{"report_id":"db611e28-9821-4a8d-b3cf-83438f1ba998","version":6,"status":"done","tags":[],"date":"2025-09-04T16:11:17Z","url":{"schema":"http","addr":"www.gwch70x.life/","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"www.gwch70x.life/","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"title":"GET-X"},"submit":{"url":{"schema":"http","addr":"www.gwch70x.life/","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-09T16:11:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-04T16:10:52Z","timestamp":1757002252,"ip_dst":{"addr":"186.2.165.80","port":80,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"ip_src":{"addr":"172.18.0.16","port":55112,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.life Domain","source":"{\"timestamp\":\"2025-09-04T16:10:52.039868+0000\",\"flow_id\":1582466641633802,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":55112,\"dest_ip\":\"186.2.165.80\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027876,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.life Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.gwch70x.life\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.gwch70x.life/\",\"length\":568},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":553,\"bytes_toclient\":1323,\"start\":\"2025-09-04T16:10:51.926218+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"api.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"gwch70x.life","ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":27627,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"widget.intercom.io","ip":{"addr":"54.240.174.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":19213,"first_seen":"2020-07-20T12:16:46Z","last_seen":"2025-09-04T10:43:48.021827Z","alert_count":0,"request_count":1,"received_data":7479,"sent_data":423,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-09-03T15:12:59.606072Z","alert_count":0,"request_count":3,"received_data":754074,"sent_data":1439,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"gx.webim.ru","ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"2006-09-29","domain_rank":0,"first_seen":"2024-01-26T10:34:55Z","last_seen":"2025-09-04T13:25:24.717155Z","alert_count":0,"request_count":1,"received_data":322,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-09-03T15:14:31.261741Z","alert_count":0,"request_count":1,"received_data":567,"sent_data":820,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-09-03T15:25:59.584642Z","alert_count":0,"request_count":1,"received_data":808433,"sent_data":496,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gwch70x.life","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":59,"request_count":58,"received_data":2229311,"sent_data":44009,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"js.intercomcdn.com","ip":{"addr":"54.240.174.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-25","domain_rank":23692,"first_seen":"2020-02-19T12:43:00Z","last_seen":"2025-08-28T21:11:56.986795Z","alert_count":0,"request_count":2,"received_data":1713819,"sent_data":851,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.gwch70x.life","ip":{"addr":"186.2.165.81","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":6,"request_count":6,"received_data":16198,"sent_data":3106,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.gist.build","ip":{"addr":"104.26.11.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-11-17","domain_rank":124721,"first_seen":"2021-06-11T23:09:08Z","last_seen":"2025-08-28T15:07:31.772496Z","alert_count":0,"request_count":2,"received_data":53317,"sent_data":854,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"us.i.posthog.com","ip":{"addr":"54.242.14.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2020-01-23","domain_rank":42193,"first_seen":"2024-02-22T12:48:36Z","last_seen":"2025-09-01T16:57:22.957078Z","alert_count":0,"request_count":2,"received_data":1549,"sent_data":1057,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api-iam.intercom.io","ip":{"addr":"3.228.132.26","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":17818,"first_seen":"2018-08-02T22:07:54Z","last_seen":"2025-08-29T04:24:52.790842Z","alert_count":0,"request_count":2,"received_data":2272,"sent_data":1069,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-04T16:10:52Z","timestamp":1757002252,"ip_dst":{"addr":"186.2.165.80","port":80,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"ip_src":{"addr":"172.18.0.16","port":55112,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.life Domain","source":"{\"timestamp\":\"2025-09-04T16:10:52.039868+0000\",\"flow_id\":1582466641633802,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":55112,\"dest_ip\":\"186.2.165.80\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027876,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.life Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.gwch70x.life\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.gwch70x.life/\",\"length\":568},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":553,\"bytes_toclient\":1323,\"start\":\"2025-09-04T16:10:51.926218+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.gwch70x.life/cryptojs-aes.min.js?v=1","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd93b7f0987a614bc17698503bcb6af9","sha1":"68a66448326499ff34c75bf31e2769b278584e0c","sha256":"8d4fae1a37a5b5338c889d0897b50024194b4d3ae94940e7e42c1c1423a1183e","sha512":"e3b87dfe10c0e3f3d801a85ae9c654a74eac22c2a93a757568a0d2b13755c36aeb5f9337e94a21db4ef2d1f0f1cfb98fccbbb0151d5cdf8d967730df96bfde98","ssdeep":"192:9BIGDmDm90mP9z8Ui015lN1I5rI2Tru6hMJFmHV+mdpwIfyAaYfKnNVYkUUFJZm3:9yiB0ez8UiIX1SrTegsEHJuI+y8Z7AX","tlshash":"625297c936edb94263963028587f6017b86b28b6945c4824f29cd4ddff9899dc03ae3c","size":13722,"data":"","first_seen":"2024-11-30T18:08:34.076577Z","last_seen":"2026-06-26T20:23:29.818692Z","times_seen":1206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/ls-cdn.amplitude/plugin-session-replay-browser-1.4.0-min.js.gz","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c19b1b5d91c8d683b1310562d9c4a225","sha1":"4d45dcac5c6a88e10052f4e356b2170c20413441","sha256":"bb5779145f1ebdcdee053876a4ed060174dda4656978972304c79ddd5f36dac4","sha512":"3a4e8d2e8f5d9a3b45c08ce99374c149a5b67d04d016edfe6259dfbbba948a049301c0cfa5f9bf334cb93b9b4a3558cffa725c166a943c90834c8d2237a1a21c","ssdeep":"1536:Ask/3qTBpVX0Ib6vhb2pJkuppl5METErM2jnpkDtoT1JaM18PIQunrr9gltn2BE/:IqBfX046vhb2pKMQt1Jawi697w","tlshash":"4ec329deb397b033539355a980bb0101b73a6a19300d4464f62ad9ea3c7d847a277fbd","size":126923,"data":"","first_seen":"2025-08-09T06:39:58.991299Z","last_seen":"2026-03-24T13:49:06.781634Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/DlAUqK2U.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","size":91,"data":"","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-08-16T09:26:31.875352Z","times_seen":25557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/d4aiDjLF.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"376e23c5d4ca846e13e9d09791a25385","sha1":"3c10c8704fcb34899dec5926979abf202f75df30","sha256":"9db6702a9a86c7d19b8a02861c8c5f2559192800753d4fe6213043a417990c9f","sha512":"f428be75093080b0d75478c41953b83a030260b3c58543d25b5ad82253292536f158b6b8e5fabc416d3a7ce49128bdcdeb15ad2d0ffdff65d1f2f40cb107ea34","ssdeep":"192:MiFojMIZjkItgj6pnaJe/HA9iReMDjHMtpgCtAoRXSAd55rD1W55Jr0UWip8W4JQ:MiCMIZjy0LhYRHMAhPMN07i6jC","tlshash":"2f0240de520a65b00bd706fa81e846d0d6b00844f04d997c64f8dedf477ec8917a6bbe","size":8647,"data":"","first_seen":"2025-09-04T13:25:01.043031Z","last_seen":"2025-09-04T16:11:26.394503Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KN757LMM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fbbe083dd07f4f68debb79431daea91","sha1":"86f9225faee9996d5b29007da81b480a3e17284c","sha256":"e106f2a0af04a41c8efd8500ed2fc67f3db4dc5eafb73f047f2dcb89c39355e4","sha512":"9c2e96b28243d10bfbf6f0f3729794dd1b4b604a0b94c97bd386e9f013cb82387ef93e726edeee6050d84356c94919ff6b0d363e96eaefbe82205dcd777f704b","ssdeep":"6144:Qe9wW5JhyAJr2GCHgG1RBdIM8WAQ42UIhqM9Az/:QewWThyAJr2GCHgoBVpO7","tlshash":"4b8429cdb3c6742683a3a478403f114ba17b6aa2f84cd895f186dcd42e74a9a4177f7c","size":382738,"data":"","first_seen":"2025-09-04T16:11:26.355088Z","last_seen":"2025-09-04T16:11:26.355088Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/js/fp2.min.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","size":34877,"data":"","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/Cc9XZ-bZ.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"edcca5d565fe593d22506240dd296af9","sha1":"20cdeb6e7a4c2d920816324b235e3254f73c382e","sha256":"276f7c0689e543e6a1e96d73f0389e85c671a61bf8381d338a87b4146c5f9571","sha512":"62cd1f75b2f4ec5e393060e62446cfe41b0eb0397d0d4294647e3e1df464b515f754f56f9c962b1304d05f5fed5defcae2b24b59656ec045d5fe63330dd7c898","ssdeep":"","tlshash":"8501490bd94481b8011cdcf4e421cc3aa27784ab53e9d7b1d1df57715be1071d10d62b","size":806,"data":"","first_seen":"2025-09-04T13:25:01.067259Z","last_seen":"2025-09-04T16:11:26.380199Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/DnjNk7Rc.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"6932e67e2a877d0e6c31127f8621e3a0","sha1":"1ce82681e36c9482e73f49b7c7d580e4a01d684c","sha256":"688d616fc288fc8eb54a4e6b1fcf8373f9ad129160ab498c85925634300de549","sha512":"3c41d92922841565c81960e28b19fcbb94aa53774db93a07e3eb106e564be3adade38d62cf61b2a86e2150e802e66a781f4a1f079cf1be3401fdd9e1c9c01ba7","ssdeep":"768:2i4xc5uvPlv2NJ8QBFZYlAI/+VRDWLOFtTqcSagFVXsqYNNMo1MoY4b17JsUWLik:s3RuZtRwcSaSV1Iv+oA","tlshash":"99f2f708e4199d3ed9b75d9878540811b22d2fdfd0414d72a1fc9d186bbbd3823aebac","size":36104,"data":"","first_seen":"2025-09-04T13:25:01.091457Z","last_seen":"2025-09-04T16:11:26.336028Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/DdC22MeW.