37:12:27:BA:F4:E4:8E:D1:CC:6E:41:B4:2F:D6:31:EE:8C:E9:A2:B0:B4:B7:4F:2A:AA:B0:9A:0F:EE:6A:04:54"}}},"request":{"raw":"GET /s2/favicons?domain=accounts.google.com\u0026sz=16 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gfuel.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nlocation: https://t3.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://accounts.google.com\u0026size=16\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 339\r\nx-xss-protection: 0\r\ndate: Sun, 28 Jun 2026 10:55:24 GMT\r\nexpires: Sun, 28 Jun 2026 11:25:24 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 1673\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T04:49:09.285495Z","times_seen":17793346,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":4,"connect":29,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/auth.do/SzRT?continue=https://myaccount.gfuel.finance/two-step-verification/backup-codes\u0026followup=https://myaccount.gfuel.finance/two-step-verification/backup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026SzRTd=Uy0zNTAwNjA1MTk6MTc4MjY0NTgwMDE0MTQyMA","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://gfuel.finance/","date":"2026-06-28T11:23:20.292Z","timestamp":1782645800292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET /auth.do/SzRT?continue=https://myaccount.gfuel.finance/two-step-verification/backup-codes\u0026followup=https://myaccount.gfuel.finance/two-step-verification/backup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026SzRTd=Uy0zNTAwNjA1MTk6MTc4MjY0NTgwMDE0MTQyMA HTTP/1.1\r\nHost: gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gfuel.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ver=Z2Z1ZWwuZmluYW5jZTowLmxzeGh5OWQ2MTZt; NID=532=A2xFD0XcXxJVPMWEg_maD7Q5b6o58v7BWWCiYHn7pDfsIR-mtjwrQJjl76dPxANcN7UVfYCamigkjzcAwD79FIg5tMmoIxLJ4LDYKzh9ypkrhm923GLPI5U_n84EH2A7DlUgsc0tinxaq67GrDZy93cjU4J3g1FNquJdQm2hDzLr3nNUGaDCbxJX0TXpceRn8WYgTeOLmTBnNHaF3NVffHLnf63Ejp3B--5CdVUvXnyO; __Host-GAPS=1:UA4EkPheDyACkj7etyQXECh3vKGRgw:Y5c-vJZnO8u2dqNm\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\nlocation: /sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-credentials: true\r\ncf-ray: a12c519bddcf56a5-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T04:49:09.285495Z","times_seen":17793346,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/_/bscframe","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","date":"2026-06-28T11:23:25.555Z","timestamp":1782645805555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET /_/bscframe HTTP/1.1\r\nHost: gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gfuel.finance/\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: ver=Z2Z1ZWwuZmluYW5jZTowLmxzeGh5OWQ2MTZt; NID=532=A2xFD0XcXxJVPMWEg_maD7Q5b6o58v7BWWCiYHn7pDfsIR-mtjwrQJjl76dPxANcN7UVfYCamigkjzcAwD79FIg5tMmoIxLJ4LDYKzh9ypkrhm923GLPI5U_n84EH2A7DlUgsc0tinxaq67GrDZy93cjU4J3g1FNquJdQm2hDzLr3nNUGaDCbxJX0TXpceRn8WYgTeOLmTBnNHaF3NVffHLnf63Ejp3B--5CdVUvXnyO; __Host-GAPS=1:UA4EkPheDyACkj7etyQXECh3vKGRgw:Y5c-vJZnO8u2dqNm\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:25 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-resource-policy: same-site\r\nreport-to: {\"group\":\"AccountsSignInSignUpUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInSignUpUi\"}]}\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-credentials: true\r\ncontent-encoding: zstd\r\ncf-ray: