Report Overview
Visitedpublic
2025-09-04 16:11:17
Tags
Submit Tags
URL
www.gwch70x.life/
Finishing URL
www.gwch70x.life/
IP / ASN
186.2.165.80
Title
GET-X
Detections
urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
3
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
gwch70x.life 1 alert(s) on this Host | unknown | unknown | No data | No data | 471 B | 28 kB | 186.2.165.80 |   |
widget.intercom.io | 19213 | 2011-08-15 | 2020-07-20 | 2025-09-04 | 423 B | 7.5 kB |  54.240.174.38 |    |
www.googletagmanager.com | 283 | 2011-11-11 | 2012-10-04 | 2025-09-03 | 1.4 kB | 754 kB | 142.250.74.136 | |
gx.webim.ru | unknown | 2006-09-29 | 2024-01-26 | 2025-09-04 | 432 B | 322 B |  91.142.87.234 | |
www.google.com | 22 | 1997-09-15 | 2015-05-10 | 2025-09-03 | 820 B | 567 B | 142.250.74.68 | |
www.gstatic.com | 146047 | 2008-02-11 | 2012-05-29 | 2025-09-03 | 496 B | 808 kB | 142.250.74.99 | |
www.gwch70x.life 59 alert(s) on this Host | unknown | unknown | No data | No data | 44 kB | 2.2 MB |  0.0.0.0 |      |
js.intercomcdn.com | 23692 | 2013-04-25 | 2020-02-19 | 2025-08-28 | 851 B | 1.7 MB | 54.240.174.98 | |
api.gwch70x.life 6 alert(s) on this Host | unknown | unknown | No data | No data | 3.1 kB | 16 kB | 186.2.165.81 | |
code.gist.build | 124721 | 2019-11-17 | 2021-06-11 | 2025-08-28 | 854 B | 53 kB | 104.26.11.146 |  |
us.i.posthog.com | 42193 | 2020-01-23 | 2024-02-22 | 2025-09-01 | 1.1 kB | 1.5 kB | 54.242.14.170 |  |
api-iam.intercom.io | 17818 | 2011-08-15 | 2018-08-02 | 2025-08-29 | 1.1 kB | 2.3 kB | 3.228.132.26 | |
DDoS-Guard (Security)
DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Amazon S3 (CDN)
Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.Amazon Web Services (PaaS)
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.Amazon CloudFront (CDN)
Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.Google Cloud CDN (CDN)
Cloud CDN uses Google's global edge network to serve content closer to users.Google Cloud (IaaS)
Google Cloud is a suite of cloud computing services.Vue.js (JavaScript frameworks)
Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.Nuxt.js (JavaScript frameworks, Web frameworks, Web servers, Static site generator)
Nuxt is a Vue framework for developing modern web applications.Node.js (Programming languages)
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Envoy (Reverse proxies)
Envoy is an open-source edge and service proxy, designed for cloud-native applications.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium | 172.18.0.16 | 186.2.165.80 | ET INFO HTTP Request to Suspicious *.life Domain |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | www.gwch70x.life | malicious | Sinkholed |
| Quad9 DNS | gwch70x.life | malicious | Sinkholed |
| Quad9 DNS | api.gwch70x.life | malicious | Sinkholed |
JavaScript (42)
| HASH | FROM | Size | First Seen | Last Seen | |
|---|---|---|---|---|---|
| fe364450e1391215f596d043488f989f | DocumentWrite | 15 B | 2023-03-07 | 2026-08-16 | |
Introduced by DocumentWrite First Seen 2023-03-07 Last Seen 2026-08-16 Times Seen 87523 Size 15 B (15 bytes) MD5 fe364450e1391215f596d043488f989f SHA1 d1848aa7b5cfd853609db178070771ad67d351e9 Loading... | |||||
HTTP Transactions (80)
| URL | IP | Response | Size |
|---|