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"08bcc3eb1c3890f5487f1a0dde0764d9","sha1":"ae790f9c122454b6a82e39efc9c50e3d4dd38d4d","sha256":"6dd0a52758046f7d5fa996ce2ccf0cdb346cb6a9c588938823f933fd268c8672","sha512":"c96fda5f79f082e8b68409c9dae301d6ba04a0970004691bec26155b58135c76656accd8ebbe5d885b700a3fe8c96a95a3cd16bc2506295883c93abfce98dce7","ssdeep":"1536:RK6l28I8DZzkXhvPS5uLEiMAa73hBlxvHB+CIdzkVXiA6w+EV93mBE09:U6nCvPS5uZS8a9Q","tlshash":"7c832989f224b17782f75ada8376c20172a14984b809d4e4b0ed4d7b496e95c03afffc","size":86097,"data":"","first_seen":"2025-09-04T13:25:01.077495Z","last_seen":"2025-09-04T16:11:26.332965Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/8sGV3137.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"32fd0510b62be53bfb096134ab98842a","sha1":"acc6b848e1023a24ce6ba471f76bc2f4d162ca3c","sha256":"462b42a24775b0554106883873cd9026fc956b60444461b0ff8c8409c64017e1","sha512":"051f4d38e869d0daed56034336497e990340586b496f065d98ce38ae34c3bccc41f79f0d179897b430e88f7d4fbae9a27a14314e49ee4ccf9f5613659223abf1","ssdeep":"6144:cCuayegAuTVcvTIOg1msarrOu/Ro8xC26pl5OanydobbUCUxNITgAUj:cCuayegAuTVcvTIOg1msarrOu/Ro8xCK","tlshash":"90247d320e5d1cbd1111a166de1cab1a38de81fe3e9b93e107796e6e35f10309ea931d","size":220096,"data":"","first_seen":"2025-09-04T13:25:01.094369Z","last_seen":"2025-09-04T16:11:26.410273Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b7ffd5b7408c1219fbd35dd53208e70","sha1":"87db90852ceaf58be691a8c2492353a5d76de059","sha256":"fb997fc9d5069092971ad25f0131258ced2c36bf9d313ad535de25ac5c36e70c","sha512":"4045a6bb31e36cdcd5d0d32b3a672004365bfe391ea66b11bf2d2ee96e2715105255f02bf2b442072b902e9f0ba7db465a5d4733ddf3b18378375de86f112d8f","ssdeep":"","tlshash":"633126cab36189126a97383b653b5344617326e61e0268a3f2260e447c2cadbd53375d","size":1677,"data":"","first_seen":"2025-08-09T06:39:59.161093Z","last_seen":"2026-03-24T20:06:00.342299Z","times_seen":47,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-04T16:10:52Z","timestamp":1757002252,"ip_dst":{"addr":"186.2.165.80","port":80,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"ip_src":{"addr":"172.18.0.16","port":55112,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.life Domain","source":"{\"timestamp\":\"2025-09-04T16:10:52.039868+0000\",\"flow_id\":1582466641633802,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":55112,\"dest_ip\":\"186.2.165.80\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027876,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.life Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.gwch70x.life\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.gwch70x.life/\",\"length\":568},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":553,\"bytes_toclient\":1323,\"start\":\"2025-09-04T16:10:51.926218+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/cryptojs-aes-format.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6bc38f77922eaa6f1b23716034b4a2e","sha1":"db781b1e30c4f2a1d63d47054f0903c463cf01ab","sha256":"9ca00bddae85e30d59672da0089ea5e132df97d75a92f42114fe1befbaeaf32d","sha512":"0ad7c00c1564d77f8463dfc81003c0d6cd6ada4e3d01094331f72847f17718e4a6b2c7a2a0bcbd96a1107bc6cb9bcb1721e7b2968ae4544595ab98d39bb30c82","ssdeep":"","tlshash":"163177407debb4c287e8e1d50435a044f67b7a0ab1558ef3aa5aa404ffedf3006326e4","size":1494,"data":"","first_seen":"2023-03-07T18:27:54Z","last_seen":"2026-08-07T16:57:51.090464Z","times_seen":717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/AG4q27Qm.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"639a5b26c9cde48dc9306092b038cab9","sha1":"6ebee6b859e75f4b3f347450b465e1ac66aee036","sha256":"66784c82da9106ccab65d77f7788c5aa7b28076ecc01947fb73072618f5ce745","sha512":"7ea88dd122048c6cacbbe57a6d30a5451dd6993b1be18cb8b3d50884fba6d7ee3b42b1831b8a285f9676a7cc0378d21f1a7ee998747a79e4b93e1ec418600e6d","ssdeep":"","tlshash":"11a0120a0454007d110408f46f1b945945a0282a13754bc0000046054b764ff560cc00","size":86,"data":"","first_seen":"2025-09-04T13:25:01.071676Z","last_seen":"2025-09-04T16:11:26.327515Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/BzJ5TwHR.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"f6ce485b45d60be95bda75e5201fa3e6","sha1":"cd0403b6ed3db241813ba7f8ef9ad769eb3a8ed3","sha256":"d9a3f3de6e380bdc3dc470aa8211bf1464d8cbd46745d9b20504a5ee2b2c9254","sha512":"60f1ac35e803ffd81ee5e9361da3cf3c112b0c51f66a968814d980939b7f9fd49c7dde59d0db3fc742c9abde6b268d231163d0e44579f9c1d05977638ec8751d","ssdeep":"","tlshash":"086141fc1635a57226eb17bb43a20c9242764855f049b27010da8f0d553dc984bf7ffa","size":3347,"data":"","first_seen":"2025-09-04T13:25:01.089546Z","last_seen":"2025-09-04T16:11:26.385065Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/2sJvksnKlECCyE-0Aoh3JRNF/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f464e9efb54fa9bc820513e94f05b6f4","sha1":"51ae938c1cf3a6c78fdb86c1ea67bff5073a1a67","sha256":"0844a2d14c54573d5e99e5f405bac5ee251556fe73aae8bab4ac0589befc8fbb","sha512":"ceebf5d0ccd3fbdc7979910a68b600c2edc48ff4b50668e29567e9c0df6dfd9b4b36c8fe75f01183a4fcb75f7253d731cb076a2a1426f2b12237caff424f32d7","ssdeep":"12288:3z163nKwEtkOuMFgNm7FA1osoM+xRPFjks9:D163KCMFgNm7u1izxRPx","tlshash":"a40529d879463a795362b1f35467a439a33e9424d84c08adb19ac8f42ef480d34b7ef7","size":807525,"data":"","first_seen":"2025-08-28T12:47:01.840328Z","last_seen":"2025-10-04T13:22:40.63164Z","times_seen":132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/js/pwa-load-event.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f463b05f25296c1e185cc82087291f6e","sha1":"d15dfa009eaeeaaf36af83b20ace25714adbc583","sha256":"3f5bcf295bac81715b4413d640843ee19600f6a17c96503038c6a4193c331865","sha512":"5ecd0baa189383e24afadcbe391266fac63cdcdcb7da68ab1371168fae81f05f0140b4dcd86bc4cc59f4ebb3f5949e94b302f05de00942886fe3060436ae03bc","ssdeep":"","tlshash":"64e02b7483fc55b808e182b75f47bb15116721a77068d990c1871906f8d148780a2fd2","size":375,"data":"","first_seen":"2024-08-19T15:07:41.99372Z","last_seen":"2026-04-15T02:03:05.836861Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd84fa657a001622ac22bce982d43bb1","sha1":"67887186b104572d42c41db112d67d710d9bdf88","sha256":"8569ee0622b8babc9f8b73414385321641165e5c9e83a7219122ad5467035698","sha512":"8cecee69741e0998c660e60cc471240de5768791c0d6ff56bd909bade34338a9e3ce27f3f5c4d4a53bd7e0638c6103c75805aa254199c674a55b456c0410cc01","ssdeep":"","tlshash":"8d51b6bae029aa3eb015199c74053340584c9f7f60ee3e64e4c6d764bc0b39f2eb1699","size":2761,"data":"","first_seen":"2025-09-04T13:25:01.09898Z","last_seen":"2025-09-04T16:11:26.414431Z","times_seen":3,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-04T16:10:52Z","timestamp":1757002252,"ip_dst":{"addr":"186.2.165.80","port":80,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"ip_src":{"addr":"172.18.0.16","port":55112,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.life Domain","source":"{\"timestamp\":\"2025-09-04T16:10:52.039868+0000\",\"flow_id\":1582466641633802,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":55112,\"dest_ip\":\"186.2.165.80\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027876,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.life Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.gwch70x.life\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.gwch70x.life/\",\"length\":568},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":553,\"bytes_toclient\":1323,\"start\":\"2025-09-04T16:10:51.926218+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/Ci0qgXkX.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"20422f0db1c47ccd19cf54c7ee86523c","sha1":"50a4f0f051ebdde331dba2c0df67fc421e091db5","sha256":"a845b132fab069942669a0719f6d8d86e66cc8041cba5c061502f147ab950c30","sha512":"4dd082fbee1688fba632ba7d13c73994aac0e2eedf3ef06d207ed0d528d0fe264650eb3cc806c1020d170a538b5cf047228374e7195f26c4782a5c4fc59ad388","ssdeep":"1536:QsrUHXu9+2FYIFQqN1q46HAXJF707AMvrHCRAxpdh5CVaxwWNz5p3Cke/5p:QxHXuw2FYm2T5q+IR/r","tlshash":"20d3504b4e0c0e7a056213b12fada7b366acc03471dbc3e557bf82182375475aea679c","size":138548,"data":"","first_seen":"2025-09-04T16:11:26.367765Z","last_seen":"2025-09-04T16:11:26.367765Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.47c60b61.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c474524b2911c5d756732ad7758b9d56","sha1":"1de131f1e77da5030b9b7d399f061fc23b9b48ee","sha256":"9d6093d38d7894ceef6c46975934fcb489ef18e428d238ae41dbb9ea227182f1","sha512":"ac28388b3a7912364744e4c014bc28f7f73731bce0161693d12efc75210117d45fea1ad4a5bc3e5c56260a47672b67982a2bb5fdc793c7f32e0615fdc53f2c36","ssdeep":"6144:EwO3WSIXxZHI0eZXw9pmpGWi5vMz4/M4hApZyuxQBGwTAWqCtWB1dOwCaR1lvCVE:34CNYtV7SwRlZHkvMgu1KzSGyee1yY","tlshash":"ac25c5ccb2d2f06a43976175813f200bf33ea999b54e8450e669d8d1bcb858d9237f78","size":1027958,"data":"","first_seen":"2025-09-04T16:11:26.328422Z","last_seen":"2025-09-04T16:11:26.328422Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/ext/cdp-customer/v1/analytics-js/snippet/233e4c5f9379d04ec864/analytics.min.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"40dfec4366cf117adf70c52eb522f537","sha1":"75c459400a5c6d5ba9b6b4ba3d97b92a0154e4b2","sha256":"b83dfb3cc66ff4f563917de48d81823977e239ddc527f769d4a2b59ef36b4091","sha512":"e92fa91271cd16836f30e1b2ff274a0b154684e7e9fd3b2d32154ff353fdb9ba69e38e88a0fc8d37c305c86a302a5de144dad1d73cb74f78b7c0be92bb8c1efc","ssdeep":"768:0xOyftQBCLo1sw/cexpme6piT5nQk8v2RbgFoF4OnImsSfWdLyWQL9ZsBpi0vRxV:UtQBQo1sAIeaE5Qk8uV4oF4OvpU5xMCf","tlshash":"dda383c8f6e6f060439364b8803f110bf23e795e680e84a4f266d9d66cbc59d9127f79","size":106230,"data":"","first_seen":"2025-08-23T09:38:09.850489Z","last_seen":"2025-09-04T20:54:35.109693Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/ls-cdn.amplitude/analytics-browser-2.6.2-beta.0-min.js.gz","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a81d9804ed47201de5314a7110e680be","sha1":"df58e208599843e46894e9c2bbfdf2feb2a985a5","sha256":"59dd69f4230f7535182747c17235fe4526d34826a142498485779bfdb5d617f1","sha512":"2c15805effa726a40e1b3156d003df4b5f602ab4c1b09b8897ff759d143c0a33a5eb7cc90887b850b1f209ccb05b7be263935ad805ad86383f88947d777fdb42","ssdeep":"768:p6wmsZPARRFO/J6zZsideR53I+dte7I4GWyihZurBJ8:/msY4/JceR54+zeU4GWyaZudq","tlshash":"f35372c9f6cbf0250393a5b8907f140ab33e7e9d242d4428f626d9d53c6d6499233bb9","size":66596,"data":"","first_seen":"2025-03-26T18:10:08.318249Z","last_seen":"2026-06-26T20:23:29.909592Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/DIUZ9vJL.