a12c51bcbeaf56a5-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15,"size_decoded":1205,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"fe364450e1391215f596d043488f989f","sha1":"d1848aa7b5cfd853609db178070771ad67d351e9","sha256":"c77e5168dffda66b8dc13f1425b4d3630a6656a3e5acf707f4393277ba3c8b5e","sha512":"2b11cd287b8fae7a046f160bee092e22c6db19d38b17888aed6f98f5c3e936a46766fb1e947ecc0cc5964548474b7866eb60a71587a04f1af8f816df8afa221e","ssdeep":"","tlshash":"54600088282020000000228008802020000203e02002020020c020202aa02280800200","first_seen":"2023-03-07T01:02:47Z","last_seen":"2026-08-09T02:36:33.078594Z","times_seen":87211,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://gfuel.finance/","date":"2026-06-28T11:23:20.565Z","timestamp":1782645800565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET /sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB HTTP/1.1\r\nHost: gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gfuel.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ver=Z2Z1ZWwuZmluYW5jZTowLmxzeGh5OWQ2MTZt; NID=532=A2xFD0XcXxJVPMWEg_maD7Q5b6o58v7BWWCiYHn7pDfsIR-mtjwrQJjl76dPxANcN7UVfYCamigkjzcAwD79FIg5tMmoIxLJ4LDYKzh9ypkrhm923GLPI5U_n84EH2A7DlUgsc0tinxaq67GrDZy93cjU4J3g1FNquJdQm2hDzLr3nNUGaDCbxJX0TXpceRn8WYgTeOLmTBnNHaF3NVffHLnf63Ejp3B--5CdVUvXnyO; __Host-GAPS=1:UA4EkPheDyACkj7etyQXECh3vKGRgw:Y5c-vJZnO8u2dqNm\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding\r\nx-ua-compatible: IE=edge\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncross-origin-resource-policy: same-site\r\nreporting-endpoints: default=\"/v3/signin/_/AccountsSignInUi/web-reports?context=eJwNyF1IU2EABuAx9r2EeLHMyhZEDIIWzOagLbAIkZDV2R_fzlZRTIcTB7WjZ2eSGmVWEgYxKy28KaLIjAoiKroJoSgv7GcuWku66k9WWFGjC6Pei-fmqcpZNlTZTHK9zTRlf2hu2vfBvJ3GqufN43Ti7XNxlozLL8QgDdMF2jr5UjRRZ-srsZ8a1ubFNtLG8yJDSmxWhGiktiBGSa8riAFybC4IJyUuvRYd9NhRFM_oZ19RWPuLorlSFC20ovRO2Gi6MCdmaHHAB9NRH7607MRXuutU8ICuzSo480nBGDnq_XBSJeOHxfCjPBTAAt0YDeA2eUeCaKRb94K4Q5ZvQdjCIayhdeQgN3no-rEQblKJ3lP6fgg6PXkTwjRtioTRTFdOhzFB2qMwMjRYDmOIvi-X-EXWOola8tolGumHR-I37dgiEaBJVeJjm8Q8_aFFWpaQWEm7rkrspc9_JcrU80-iKx6BQf10hLRDESjnI-hbquIwFWtUzFE2pcJ3UMXFXhXlUyoWqPspn4ZnVFRWRZGLRXGOUrujOEDR1THsoZrqJRMnj-dhzZXKebN9Y0Lrjqfak2kjZfR26FraSKbb27JGZzaVSeo9ST3udrk9Lk-Dt97ljne5_gO1FNX5\"\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-credentials: true\r\ncontent-encoding: zstd\r\ncf-ray: a12c519d8dd856a5-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Contentsquare","description":"Contentsquare is an enterprise-level UX optimisation platform.","website":"https://contentsquare.com","common_platform_enumeration":"","icon":"Contentsquare.svg","categories":["Analytics","A/B Testing"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1252029,"size_decoded":182005,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (49767)","md5":"87430438bf71473a294ff95a31e31961","sha1":"070cc0a5aac8c781d9a55fb30f1a4712495b08ab","sha256":"e42f0b5719d6561d6d7be11458ae38e7a076028e0e9bd57b8556252c2a925d5c","sha512":"73080d57d379f747e9eb97d74de0a41bc8d2f7519230383dd386e4e3e6707fb466fe575d4dd4ec7ea4c1a876bf5cf33e699eee05d66f83e1dca9368da8677979","ssdeep":"6144:aC4q3j6T8+bq3j6T8+Iq3j6T8+tq3j6T8+Gq3j6T8+rIwJQISNR1/ezf1qo6T8+y:aC8IwnzftjT4Px6","tlshash":"a92564df9231a03ffd73a4b6a5c0ad4af2845dd1e64a4a76bc70a91702eb5fa1351330","first_seen":"2026-06-28T11:24:03.527047Z","last_seen":"2026-06-28T11:24:03.527047Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1088,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":946,"receive":142,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gs.gfuel.finance/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=CMcBD,DqMihc,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,LvGhrf,MY7mZe,MpJwZc,NLiXbe,PHUIyb,PrPYRd,RqjULd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UMu52b,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,YgOFye,ZSzced,_b,_tp,aXwZ4c,bTi8wc,byfTOb,cYShmd,cciGGe,eWuMIe,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=ZwDk9d,RMhBfe","fqdn":"gs.