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"868c50f9220f308b7bc94e029e292bf6","sha1":"820a01d436fb4f4d146e830444ed00b7453f5886","sha256":"5e2c1bbef05a4c8e4e05a0bb1116b31ed190bb16f2a5ab3f576ebed15e4a809a","sha512":"878a4b1945dfe36c11c703c09cf8427704746ac228ee66b120233cf4961936eb8a695030a6ce61c252d22d970ae862be809b70a1bafad46a08fd1be3c121488a","ssdeep":"96:oekq53hKMoKMj1W3FdeF31f5HnPx1oRstVCBR4Ir8Dtgjiby+qUECPRv5:oW3BY1W3eFFvmQVCkIgJbtD","tlshash":"10b1b7e4b0d9e0dbbb764fd1c032225260076ba57434e0d0f27aad73215be58a562b3f","size":5164,"data":"","first_seen":"2025-09-04T13:25:01.088084Z","last_seen":"2025-09-04T16:11:26.35249Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/knfz4177","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"54.240.174.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bc4cde0915526cfb0ff3b914c561701","sha1":"7779b6af3ac2364ab68970274b1ed116663ac95a","sha256":"4fb86221a59941bd6eecbffd557b8c3ec0f4512c483ff299a7ac60a9c6ddd0d1","sha512":"e632032b2a5d51c4a26964afe7bad5ab7f25261b2da741dec7c2c944594e22f422f652b28eca9680857e4d3871a443b87027e523fd0cd48d5a4ef843d4595235","ssdeep":"96:vv8/xVqhstBp8HEZgOM0PI0FNN7fADT9+tlb1JFrlPu:vOVGH8bMkNMHOlPu","tlshash":"78d162eeb6c3397806a3157a623f770c7f3b688428494850d06989c87a76dc7c15bfad","size":6742,"data":"","first_seen":"2025-09-04T16:11:26.32224Z","last_seen":"2025-09-04T16:11:26.32224Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/BqzaD3Pl.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"48659d4240295b9e64caab349266ed60","sha1":"72d8336e72ca76db1563fac1c496ded6ff65ae3c","sha256":"127ea5b1a4a77e85a4a100e7f9301b32e1e607a2c9b3b9f714def75e098b0ab1","sha512":"4ad1491e8175e0c642a3032062dd6e2ebb251ba4c1b94e4192e4fa50688cfbf6b748d45c0433bf36af924f90c65f4bb9e35267929b16482411800a5346042745","ssdeep":"","tlshash":"e8f0c92eb1dab43543ccd8c441380c006861ad602c0e218ed19b9f13b1d07a3708bd30","size":510,"data":"","first_seen":"2025-09-04T16:11:26.386239Z","last_seen":"2026-04-12T00:18:50.830483Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/ext/google/recaptcha/api.js?render=explicit","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"555cf8d947a008dc6c1ce078e6c73e68","sha1":"5bfe8e8a346b5aeb72639a0a7d4e510fda3ee0f7","sha256":"e48798aae3210cbc80dcefee2bb79d31030f01cc2981a510194b63801b272e31","sha512":"2da9785fa43c695396529a2c87771058f22798c1b8c393614cb732704d970af171ac4f4e9e8022b7614129878d2c9db5f3a106bf95aa48ed2b33cb1857a29431","ssdeep":"","tlshash":"85113e770a04a0390b3209e1e2fbcbb1e492701cf11c85e8aa01dbd82e7addbce08484","size":1019,"data":"","first_seen":"2025-09-02T11:58:06.199672Z","last_seen":"2025-09-04T16:11:26.389106Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/CFU304S8.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"65b0cca89e40818f39fdd7753db6d142","sha1":"24e169a25a2e5e795d2ba4918ad600ab939bc23a","sha256":"261a0d9b3884cb4797de2dd31290199dbcec4f295a6ca9ee2c3b48ab9d9651ce","sha512":"e4c57b7230da955929c01aa05a22c6039a4ab395d6480587e21169106ce56e84aa99238c37d03c5944a72a6c799d55cc072ee59b5e498caf41fd1f6e021b43be","ssdeep":"","tlshash":"53b092d6728a3ce12602b810a15b80b4a131e6240b8a47208026f08739724a48a52e38","size":120,"data":"","first_seen":"2024-12-07T17:14:43.577967Z","last_seen":"2026-08-04T09:28:00.148891Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/ClQ9daYf.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"ea5e74d79777972be475c0860292d287","sha1":"c4e8e781713abedc79aad231887228a6e1347440","sha256":"55df7c751bafb4716fbd3ff1ff765591ce2239a64f324a825bff23aba4ec3021","sha512":"90e7a5dd19be307760ce1fb97b98b346c30dbd92c34d0f7a6cbde2850f2ff387042e2b7ffd069e5dc0113dae00dfc4a3a2779d50ffa244d452453e62bdace096","ssdeep":"","tlshash":"893122c9f29ce4b7d0a7d7e88472842076d875fb3fa8cbd4824099715623096764ead0","size":1671,"data":"","first_seen":"2025-09-04T13:25:01.080853Z","last_seen":"2025-09-04T16:11:26.318065Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/B4H9rhCY.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"be6d83f7cdcb91bbddbfc783b5061b6f","sha1":"7bf4d4f34618a2f70140ac3b9539c32c5cef77b1","sha256":"79a5f55995f201d18500445237edadb8d20001650683fb254d595f23fedbb5e0","sha512":"741b27508301eeb3a875f84be7599fb5bd7bf2f8d74da7ecb2a81ab37a1552de32b87b1554dd593c1c8eca3caaa0732f977695ca2d72c2e51439604bae64247f","ssdeep":"","tlshash":"61d02bceeb7066b8bb10446d545bc752c724f90013a85ac0987b6aa17f609d7c306fd2","size":285,"data":"","first_seen":"2025-09-04T13:25:01.082086Z","last_seen":"2025-09-04T16:11:26.395497Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VRDLWS0SHC\u0026cx=c\u0026gtm=4e5921","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2637bf9ea690fc7beecccc09bcb01658","sha1":"b9f7c52dacab2fd326f145cb8ae71477fb118264","sha256":"4d25a054f78bef398a992c8277f4411cca760b75feee3bdb64523140e5da4d2d","sha512":"93b308135e7f398efc40dd8b70a2fd672326ef5bc750e04c6b09ccff16be830f772ef1a965df4cabafd4ff55d58da940b8984c408955e64d1f207ad58c004701","ssdeep":"6144:gG9wc55hOsAJr2GCHxG1RBdIgWUk2UIhqNY98aAmL:PwcDhOsAJr2GCHxoBQNc","tlshash":"a27429cd73c6702693a2b478503f118ba57b29a2f44cc899f18adce42e7469a4177f7c","size":368110,"data":"","first_seen":"2025-09-04T16:11:26.404469Z","last_seen":"2025-09-04T16:11:26.404469Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/ext/cdp-customer//v1/analytics-js/ajs-destination.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecdb24cdd6b5a3a4a7ba31895f79ca4b","sha1":"3284a1f3ba7aa68b324499a64bf32c8101701663","sha256":"ef949bb08ab368c25ce835e54a53b3eb842de7e868ff81ff99520ed16394637d","sha512":"e76cf7a6f407f484c5537258129ee7d29b765a14204c0cd4e1ee9ca3d9542ac01c5c0b0c557e704d8c69a1a12b29312b99ec0fd25608af07b3c79ea5a83d0492","ssdeep":"192:d61F3JpeOVXIhCBnMfJlUEpFX8nmuONy+2Yn:doF9TMsEzZuF+2Yn","tlshash":"5f1212ccf6c7f0055267bab5817b451ab33ebd1a244a4894f42bcdd5287c619a12bf38","size":9226,"data":"","first_seen":"2025-06-01T15:05:10.790294Z","last_seen":"2025-12-16T16:58:04.809767Z","times_seen":521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ff24fb4cd9ae726b39c730e38ac5cea","sha1":"719fa0c0e030deec05362e626313d4e11274563d","sha256":"af4d3a5d0b6e2d084e38459ddebe0f1bad6f188189d05d8bdc1ab0e196d075f3","sha512":"eeee0e9b3988c37055e21aabb4c5153ce2d81ff38ec90f255e43ea6383a12aa1ea8cf4cfa0ecf0de74ee9677e59517d415a3f30d8429c9cfa39838cec0e41ac1","ssdeep":"","tlshash":"92a00241c073d565db58400c49af7610293076e556606510f440c746711e037212a348","size":64,"data":"","first_seen":"2025-08-09T06:39:59.156203Z","last_seen":"2025-09-11T21:42:04.087089Z","times_seen":10,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-09-04T16:10:52Z","timestamp":1757002252,"ip_dst":{"addr":"186.2.165.80","port":80,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"ip_src":{"addr":"172.18.0.16","port":55112,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.life Domain","source":"{\"timestamp\":\"2025-09-04T16:10:52.039868+0000\",\"flow_id\":1582466641633802,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":55112,\"dest_ip\":\"186.2.165.80\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027876,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.life Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.gwch70x.life\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.gwch70x.life/\",\"length\":568},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":553,\"bytes_toclient\":1323,\"start\":\"2025-09-04T16:10:51.926218+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/DP5Ff1Si.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4af963b580fa40b3fe3e0389b0c34049","sha1":"e2ce8a83352b251395deaf758b0b4d7c055af582","sha256":"ce0ad4ff994426e83d407fef173f7fecbd0cb2381fad17d1f6f70b63d6ef77aa","sha512":"a3ce2dd160a1d0663458a1f1d9db604209bc4f408590a10c7f06e5781458e81a15311658659da06cb891b35fef860f3adaa7b63d139984203ef5b44b14103b82","ssdeep":"6144:4VY31DWkAnE4GrcwQpRoysvWXQfK5xf4wJPTOMnFmOCWOwDWjmbvnNUDfgKnYAHD:4CYkAEVQLoyifKzf4sSmFyWOwDR84KnF","tlshash":"61a45ad971d6b02213e619e4907b0106f3392a54384ed4e8f16daeeb3d7680a91b7f7c","size":484488,"data":"","first_seen":"2025-09-04T13:25:01.0554Z","last_seen":"2025-09-04T16:11:26.348922Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/DcYaAAs8.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"e0defebbf5b1f7c3d20dbe586b3fbf8d","sha1":"9a98a50ea930d1d592049d8b06b7ea997cb551d2","sha256":"d9619c358bb0ae0a7f26b18f953048dd92f3626ab73eedce704273def898ca3a","sha512":"199e25a1e97cd105e0b598fc32a8dc3b770103fe9aadff0bc0b0ac7e720f25e16dff85a883093e34e59f5d531d4798d0d5eac6e2c74786bb42ebb3021d0fc539","ssdeep":"96:fSI0Lgam5pFjwsmyzqVBRJzxv7A28/s1/HEwYx+3cCL:f8mjsyGRFThSu/j4U","tlshash":"44a1858f1240762e7ded4b5553f4681883304886fc1c27edf4ae5d389b5a88f61bb674","size":4910,"data":"","first_seen":"2025-09-04T13:25:01.076Z","last_seen":"2025-09-04T16:11:26.363521Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/BH18fLn4.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"6661398a6d56e6e6ae7887a1f81a45d4","sha1":"1aac35aae204deb0742b7b0a7c2fb95ec2cc971f","sha256":"a5fac192dd181af7df21469eaae0a39ba97826532ad8d06c96eae7f9c7cf3797","sha512":"14b095925fde73e4ce9bf8d6484d8ce76764b7f2fb548ed1ec68933624decec7644bc5598d3f69663e1fa6a07c9e47e39497a424c9e30b0a33870bc07fa9133c","ssdeep":"","tlshash":"36d0955d5033d0b8117505591cdb5d07d14758bd733453146063db7437a84d2474fd0a","size":259,"data":"","first_seen":"2025-09-04T13:25:01.097572Z","last_seen":"2025-09-04T16:11:26.400403Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/DXyKtzhm.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"774cedca2458be86699b1dadec4de6a4","sha1":"8df155284b5d86e0a526adfe1551e71dff94d3aa","sha256":"1b1c4bfa32e4bc1d4e363204c042dbb8cf2000d16d49f0807accfbb73152ad83","sha512":"86b2303b92988a4752b1fadedae16f065c7a3b378efa9bca7e9823561220bc910ad4ea8219650175e977005b91f85a86231ad7c54d6eb7801f6aced1c9290a82","ssdeep":"","tlshash":"3d110e2bfa0e0b2663331c764aa931e6cf650b8b2c7984c43c54df261237c83e5a6f04","size":1029,"data":"","first_seen":"2025-09-04T13:25:01.048284Z","last_seen":"2025-09-04T16:11:26.354288Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/HBjraRa3.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"a96b50d501435790764cd41480997319","sha1":"b6390e6846a7c5883d0524259e882ca59f05f525","sha256":"56ebaebef4563859e2aeabfe6c344e7258a38ca702084e437a1112aaac090613","sha512":"03fe0af9ccbb9e9156584b8589c5fb6a9006c380f69208cf438d4ba84bc7ed9ca662738b48ad785af5a57d0fbb17f2c3f32848c56c2b0e7b2bdc37d2a3863eca","ssdeep":"768:xXU8MMca080Hjkh5UyvucDYxhROs9SewPpUzSsLP20+6a7kHGQPLFODM:QI088a5bvuc0xys9SeSpU1Lu0+67mQhN","tlshash":"95e2c6cc7641b018a3a711b6e1ef580fb37a2984980e8554a0aef5e43d7c4bd43abddd","size":33499,"data":"","first_seen":"2025-09-04T13:25:01.069388Z","last_seen":"2025-09-04T16:11:26.381908Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.136ccc3e.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"103a089944d2295463b2f637a2fd1dac","sha1":"52544e4efd975b53d49b6fdd733fc294ef6c7018","sha256":"f23b1bd86b485b4f38f1671e46398627ea21518aed0b437be2d196c5c0c1880c","sha512":"8c49df15b440181ecf2af04709b52fa4ad199c22b7f10a145c7a883cb8a3184ad518ab4a6f8293a7cbd19ce16cf6aeef854a7c89b26658d103ea4b46c3d2c25d","ssdeep":"6144:pxE8LlzpXe7RvofOq1BrFZGEkYg+kfFd+oNEf9upyuAhOLtaX:HE8LlzpORwfH9kYqfFUkEFup/M","tlshash":"bce43bdc79d1f0a207f352f6807f140bf27a1a69680c8490f765d8c968b994e9237f6e","size":684253,"data":"","first_seen":"2025-08-21T12:18:11.824347Z","last_seen":"2025-09-09T08:35:33.568189Z","times_seen":449,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/xteshH-L.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"95ed2fe99795a5ba82332fdf147e7522","sha1":"6972e4dd0d2f70a8397a5d0aaf7f74586207deb9","sha256":"4e8345d9217bf5ff275fea384958a31ed922285d8220efccc88f78c1d014807a","sha512":"28d9bfade785288187295eee55455a6ae6619b13b7e4ea96c0d25b0d8bc9842848901170462ec92e88a8f6160bfa611924478f2977b28b42e7acb6009d423f17","ssdeep":"192:1qsxSEFu6ZufGq++k5q2IkZQ+tOWwYpsTctY0ipgNE7oVKRpnKFEN:1hZ8fK+kQ2IkDLwYpfYZplOKRpnv","tlshash":"3212eae473ac72aa59620dd12475481de434e6243b26e4d1f2ba34bab4d7c44b273f2d","size":9180,"data":"","first_seen":"2025-09-04T13:25:01.085457Z","last_seen":"2025-09-04T16:11:26.321235Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/D2zqvuUF.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"6388c86f4ea255e1365717974ff04b52","sha1":"5958616162dcad411da59dc5be28be158918c82a","sha256":"9bd8ec759b0680f997ca269054b550860a7e3fcad47190a2b2ff451021e64248","sha512":"4b619be70f5921dcae4b92ee41b9bcd19c997d151f8de4eeabc22c33b2fc951d177f4a9d2e5adb49bde9051e3f4044661dfcb1fc531a16c91ec7cf966acc0383","ssdeep":"","tlshash":"bb21657d4aec2dcc091cbc802ad89d6c3504d248a291cc8638a6fee7f887d5aec08471","size":1111,"data":"","first_seen":"2025-09-04T13:25:01.083215Z","last_seen":"2025-09-04T16:11:26.376409Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/ext/cdp-customer//v1/analytics-js/inAppPlugin.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d809228dc97f0373ccbef8c5e4d6f36","sha1":"3e737a42cfc5a0e28eb48af1ee35ddf1261a08f0","sha256":"d9505a91f86c817da1c30c03472c862b761d0f0050a563edce2873a8e30a64f9","sha512":"63161ae066f36ecdbfe16b8f3762416ba5d8d73d5158d15516ff5a43cc9ff49fd351fb4d0fb33434ae32a1da2f5656f6f89b84eb13215c7cefb1e20ba36de675","ssdeep":"96:frOeJ1t6SzUP0w3Gt+buZolWdTW2ELyWfQWYrZ6y77vGEKQDCMZa3E2byhApAa7e:3kL2IbuZolWdCZyWnNEKQK7bWApA1d","tlshash":"71c11e9df393e82d01f3ea6de47b6033913e77036058b521e017cac1696878d6613bba","size":5854,"data":"","first_seen":"2025-08-23T09:38:09.641742Z","last_seen":"2025-09-04T20:54:35.092061Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.gist.build/web/latest/gist.min.js","fqdn":"code.gist.build","domain":"gist.build","tld":"build"},"ip":{"addr":"104.26.11.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee8bbeffdeba56ade33bc6c987866344","sha1":"d56b7d527585f5afc238eebcd70217c429a9ab75","sha256":"ff89c63e84b735494078826a7e7971de665dde157c464176bce004c97e8037f4","sha512":"7f19b24b315eba3e058f52e802539709bc8b4ef5b61284d3c43e9f26e0cf9d4f77397ee1acb25937aa3be6345941bebe4ed7d48423ca1cb0a391a7b7f95e8e29","ssdeep":"768:E4072U1yf1F6qaEyf/iLzu1co/btwckxckIYyv38S8r/f98NRt:bw1y9paEyUu19DtlYyv38S8jfE","tlshash":"14c20a4b716a393d83d311d7bd7a3006633b7555b849c041b26ce8872f294cf6663f9a","size":25933,"data":"","first_seen":"2025-08-19T01:12:29.193244Z","last_seen":"2025-09-23T07:24:51.256389Z","times_seen":217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"fe364450e1391215f596d043488f989f","sha1":"d1848aa7b5cfd853609db178070771ad67d351e9","sha256":"c77e5168dffda66b8dc13f1425b4d3630a6656a3e5acf707f4393277ba3c8b5e","sha512":"2b11cd287b8fae7a046f160bee092e22c6db19d38b17888aed6f98f5c3e936a46766fb1e947ecc0cc5964548474b7866eb60a71587a04f1af8f816df8afa221e","ssdeep":"","tlshash":"54600088282020000000228008802020000203e02002020020c020202aa02280800200","size":15,"data":"","first_seen":"2023-03-07T01:02:47Z","last_seen":"2026-08-16T09:16:02.645319Z","times_seen":87526,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/Icons.qQm1orq6.css","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:04.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/Icons.qQm1orq6.css HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=wE79pXPU0szUTi1j; __ddg10_=1757002264; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T09:31:27.571776Z","times_seen":17916434,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gwch70x.life/api/mirror","fqdn":"gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:08.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 23:48:35 GMT","end":"Mon, 22 Sep 2025 23:48:34 GMT"},"fingerprint":{"sha1":"09:81:47:C4:B5:EE:E4:56:53:67:9C:CF:4B:6F:BF:F2:FB:26:B8:ED","sha256":"44:08:06:E7:0C:90:3F:BF:6A:36:6F:03:86:A7:42:D5:59:C5:15:52:71:C0:35:D8:0F:87:F5:23:EB:95:48:E0"}}},"request":{"raw":"GET /api/mirror HTTP/1.1\r\nHost: gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.gwch70x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=5mlHM2W20ZnuCHri; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:08 GMT\n__ddg10_=1757002268; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:08 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:08 GMT\n__ddg1_=5IfoWQsNH3EnVEth7U3o; Domain=.gwch70x.life; HttpOnly; Path=/; Expires=Fri, 04-Sep-2026 16:11:08 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:09 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: https://www.gwch70x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: db26755d-dcc6-4e51-9cc5-9cd9b0e1fbef\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26620,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6fefb0dc40664370614fb976d501c35f","sha1":"a2f9197631b011fce497f493d09e4f8008ec2b14","sha256":"150c101474915e60a648651a1c5fee9a67b2ac73a52bf9b92a11cae5434ee986","sha512":"da297115379c21a4359a94cca7c1c88aa2abadc55b5c80fa09330098dc5224d13a316a567ec198c8ea300a41c2eef0cd56a8c2ee296370976cdb2acb7a1ed479","ssdeep":"384:ee5/MTu141501nF5xpHlD3AEdxEtCC16IFyPWbCQRWJyu:XDPwQp","tlshash":"9cc285e2d5f3135c288835e6d7b3bced38d86954e218eb7fcc3e2687e504621669071a","first_seen":"2025-09-04T16:11:26.312838Z","last_seen":"2025-09-04T16:11:26.312838Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1058,"timings":{"blocked":171,"dns":84,"connect":20,"send":0,"wait":716,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/js/fp2.min.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:02.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /js/fp2.min.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=G0C2CLt5YCi2Fluj; __ddg10_=1757002249; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ROAqID4vNQ2ukj3e; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\n__ddg10_=1757002262; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-883d\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34877,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (34698)","md5":"02087a3f4f46b15bc198570d800bff41","sha1":"e59f5e3521d8c60e5772de1f65c90e5b87d9eb9e","sha256":"e753042decd90a96d0636a7df16df556860af92ca09ac37f0f6ab1d574acd1f1","sha512":"2c733c348e26c0b400befd5ccac6734eb06a0ca0c8c638f8d3a66afd75ea5860c6cfd3a913ba6dd6824bd9c629c2f28d14204efa625b10fa8fd9b366ba82c968","ssdeep":"768:J2N6EbuZaWRhGT8e20R5J++t6cOrVrzib:oxuZaWRhGoF0R5UVra","tlshash":"e6f21b96b2e8373c8143b063394bec15fb799495e784808a5e2d4180f8758e9e77bdf8","first_seen":"2023-07-23T18:22:17Z","last_seen":"2026-06-26T20:23:29.90284Z","times_seen":1217,"resource_available":true,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/img/loading.gif","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /img/loading.gif HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=dGA1yhZSIcJwCQMb; __ddg10_=1757002262; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=lXfJSpYItDv3Ej9G; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg10_=1757002263; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 11144\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: \"68b97987-2b88\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":11144,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 64 x 64","md5":"e4d96bb51227829e536412e5392bdf74","sha1":"8bf350e63f7bc86615cdccc6d16e0c8abb00584a","sha256":"d2911698581f2b0f538c0d770d1b677ecad7b9e61e99d89d1f218f9dae6c31cd","sha512":"a580b7ee3f1a213a523cc8ac69662809cd21bf0952aa2767ea1c3a8ddf934a3a34c4c578d34525d54ab027915aa9097894545713f135126bb8cf7f280b8ab0e6","ssdeep":"192:Yx1zq53A3H8YLSfEdDNsS+4tygrQFFpslGsTg1z4cWl:MH38WdDNk4Ygkrmwj5Wl","tlshash":"5a326d2c1ca447e6e927463165dba2cb8811df2d226c18d39eac347fb95b23ee0dcd10","first_seen":"2024-12-10T17:19:34.10667Z","last_seen":"2026-01-21T08:18:56.850207Z","times_seen":57,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":282,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/ClQ9daYf.