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"172.67.130.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","date":"2026-06-28T11:23:25.164Z","timestamp":1782645805164,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=CMcBD,DqMihc,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,LvGhrf,MY7mZe,MpJwZc,NLiXbe,PHUIyb,PrPYRd,RqjULd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UMu52b,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,YgOFye,ZSzced,_b,_tp,aXwZ4c,bTi8wc,byfTOb,cYShmd,cciGGe,eWuMIe,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=ZwDk9d,RMhBfe HTTP/1.1\r\nHost: gs.gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gfuel.finance/\r\nOrigin: https://gfuel.finance\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:25 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"boq-infra/identity-boq-js-css-signers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Mon, 28 Jun 2027 09:37:59 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nvary: Accept-Encoding, Origin\r\nage: 6326\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: https://gfuel.finance\r\ncf-ray: a12c51ba4add8be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3167,"size_decoded":2283,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (707)","md5":"992c5e07183b9ebc7465726f004b3998","sha1":"4d9a6036d1f00f19797ed6f7871302b63d2d4ea3","sha256":"20b940adc9ffffffad80adcfa65d61e676bd1f6a1aac1a277e2e6473fb766c6d","sha512":"9b2e1d6b5169ad5025bea9ccd840512d4caebc56ed764e7ac3d6a8f853352679a5843a749b3ffbe9b8b5cdd2804eeca8109f762f7161b6ed522ec1b27c395646","ssdeep":"","tlshash":"455163de72e3b06257727460922b114bf26bfd5129992c2cb440c5813cf891ed07bb79","first_seen":"2026-06-23T13:29:09.275231Z","last_seen":"2026-06-30T19:13:48.642802Z","times_seen":363,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gs.gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gs.gfuel.finance/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=A7fCU,CMcBD,DqMihc,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,LvGhrf,MY7mZe,MpJwZc,NLiXbe,P6sQOc,PHUIyb,PrPYRd,RMhBfe,RqjULd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UMu52b,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,YgOFye,ZDZcre,ZSzced,ZwDk9d,_b,_tp,aXwZ4c,bTi8wc,byfTOb,cYShmd,cciGGe,eWuMIe,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=wg1P6b","fqdn":"gs.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"172.67.130.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","date":"2026-06-28T11:23:26.022Z","timestamp":1782645806022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=A7fCU,CMcBD,DqMihc,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,LvGhrf,MY7mZe,MpJwZc,NLiXbe,P6sQOc,PHUIyb,PrPYRd,RMhBfe,RqjULd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UMu52b,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,YgOFye,ZDZcre,ZSzced,ZwDk9d,_b,_tp,aXwZ4c,bTi8wc,byfTOb,cYShmd,cciGGe,eWuMIe,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=wg1P6b HTTP/1.1\r\nHost: gs.gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gfuel.finance/\r\nOrigin: https://gfuel.finance\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:26 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"boq-infra/identity-boq-js-css-signers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Fri, 25 Jun 2027 19:45:20 