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/ClQ9daYf.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=ZzsLgCAapgDluibl; __ddg10_=1757002263; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=HMuUTrJ8MW2yt2H0; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg10_=1757002264; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-687\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1671,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1670)","md5":"ea5e74d79777972be475c0860292d287","sha1":"c4e8e781713abedc79aad231887228a6e1347440","sha256":"55df7c751bafb4716fbd3ff1ff765591ce2239a64f324a825bff23aba4ec3021","sha512":"90e7a5dd19be307760ce1fb97b98b346c30dbd92c34d0f7a6cbde2850f2ff387042e2b7ffd069e5dc0113dae00dfc4a3a2779d50ffa244d452453e62bdace096","ssdeep":"","tlshash":"893122c9f29ce4b7d0a7d7e88472842076d875fb3fa8cbd4824099715623096764ead0","first_seen":"2025-09-04T13:25:01.080853Z","last_seen":"2025-09-04T16:11:26.318065Z","times_seen":3,"resource_available":true,"data":null}},"time_used":505,"timings":{"blocked":224,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/ext/cdp-customer/v1/analytics-js/snippet/233e4c5f9379d04ec864/analytics.min.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:05.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /ext/cdp-customer/v1/analytics-js/snippet/233e4c5f9379d04ec864/analytics.min.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=XAWgxBRgMjPxXGnx; __ddg10_=1757002265; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Cwc4npo1QTYB65VN; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\n__ddg10_=1757002265; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:05 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\netag: W/e10e268a3b13805b9cdd5e65f6c0cfc0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: public,max-age=300,immutable, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nservice-worker-allowed: off\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":106230,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"40dfec4366cf117adf70c52eb522f537","sha1":"75c459400a5c6d5ba9b6b4ba3d97b92a0154e4b2","sha256":"b83dfb3cc66ff4f563917de48d81823977e239ddc527f769d4a2b59ef36b4091","sha512":"e92fa91271cd16836f30e1b2ff274a0b154684e7e9fd3b2d32154ff353fdb9ba69e38e88a0fc8d37c305c86a302a5de144dad1d73cb74f78b7c0be92bb8c1efc","ssdeep":"768:0xOyftQBCLo1sw/cexpme6piT5nQk8v2RbgFoF4OnImsSfWdLyWQL9ZsBpi0vRxV:UtQBQo1sAIeaE5Qk8uV4oF4OvpU5xMCf","tlshash":"dda383c8f6e6f060439364b8803f110bf23e795e680e84a4f266d9d66cbc59d9127f79","first_seen":"2025-08-23T09:38:09.850489Z","last_seen":"2025-09-04T20:54:35.109693Z","times_seen":33,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/vue-splide.C9Z0wB1j.css","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/vue-splide.C9Z0wB1j.css HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=dGA1yhZSIcJwCQMb; __ddg10_=1757002262; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=zQE3UkG7ghHSP8CR; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg10_=1757002263; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-734\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1844,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1843)","md5":"e638a23113de5c173bd45cf1ec17cedd","sha1":"5e71875f9d7d6d3240729a9300e2be7b2c49d0d2","sha256":"25fecdb4c8330c6bfab65a09dbb53c0d8f407344f2ba4f4438bb48293444c846","sha512":"c76d640e7077019c6c609684d476a47b812c67eb4fbc8cf85240d2bc6e96e5254434483c8c8046b15b3683e09c749b26055b48f9656e0dbf5d78bad8aa18872c","ssdeep":"","tlshash":"fd31442240c92f599843973229bdd7a964eec2534e6302baeaded320468ad4d07e49cd","first_seen":"2024-08-20T04:44:02.347145Z","last_seen":"2026-07-20T07:08:57.528836Z","times_seen":137,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/xteshH-L.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/xteshH-L.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=ZzsLgCAapgDluibl; __ddg10_=1757002263; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iAVHEzFpHRgbubaL; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg10_=1757002263; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-23dc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9180,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9179)","md5":"95ed2fe99795a5ba82332fdf147e7522","sha1":"6972e4dd0d2f70a8397a5d0aaf7f74586207deb9","sha256":"4e8345d9217bf5ff275fea384958a31ed922285d8220efccc88f78c1d014807a","sha512":"28d9bfade785288187295eee55455a6ae6619b13b7e4ea96c0d25b0d8bc9842848901170462ec92e88a8f6160bfa611924478f2977b28b42e7acb6009d423f17","ssdeep":"192:1qsxSEFu6ZufGq++k5q2IkZQ+tOWwYpsTctY0ipgNE7oVKRpnKFEN:1hZ8fK+kQ2IkDLwYpfYZplOKRpnv","tlshash":"3212eae473ac72aa59620dd12475481de434e6243b26e4d1f2ba34bab4d7c44b273f2d","first_seen":"2025-09-04T13:25:01.085457Z","last_seen":"2025-09-04T16:11:26.321235Z","times_seen":3,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/knfz4177","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"54.240.174.38","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:04.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 14 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:E3:24:32:5B:DE:76:F0:A4:43:7F:C2:84:CD:98:D0:50:48:25:7E","sha256":"B0:C5:D5:8B:41:34:A0:3C:41:21:0F:E0:A4:E1:C3:F7:66:24:A3:25:E9:E6:67:D5:40:EA:68:FB:D3:70:73:74"}}},"request":{"raw":"GET /widget/knfz4177 HTTP/1.1\r\nHost: widget.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 2673\r\ndate: Thu, 04 Sep 2025 16:08:58 GMT\r\nlast-modified: Thu, 04 Sep 2025 16:08:55 GMT\r\netag: \"08fe78fc9a05c4a24c87556b01931e04\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=300, s-maxage=300, public\r\ncontent-encoding: gzip\r\nx-amz-version-id: 0IhIxb9ExgIAxzTzve_r4.vcL9M4hb79\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Error from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: MMpo9ggTqxHi92pv4qqlrkca_8-C3ZQE6YTuMZcNOKj0mzQ9ROA81w==\r\nage: 127\r\ncross-origin-resource-policy: cross-origin\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":6742,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6742), with no line terminators","md5":"5bc4cde0915526cfb0ff3b914c561701","sha1":"7779b6af3ac2364ab68970274b1ed116663ac95a","sha256":"4fb86221a59941bd6eecbffd557b8c3ec0f4512c483ff299a7ac60a9c6ddd0d1","sha512":"e632032b2a5d51c4a26964afe7bad5ab7f25261b2da741dec7c2c944594e22f422f652b28eca9680857e4d3871a443b87027e523fd0cd48d5a4ef843d4595235","ssdeep":"96:vv8/xVqhstBp8HEZgOM0PI0FNN7fADT9+tlb1JFrlPu:vOVGH8bMkNMHOlPu","tlshash":"78d162eeb6c3397806a3157a623f770c7f3b688428494850d06989c87a76dc7c15bfad","first_seen":"2025-09-04T16:11:26.32224Z","last_seen":"2025-09-04T16:11:26.32224Z","times_seen":1,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":44,"dns":37,"connect":1,"send":0,"wait":10,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/ext/cdp-customer//v1/projects/233e4c5f9379d04ec864/settings","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:05.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /ext/cdp-customer//v1/projects/233e4c5f9379d04ec864/settings HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.gwch70x.life/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=SaRXJliwzc7eqdyC; __ddg10_=1757002265; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=5mlnomrGHa08OKuf; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\n__ddg10_=1757002265; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:05 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nservice-worker-allowed: off\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":271,"size_decoded":0,"mime_type":"text/javascript","magic":"JSON text data","md5":"12c4ca482e1b7bf40375503843b5f997","sha1":"49d40faea70af1183b0ffb901b2a31da7df67e00","sha256":"3476d8f31024437417c5f09513e2917124968baedbe03b67e65610ab25bc6b11","sha512":"2ea63ebe73591d6db25a6ab54c245b29b4eed22ec8827abc39b4db69b79207dd04689cd6a9257ff94145ced2358ff3e66a31e8e6aa672805960387df8e5e4e26","ssdeep":"","tlshash":"6fd0c28c25701dfa88d16e798b9c5809b5cfd62d50a59b097574cd800dc08f82a246b4","first_seen":"2025-08-09T06:39:59.043609Z","last_seen":"2026-04-06T22:48:49.753298Z","times_seen":65,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/entry.B0BOi0i9.css","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:02.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/entry.B0BOi0i9.css HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=G0C2CLt5YCi2Fluj; __ddg10_=1757002249; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9hcdwEu71kQQRhfW; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\n__ddg10_=1757002262; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-1080\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4224,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4223)","md5":"61f0bd26cea7d117c5e7c486acc68d00","sha1":"6c8bcb0f1c4f0fb0f07276c5eacd898124ed10df","sha256":"f099b430b92e0f00145cb9382b4a9ae5fd988a1e4f4bfb3043e5a938efc4ee39","sha512":"f9bc1136e2349b7ac1471ec7801d8047312f950e30808796e33dcc45bdf4cc68b709d9a30c6ae3f2cc7371b4d47bd532b8cc59e09569e52f1d9a1b30cb0b91c2","ssdeep":"48:qBK1KVrwxo7yXr29OKJgbKA7cb2XYKBKJKeKbKaeEaSkeEnS0SSSWS8VSfHeEPeG:qxi8yK9RHN4MEBWWXIShv7JRhW4D/qi","tlshash":"4491ff7fb288f6580127ff02a4a15bddf42b23b0b2522a15f2d5523061b67d1bc29d7c","first_seen":"2024-05-30T05:56:49Z","last_seen":"2026-06-10T14:34:42.966261Z","times_seen":189,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/AG4q27Qm.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/AG4q27Qm.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=ZzsLgCAapgDluibl; __ddg10_=1757002263; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Hv1LgeB6iaHDkNDt; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg10_=1757002263; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: W/\"68b97987-56\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":86,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"639a5b26c9cde48dc9306092b038cab9","sha1":"6ebee6b859e75f4b3f347450b465e1ac66aee036","sha256":"66784c82da9106ccab65d77f7788c5aa7b28076ecc01947fb73072618f5ce745","sha512":"7ea88dd122048c6cacbbe57a6d30a5451dd6993b1be18cb8b3d50884fba6d7ee3b42b1831b8a285f9676a7cc0378d21f1a7ee998747a79e4b93e1ec418600e6d","ssdeep":"","tlshash":"11a0120a0454007d110408f46f1b945945a0282a13754bc0000046054b764ff560cc00","first_seen":"2025-09-04T13:25:01.071676Z","last_seen":"2025-09-04T16:11:26.327515Z","times_seen":3,"resource_available":true,"data":null}},"time_used":404,"timings":{"blocked":130,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/xteshH-L.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:04.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/xteshH-L.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=wE79pXPU0szUTi1j; __ddg10_=1757002264; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=5tR5LEGC0ElBJBfE; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg10_=1757002264; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-23dc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 3839\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":9180,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9179)","md5":"95ed2fe99795a5ba82332fdf147e7522","sha1":"6972e4dd0d2f70a8397a5d0aaf7f74586207deb9","sha256":"4e8345d9217bf5ff275fea384958a31ed922285d8220efccc88f78c1d014807a","sha512":"28d9bfade785288187295eee55455a6ae6619b13b7e4ea96c0d25b0d8bc9842848901170462ec92e88a8f6160bfa611924478f2977b28b42e7acb6009d423f17","ssdeep":"192:1qsxSEFu6ZufGq++k5q2IkZQ+tOWwYpsTctY0ipgNE7oVKRpnKFEN:1hZ8fK+kQ2IkDLwYpfYZplOKRpnv","tlshash":"3212eae473ac72aa59620dd12475481de434e6243b26e4d1f2ba34bab4d7c44b273f2d","first_seen":"2025-09-04T13:25:01.085457Z","last_seen":"2025-09-04T16:11:26.321235Z","times_seen":3,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/DG9TBfor.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:04.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/DG9TBfor.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=PKxTGiAhFHt9DIeu; __ddg10_=1757002264; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T09:31:27.571776Z","times_seen":17916434,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.47c60b61.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:04.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 31 Oct 2024 00:00:00 GMT","end":"Fri, 28 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:4F:FB:78:56:DC:20:7E:66:CC:9B:57:7F:92:C2:FA:50:69:C1:5B","sha256":"09:35:37:9C:E9:C9:26:27:7B:F2:E2:42:CA:82:EF:F1:2C:B2:B4:97:04:61:0B:FD:77:9A:15:4D:57:F4:76:D6"}}},"request":{"raw":"GET /frame.47c60b61.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 216082\r\ndate: Thu, 04 Sep 2025 16:08:58 GMT\r\nlast-modified: Thu, 04 Sep 2025 16:06:42 GMT\r\netag: \"5e6fe2c32610e5bf887546831460ea78\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\ncontent-encoding: gzip\r\nx-amz-version-id: OtkrKfg6drDW5zv8thNixTZXr9COt3Y5\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: j4UXk1dfnBphOYTpuQHb6jzxtNHrTkok2ljtYaScrtTF-FTbmUU8gQ==\r\nage: 127\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1027958,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65464)","md5":"c474524b2911c5d756732ad7758b9d56","sha1":"1de131f1e77da5030b9b7d399f061fc23b9b48ee","sha256":"9d6093d38d7894ceef6c46975934fcb489ef18e428d238ae41dbb9ea227182f1","sha512":"ac28388b3a7912364744e4c014bc28f7f73731bce0161693d12efc75210117d45fea1ad4a5bc3e5c56260a47672b67982a2bb5fdc793c7f32e0615fdc53f2c36","ssdeep":"6144:EwO3WSIXxZHI0eZXw9pmpGWi5vMz4/M4hApZyuxQBGwTAWqCtWB1dOwCaR1lvCVE:34CNYtV7SwRlZHkvMgu1KzSGyee1yY","tlshash":"ac25c5ccb2d2f06a43976175813f200bf33ea999b54e8450e669d8d1bcb858d9237f78","first_seen":"2025-09-04T16:11:26.328422Z","last_seen":"2025-09-04T16:11:26.328422Z","times_seen":1,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":53,"dns":40,"connect":1,"send":0,"wait":2,"receive":7,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch70x.life/api/v3/welcome-pack/get-welcome-packs-guest","fqdn":"api.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.81","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:05.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch70x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 23:42:51 GMT","end":"Mon, 10 Nov 2025 23:42:50 GMT"},"fingerprint":{"sha1":"12:3B:29:8B:88:86:0A:66:C7:E1:5B:6C:39:8B:8C:EB:E6:00:98:F1","sha256":"0A:E7:80:5D:1A:43:1D:27:01:8B:57:D4:CB:42:7E:EF:A3:B2:EF:AE:3F:BF:42:3B:92:7E:DD:2B:38:9F:5E:4A"}}},"request":{"raw":"GET /api/v3/welcome-pack/get-welcome-packs-guest HTTP/1.1\r\nHost: api.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.gwch70x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=DOhxfjJ4AdufelK8; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\n__ddg10_=1757002265; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\n__ddg1_=rIszYdUITtKqdx2iMZzR; Domain=.gwch70x.life; HttpOnly; Path=/; Expires=Fri, 04-Sep-2026 16:11:05 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Thu, 04 Sep 2025 16:11:09 GMT\r\naccess-control-allow-origin: https://www.gwch70x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 418234a6-dcf0-406a-8d53-96d272da5802\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10093,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9930421582d81d34edb9e0f3e9392fd1","sha1":"f1821c52e1d421bec011f885114f289e5b89f453","sha256":"8655f718bd00238e8c5cdc5614b16930b9ff6b0ac1addb45ced30c767dcc26b8","sha512":"fd060c3a4d61a625cbb5bdff878d2e049e3d8e61e504e5b9fec7f84fca926dc5f3242d7df4035b95f1b06b15fc5c84abf577309dd62f961cc96e2b111d600eaf","ssdeep":"192:2ACnA5CiLs8CN+Xj4CIMqcCbCB0eAv0mI7e3/rgd1YS:JCA5Cz8CEXj4CLqcCmMrgXN","tlshash":"58221fe288ea1b6c199a36e3da73bddd34e43189d160c733fc7e7607d300661aa51b16","first_seen":"2025-08-29T06:11:20.853498Z","last_seen":"2025-10-09T10:23:07.386478Z","times_seen":9,"resource_available":false,"data":null}},"time_used":3436,"timings":{"blocked":99,"dns":4,"connect":21,"send":0,"wait":3238,"receive":-1,"ssl":72},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"api.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.gist.build/web/latest/gist.min.js","fqdn":"code.gist.build","domain":"gist.build","tld":"build"},"ip":{"addr":"104.26.11.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:06.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"code.gist.build","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:12:05 GMT","end":"Sun, 23 Nov 2025 09:11:43 GMT"},"fingerprint":{"sha1":"8A:7D:9E:D2:01:92:34:63:8D:CB:A9:23:7C:0F:F0:DE:4E:7E:D3:A0","sha256":"BF:F5:6A:BD:EC:BC:38:BD:2E:2C:C6:37:C8:D0:9A:EF:C5:9A:83:8E:FF:04:E5:CF:04:66:CE:CD:63:15:5D:94"}}},"request":{"raw":"GET /web/latest/gist.min.js HTTP/1.1\r\nHost: code.gist.build\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 04 Sep 2025 16:11:06 GMT\r\nlocation: https://code.gist.build/web/3.16.7/gist.min.js\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FCHe7aQwpHal5cQOr%2BUhG9%2BxCNAW%2Bsl66hIugL5a6e%2Bj4unbCMYppkkg4tlyDFIejeoGxYPKmDtk5x9LJpshHWmLX%2FCnRdbjtPwuIKPy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 979ec2c49d9c8deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25933,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T09:31:27.571776Z","times_seen":17916434,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":18,"dns":0,"connect":2,"send":0,"wait":4,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.gist.build/web/3.16.7/gist.min.js","fqdn":"code.gist.build","domain":"gist.build","tld":"build"},"ip":{"addr":"104.26.11.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:06.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"code.gist.build","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:12:05 GMT","end":"Sun, 23 Nov 2025 09:11:43 GMT"},"fingerprint":{"sha1":"8A:7D:9E:D2:01:92:34:63:8D:CB:A9:23:7C:0F:F0:DE:4E:7E:D3:A0","sha256":"BF:F5:6A:BD:EC:BC:38:BD:2E:2C:C6:37:C8:D0:9A:EF:C5:9A:83:8E:FF:04:E5:CF:04:66:CE:CD:63:15:5D:94"}}},"request":{"raw":"GET /web/3.16.7/gist.min.js HTTP/1.1\r\nHost: code.gist.build\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.gwch70x.life/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 04 Sep 2025 16:11:06 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=20gOr2cYmD9sGeapOtr23VQihcpNAhCzZhQ8BgTEjZCZPlXn6aEW%2Fic3aKnkX9AJxlfCdkHM6BRy0Yj4qc%2FedyRYUnEbwQGBwegeOsjh\"}]}\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 18 Aug 2025 06:31:17 GMT\r\nx-rgw-object-type: Normal\r\netag: \"ee8bbeffdeba56ade33bc6c987866344\"\r\nx-amz-request-id: tx00000c0680a3fdb54cab3-0068a2c8bb-4f04b624-ams3b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-do-cdn-uuid: 03b5fb56-b915-4b88-b380-33c921f54627\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 2076\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 979ec2c4adba8deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":25933,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25933), with no line terminators","md5":"ee8bbeffdeba56ade33bc6c987866344","sha1":"d56b7d527585f5afc238eebcd70217c429a9ab75","sha256":"ff89c63e84b735494078826a7e7971de665dde157c464176bce004c97e8037f4","sha512":"7f19b24b315eba3e058f52e802539709bc8b4ef5b61284d3c43e9f26e0cf9d4f77397ee1acb25937aa3be6345941bebe4ed7d48423ca1cb0a391a7b7f95e8e29","ssdeep":"768:E4072U1yf1F6qaEyf/iLzu1co/btwckxckIYyv38S8r/f98NRt:bw1y9paEyUu19DtlYyv38S8jfE","tlshash":"14c20a4b716a393d83d311d7bd7a3006633b7555b849c041b26ce8872f294cf6663f9a","first_seen":"2025-08-19T01:12:29.193244Z","last_seen":"2025-09-23T07:24:51.256389Z","times_seen":217,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/DdC22MeW.