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nvary: Accept-Encoding, Origin\r\nage: 229086\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: https://gfuel.finance\r\ncf-ray: a12c51bfab928be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5245,"size_decoded":2970,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (517)","md5":"b1f1f3fb0d2a103cedbf075109cc40fe","sha1":"7048c2096c93dcf88fe653daa514031d74e7bab7","sha256":"4934f00cd80ecdcf48b007d429a944a55337b45e9897acf6cc54c957bb25f824","sha512":"004131e4c8b2d7f343c80753dfa96f1d8d0f6a9718486b13e0063ab7655edc4b97de4364b2748d8c20905534050277646e4b612d877fdeb0fd5beca69efa8538","ssdeep":"96:oeZbPCw88kVZTd3PK++BOhaWokAbqlNfKzLmEeVxh1McP6K4fCOw:TB6Td3y9CJWWyler6PCb","tlshash":"21b1518d76b27122b7a2f0f4527b421eb33a28ac9419562df5c884d77eb550409f3fb8","first_seen":"2026-06-23T13:29:09.304562Z","last_seen":"2026-06-30T19:13:48.645403Z","times_seen":327,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gs.gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gs.gfuel.finance/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=A7fCU,CMcBD,DqMihc,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,LvGhrf,MY7mZe,MpJwZc,NLiXbe,P6sQOc,PHUIyb,PrPYRd,RMhBfe,RqjULd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UMu52b,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,YgOFye,ZDZcre,ZSzced,ZwDk9d,_b,_tp,aXwZ4c,bTi8wc,byfTOb,cYShmd,cciGGe,eWuMIe,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,wg1P6b,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=Wt6vjf,hhhU8,FCpbqb,WhJNk","fqdn":"gs.gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"172.67.130.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","date":"2026-06-28T11:23:26.716Z","timestamp":1782645806716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.1dwkazA86mY.es5.O/ck=boq-identity.AccountsSignInUi.3sHalIa-Zj4.L.F4.O/am=EQ0AAAAwULyQAcD-_28AAAIIsh3wPQugCRAyAAAAAAAAAABgAQAAGgE/d=1/exm=A7fCU,CMcBD,DqMihc,E87wgc,EFQ78c,EN3i8d,Fndnac,GwYlN,IZT63,K0PMbc,K1ZKnb,KUM7Z,L9OGUe,LDQI,LEikZe,LvGhrf,MY7mZe,MpJwZc,NLiXbe,P6sQOc,PHUIyb,PrPYRd,RMhBfe,RqjULd,SCuOPb,SD8Jgb,SpsfSb,Tbb4sb,UMu52b,UUJqVe,Uas9Hd,WpP9Yc,YHI3We,YTxL4,YYmHzb,YgOFye,ZDZcre,ZSzced,ZwDk9d,_b,_tp,aXwZ4c,bTi8wc,byfTOb,cYShmd,cciGGe,eWuMIe,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,lkFgGf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,oLggrd,oqkvIf,p3hmRc,pxq3x,qPYxq,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,wg1P6b,ws9Tlc,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFEP-L1Pu1ZLhwyUSR4hCn0cntF4Q/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;Qi0VDf:vUyhef;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;UyjXyd:qXkWrc;VlRiDf:j7ZRif;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lGvXed:Gtn19d;lOO0Vd:OTA3Ae;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qQEoOc:KUM7Z;qafBPd:yDVVkb;qddgKe:xQtZb;sHdTOe:nSePib;twueg:ouk7y;vNjB7d:YTxL4;wR5FRb:siKnQd;wc73nd:kqeOEd;yxTchf:KUM7Z/dti=1/m=Wt6vjf,hhhU8,FCpbqb,WhJNk HTTP/1.1\r\nHost: gs.gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gfuel.finance/\r\nOrigin: https://gfuel.finance\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:26 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"boq-infra/identity-boq-js-css-signers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers\"}]}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nexpires: Mon, 28 Jun 2027 09:38:00 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nvary: Accept-Encoding, Origin\r\nage: 6326\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: https://gfuel.finance\r\ncf-ray: a12c51c3fc408be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3519,"size_decoded":2481,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (580)","md5":"e4d117cd5fddcdb0a47fb2907b80a5e5","sha1":"d5cc2387afc1d64845afaa80a7bba3fb56b91144","sha256":"f035ab1b51033033cebc3f32c6b8f807a25266290a3e0e1826a3be13576d91c5","sha512":"3753fc14ea7a4b3d5f7bf716c461b6765f28c6d69a8cb6f936d4026e138d35279ba24f3e3d585aff9dc774cc609c0eae5aea449653e7f8bb42a54e032efb850f","ssdeep":"","tlshash":"4c7182f4b5b63095d6b2b1ac813b0709c0b356a6a4e0675c79ded8c0adf940b423fbb4","first_seen":"2026-06-23T13:29:09.280562Z","last_seen":"2026-06-30T19:13:48.648561Z","times_seen":354,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gs.gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gfuel.finance/side.js?a=13","fqdn":"gfuel.finance","domain":"gfuel.finance","tld":"finance"},"ip":{"addr":"104.21.8.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB","date":"2026-06-28T11:23:21.526Z","timestamp":1782645801526,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gfuel.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 08:03:37 GMT","end":"Mon, 21 Sep 2026 09:02:07 GMT"},"fingerprint":{"sha1":"0C:57:73:62:05:B5:28:03:C4:A6:61:31:1D:5D:62:70:87:66:E5:4E","sha256":"40:A5:86:49:27:63:A5:1E:FA:C8:74:5A:24:F7:57:88:BD:0C:3E:8E:59:72:71:28:AF:8B:C8:6B:E2:EE:3A:A8"}}},"request":{"raw":"GET /side.js?a=13 HTTP/1.1\r\nHost: gfuel.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gfuel.finance/sign.do/SzRT?continue=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026SzRTd=Uy0zNTAwNjA1MTklM0ExNzgyNjQ1ODAwMTQxNDIw\u0026followup=https%3A%2F%2Fmyaccount.gfuel.finance%2Ftwo-step-verification%2Fbackup-codes\u0026osid=1\u0026peervid=MTIwOTYwMA\u0026rart=ANgoxccTV5Kgxf572Y0tkYb8ttyS9Dy8o8S-BCIDh4GxDSu5cSlWrW5IJ5KXEarSQhYO3bi9oXQd8zklLwadWgQo8hVubPgxPO62nDqkB5d9hazHVdVsfDI\u0026flowpeer=R2xpZldlYlNpZ25Jbg\u0026peerenter=U2VydmljZUxvZ2lu\u0026SzRTi=QWNEc1J2d2s4NnhOYW1keUJYcm1MVk5xV3RFdll3LWZicGJwRE5QUUlRMXluOGxWZnIxRVdSNHU0S19PRzJPQmxGSzFPc3J6NW1meVFB\r\nCookie: ver=Z2Z1ZWwuZmluYW5jZTowLmxzeGh5OWQ2MTZt; NID=532=A2xFD0XcXxJVPMWEg_maD7Q5b6o58v7BWWCiYHn7pDfsIR-mtjwrQJjl76dPxANcN7UVfYCamigkjzcAwD79FIg5tMmoIxLJ4LDYKzh9ypkrhm923GLPI5U_n84EH2A7DlUgsc0tinxaq67GrDZy93cjU4J3g1FNquJdQm2hDzLr3nNUGaDCbxJX0TXpceRn8WYgTeOLmTBnNHaF3NVffHLnf63Ejp3B--5CdVUvXnyO; __Host-GAPS=1:UA4EkPheDyACkj7etyQXECh3vKGRgw:Y5c-vJZnO8u2dqNm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:23:21 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a3a9887-b20\"\r\nlast-modified: Tue, 23 Jun 2026 14:30:31 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h7tAHuZWq58%2FDcVsWVyZmcpKWReeFXZZzzWqUqK5qDCG4Rl0SC7QyHox7h7yyaINzrBnFaaMGefHaurRhz69S44EhnpoyaIkQDqlzTTvtwlneSF4TTlgqaQyiTgxYasP\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a12c51a38e0b56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2848,"size_decoded":1909,"mime_type":"application/javascript","magic":"ASCII text","md5":"182276a3168f58192fabc0b2a8314d96","sha1":"b7708b650d14a70d923182e5ae41e805b19863bc","sha256":"bbf5c140ae5a313dbfa7d2576e829e7c20903d810d2b3f658193d5486910aa5d","sha512":"1abaecb449ff31344b7e7ee9e367d55c57336d645288fd8fdf5852f157ba37189db551b641bdc83b9bf4f9964151f7cf8cfd8723704bb614b3c860e4d3a521eb","ssdeep":"","tlshash":"1851321d24b9407613b7a02e8b87d34d7226209b6004ec4a37dc5b407fc5d6d93b3bda","first_seen":"2026-06-28T11:24:03.530105Z","last_seen":"2026-06-28T11:24:03.530105Z","times_seen":1,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"gfuel.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}