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/DdC22MeW.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=ZzsLgCAapgDluibl; __ddg10_=1757002263; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=umu1kjLclXIuxYGc; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg10_=1757002263; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-15051\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86097,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"08bcc3eb1c3890f5487f1a0dde0764d9","sha1":"ae790f9c122454b6a82e39efc9c50e3d4dd38d4d","sha256":"6dd0a52758046f7d5fa996ce2ccf0cdb346cb6a9c588938823f933fd268c8672","sha512":"c96fda5f79f082e8b68409c9dae301d6ba04a0970004691bec26155b58135c76656accd8ebbe5d885b700a3fe8c96a95a3cd16bc2506295883c93abfce98dce7","ssdeep":"1536:RK6l28I8DZzkXhvPS5uLEiMAa73hBlxvHB+CIdzkVXiA6w+EV93mBE09:U6nCvPS5uZS8a9Q","tlshash":"7c832989f224b17782f75ada8376c20172a14984b809d4e4b0ed4d7b496e95c03afffc","first_seen":"2025-09-04T13:25:01.077495Z","last_seen":"2025-09-04T16:11:26.332965Z","times_seen":3,"resource_available":true,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch70x.life/geo_ip","fqdn":"api.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.81","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:05.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch70x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 23:42:51 GMT","end":"Mon, 10 Nov 2025 23:42:50 GMT"},"fingerprint":{"sha1":"12:3B:29:8B:88:86:0A:66:C7:E1:5B:6C:39:8B:8C:EB:E6:00:98:F1","sha256":"0A:E7:80:5D:1A:43:1D:27:01:8B:57:D4:CB:42:7E:EF:A3:B2:EF:AE:3F:BF:42:3B:92:7E:DD:2B:38:9F:5E:4A"}}},"request":{"raw":"GET /geo_ip HTTP/1.1\r\nHost: api.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.gwch70x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=JlXpqV89Fk94vKcD; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\n__ddg10_=1757002265; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\n__ddg1_=uHMYO9RpO544sC5FQy9V; Domain=.gwch70x.life; HttpOnly; Path=/; Expires=Fri, 04-Sep-2026 16:11:05 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Thu, 04 Sep 2025 16:11:08 GMT\r\naccess-control-allow-origin: https://www.gwch70x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 52fd9640-55cb-41cd-a4c9-3d6e23e254dc\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-fastcgi-cache: BYPASS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bbafd4518d91b4ec04a45a5e17573247","sha1":"b90b618fb29a244c561b535ae9a4f270aaf3862e","sha256":"d4b6c1e00f94659a0050ca0ab76580eae50cb81f50029909c447f3bbb71e8aa5","sha512":"7969a584e3c04c6cc4fdb36be9dabfeecedcf0f05ed3d559a74e741afe12a5994d60fd2f0c97b33ed330cba79fa2f58fe6ac13b8e116798604a40359fb357a55","ssdeep":"","tlshash":"9ad0a72935799d2e0c3dc280852da39767153416d28e129bc1a24f21c0c87ee2060557","first_seen":"2025-08-09T06:39:58.993804Z","last_seen":"2025-09-04T16:11:26.333967Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2774,"timings":{"blocked":125,"dns":0,"connect":0,"send":0,"wait":2542,"receive":0,"ssl":107},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"api.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/Home.S7ve62Bv.css","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/Home.S7ve62Bv.css HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=dGA1yhZSIcJwCQMb; __ddg10_=1757002262; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PQwast0ovJECM3GJ; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg10_=1757002263; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-7a7e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (31357)","md5":"15d04beee9f2dc778bf00b274c16667d","sha1":"71264535fadb12e8749357740c7fd4708feca3cb","sha256":"b4968b7a22acfbc7df6a68ed5dbf482c87a1f8793f95c0fe30cd6a7f1be61daf","sha512":"b1e5e64fc352a5dc45be892d388d86fcdbc093a9b63a4d210c444236afc82a6e63c06aa22bb340fd43ca6580bd918aeefaf8ddf1de77d6dcb10681a7c32426bc","ssdeep":"384:WT6aeLqghWiMZWyThd9Tk7R3uIRBksYCsk7JWGCIEw5+22xI:W2aeLqghryTn9Q7usYCxl2xI","tlshash":"50e2a731620c206d71b7ea75b9a2694c716cfa17eb1307b8d6d4742cc8e7642363bacc","first_seen":"2025-09-04T13:25:01.074477Z","last_seen":"2025-09-04T16:11:26.334968Z","times_seen":3,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/DnjNk7Rc.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/DnjNk7Rc.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=ZzsLgCAapgDluibl; __ddg10_=1757002263; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NG4eoKD5Glw3SWPA; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg10_=1757002263; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-8d08\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36104,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (36095)","md5":"6932e67e2a877d0e6c31127f8621e3a0","sha1":"1ce82681e36c9482e73f49b7c7d580e4a01d684c","sha256":"688d616fc288fc8eb54a4e6b1fcf8373f9ad129160ab498c85925634300de549","sha512":"3c41d92922841565c81960e28b19fcbb94aa53774db93a07e3eb106e564be3adade38d62cf61b2a86e2150e802e66a781f4a1f079cf1be3401fdd9e1c9c01ba7","ssdeep":"768:2i4xc5uvPlv2NJ8QBFZYlAI/+VRDWLOFtTqcSagFVXsqYNNMo1MoY4b17JsUWLik:s3RuZtRwcSaSV1Iv+oA","tlshash":"99f2f708e4199d3ed9b75d9878540811b22d2fdfd0414d72a1fc9d186bbbd3823aebac","first_seen":"2025-09-04T13:25:01.091457Z","last_seen":"2025-09-04T16:11:26.336028Z","times_seen":3,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch70x.life/api/v2/tracking/events","fqdn":"api.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.81","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:05.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch70x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 23:42:51 GMT","end":"Mon, 10 Nov 2025 23:42:50 GMT"},"fingerprint":{"sha1":"12:3B:29:8B:88:86:0A:66:C7:E1:5B:6C:39:8B:8C:EB:E6:00:98:F1","sha256":"0A:E7:80:5D:1A:43:1D:27:01:8B:57:D4:CB:42:7E:EF:A3:B2:EF:AE:3F:BF:42:3B:92:7E:DD:2B:38:9F:5E:4A"}}},"request":{"raw":"OPTIONS /api/v2/tracking/events HTTP/1.1\r\nHost: api.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: PUT\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.gwch70x.life/\r\nOrigin: https://www.gwch70x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2Vas3zMIiOCNOx2F; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\n__ddg10_=1757002265; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\n__ddg1_=4dSUNPGLNg9fAcI3TQIX; Domain=.gwch70x.life; HttpOnly; Path=/; Expires=Fri, 04-Sep-2026 16:11:05 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Thu, 04 Sep 2025 16:11:07 GMT\r\naccess-control-allow-origin: https://www.gwch70x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 86400\r\nx-request-id: bfcfaeb9-e74a-4579-a017-5e9ad31b5559\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T09:31:27.571776Z","times_seen":17916434,"resource_available":true,"data":null}},"time_used":2496,"timings":{"blocked":184,"dns":43,"connect":22,"send":0,"wait":2128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"api.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/builds/meta/6e0b6b57-fde6-4474-b8eb-ae01975ce6df.json","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:05.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/builds/meta/6e0b6b57-fde6-4474-b8eb-ae01975ce6df.json HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.gwch70x.life/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=XAWgxBRgMjPxXGnx; __ddg10_=1757002265; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Ky26dgSyIZbVbbl3; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\n__ddg10_=1757002265; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:05 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: W/\"68b97987-8b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":139,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"259c8d082165ebf1ae0093fcd11802e8","sha1":"642eca3789ec5c47a8f572039d9310a8cc2b6c37","sha256":"786e6a4fef5bd789ff710517889ab8d0f086bb49a83dcafeec1f02344d09178c","sha512":"c7ef1240c06309b8a4bf98df349ecf048bc34d4b4770cfbcb53bd8fba94314f30d42e446dad1186b78893e88764a55577c5f0a5f3b07266e22a7cfb640a163b0","ssdeep":"","tlshash":"46c02bf704420093bde00c90c8002966c1cb5273503c1cb6c9740e3e44ac19db028007","first_seen":"2025-09-04T16:11:26.336892Z","last_seen":"2025-09-04T16:11:26.336892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/flags/?v=2\u0026config=true","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"54.242.14.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:05.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 15 Dec 2024 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:07:A5:B7:4A:00:EA:45:09:50:EF:4B:44:63:83:38:E2:97:F8:13","sha256":"6D:1D:1C:48:82:61:EB:EF:E4:D8:57:9A:EA:F6:ED:0A:07:BB:6C:17:71:6F:A3:F1:88:57:DC:E3:A4:E8:44:96"}}},"request":{"raw":"OPTIONS /flags/?v=2\u0026config=true HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.gwch70x.life/\r\nOrigin: https://www.gwch70x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 04 Sep 2025 16:11:06 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://www.gwch70x.life\r\naccess-control-allow-credentials: true\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: GET,POST,OPTIONS,HEAD\r\naccess-control-allow-headers: content-type\r\nx-envoy-upstream-service-time: 0\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T09:31:27.571776Z","times_seen":17916434,"resource_available":true,"data":null}},"time_used":827,"timings":{"blocked":366,"dns":38,"connect":94,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch70x.life/middleware/mirror","fqdn":"api.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.81","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:09.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch70x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 23:42:51 GMT","end":"Mon, 10 Nov 2025 23:42:50 GMT"},"fingerprint":{"sha1":"12:3B:29:8B:88:86:0A:66:C7:E1:5B:6C:39:8B:8C:EB:E6:00:98:F1","sha256":"0A:E7:80:5D:1A:43:1D:27:01:8B:57:D4:CB:42:7E:EF:A3:B2:EF:AE:3F:BF:42:3B:92:7E:DD:2B:38:9F:5E:4A"}}},"request":{"raw":"POST /middleware/mirror HTTP/1.1\r\nHost: api.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nRegion: RU\r\nContent-Length: 29\r\nOrigin: https://www.gwch70x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=AhScYdmXsFSqXnhi; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:09 GMT\n__ddg10_=1757002269; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:09 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:09 GMT\n__ddg1_=Ec2VkYoRw73snCgZRrPl; Domain=.gwch70x.life; HttpOnly; Path=/; Expires=Fri, 04-Sep-2026 16:11:09 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Thu, 04 Sep 2025 16:11:09 GMT\r\naccess-control-allow-origin: https://www.gwch70x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 48e95fe1-223c-4b97-a087-1d9b4c9b3e67\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"28ec1eee5f4049e3c4f2135069c1d2c8","sha1":"3505519507ca1c2a089c46e100b80408ca278421","sha256":"edc48cd3b0bc4fa7ba23aad40b8508a17d370ca38be174bae2a2f64634e65a2b","sha512":"f71618e40ebaa14ab6d523a2341258c0da264b545388f8fffd14c31c64b35f94b21eb633316c4d77afcd864aade1db588ef6387ee0c4787e6f7770db0abc1183","ssdeep":"","tlshash":"f06000020000002088800a000220aa302a200a20080a0080000c30200020080800a002","first_seen":"2023-04-06T19:00:00Z","last_seen":"2026-08-16T08:42:05.084823Z","times_seen":13224,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"api.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/js/pwa-load-event.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:02.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /js/pwa-load-event.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=G0C2CLt5YCi2Fluj; __ddg10_=1757002249; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fHc191qVr8hpmqsf; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\n__ddg10_=1757002262; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: W/\"68b97987-177\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":375,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"f463b05f25296c1e185cc82087291f6e","sha1":"d15dfa009eaeeaaf36af83b20ace25714adbc583","sha256":"3f5bcf295bac81715b4413d640843ee19600f6a17c96503038c6a4193c331865","sha512":"5ecd0baa189383e24afadcbe391266fac63cdcdcb7da68ab1371168fae81f05f0140b4dcd86bc4cc59f4ebb3f5949e94b302f05de00942886fe3060436ae03bc","ssdeep":"","tlshash":"64e02b7483fc55b808e182b75f47bb15116721a77068d990c1871906f8d148780a2fd2","first_seen":"2024-08-19T15:07:41.99372Z","last_seen":"2026-04-15T02:03:05.836861Z","times_seen":94,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/img/logo.svg","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:02.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=G0C2CLt5YCi2Fluj; __ddg10_=1757002249; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=W7B5JC4HJYNcpVLt; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\n__ddg10_=1757002262; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:02 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: W/\"68b97987-5f5\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1525,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"90c2e8c0d206d5eaeac1b5660a865926","sha1":"fe0386bf75d653fbacf2638c0dfe63544acc878b","sha256":"68da6ba7e3c1d4c39c888f4cfef2e3090ae95b091ef2b0bc1e6b638a3f2e523d","sha512":"1912a93b523c285d3ea1da9831b45240b5a6e5ddaacb2922b9b35c346beca192b37ce9881b7120fd215d1ff7087b732df496026f5bb49ae424ea1c27a0433545","ssdeep":"","tlshash":"c0315ee2b3a9d38191080f00834e7864032f15e9a710818ddbd76ba579b526fcc3d8d0","first_seen":"2024-12-10T17:19:34.101377Z","last_seen":"2026-05-26T01:50:54.168263Z","times_seen":69,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/DlAUqK2U.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/DlAUqK2U.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=ZzsLgCAapgDluibl; __ddg10_=1757002263; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7YHUfCxDIYnw3CnL; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg10_=1757002263; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: W/\"68b97987-5b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-08-16T09:26:31.875352Z","times_seen":25557,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.136ccc3e.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:04.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 31 Oct 2024 00:00:00 GMT","end":"Fri, 28 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:4F:FB:78:56:DC:20:7E:66:CC:9B:57:7F:92:C2:FA:50:69:C1:5B","sha256":"09:35:37:9C:E9:C9:26:27:7B:F2:E2:42:CA:82:EF:F1:2C:B2:B4:97:04:61:0B:FD:77:9A:15:4D:57:F4:76:D6"}}},"request":{"raw":"GET /vendor.136ccc3e.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 212176\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Wed, 27 Aug 2025 16:41:57 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: r0H1fdwFeLlF_kPyMONCDDBoZdb59MLL\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Thu, 04 Sep 2025 15:40:52 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"bb76b415fd7e0703e73712883fcc0221\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nage: 1813\r\nx-amz-cf-id: LAlX_iPh0KKmYnzLC8hoBAiHsPZgY3dr94Pw7pasHWRbT8kJfe1E6w==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":684253,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65463)","md5":"103a089944d2295463b2f637a2fd1dac","sha1":"52544e4efd975b53d49b6fdd733fc294ef6c7018","sha256":"f23b1bd86b485b4f38f1671e46398627ea21518aed0b437be2d196c5c0c1880c","sha512":"8c49df15b440181ecf2af04709b52fa4ad199c22b7f10a145c7a883cb8a3184ad518ab4a6f8293a7cbd19ce16cf6aeef854a7c89b26658d103ea4b46c3d2c25d","ssdeep":"6144:pxE8LlzpXe7RvofOq1BrFZGEkYg+kfFd+oNEf9upyuAhOLtaX:HE8LlzpORwfH9kYqfFUkEFup/M","tlshash":"bce43bdc79d1f0a207f352f6807f140bf27a1a69680c8490f765d8c968b994e9237f6e","first_seen":"2025-08-21T12:18:11.824347Z","last_seen":"2025-09-09T08:35:33.568189Z","times_seen":449,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":245,"dns":5,"connect":0,"send":0,"wait":4,"receive":8,"ssl":202},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/ns.html?id=GTM-KN757LMM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:05.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:21:11 GMT","end":"Mon, 03 Nov 2025 19:21:10 GMT"},"fingerprint":{"sha1":"07:D4:DA:62:23:19:DE:C6:08:D3:6A:78:15:9D:A5:07:00:39:48:12","sha256":"B1:A9:08:B9:66:58:87:B4:23:94:8F:68:98:E7:F0:EE:8F:DA:A7:88:CC:7A:04:0E:80:74:B0:58:9E:A9:3E:D5"}}},"request":{"raw":"GET /ns.html?id=GTM-KN757LMM HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: *\r\ndate: Thu, 04 Sep 2025 16:11:05 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1396:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1396:0\r\nreport-to: {\"group\":\"ascgcycc:1396:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1396:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 92\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":268,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"4aab75dcb6382c39dae33c9a1b45e608","sha1":"a8e4758330308a44ca74242cb17591e6c6599483","sha256":"d818a014761cd9516d1b3e296946e960d91f4c917bf42a808e67323a8b062da8","sha512":"0fe058db29f10d9f41db7b0cc9cbe8e403b36b07fa7a99b9699ce7cf60748d248d8a79b1a56f4bb006d507059fbe8ab73ce71b9a44ee095a6da8dea54da625ab","ssdeep":"","tlshash":"2fd09b4fd0013404d92052b05cc2776414516544f5e58d536582f4355d44755cd53158","first_seen":"2023-04-05T07:30:22Z","last_seen":"2026-08-16T06:52:52.752902Z","times_seen":5102,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":83,"dns":0,"connect":8,"send":0,"wait":21,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/ext/cdp-customer/v1/p","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:06.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"POST /ext/cdp-customer/v1/p HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.gwch70x.life/\r\nContent-Type: text/plain\r\nContent-Length: 710\r\nOrigin: https://www.gwch70x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=Urn41RmGsgcAA8um; __ddg10_=1757002265; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.287743012.1757002266; _ga_VRDLWS0SHC=GS2.1.s1757002266$o1$g0$t1757002266$j60$l0$h0; _ga=GA1.1.1274475123.1757002266; ajs_anonymous_id=153469b8-2f6e-4ae2-9a8a-74175003c1b8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=H1k4Fb6gvt0Gnnf7; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:06 GMT\n__ddg10_=1757002266; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:06 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:06 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:06 GMT\r\ncontent-type: application/json\r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nservice-worker-allowed: off\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-16T09:25:25.811432Z","times_seen":182690,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch70x.life/api/v2/tracking/events","fqdn":"api.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.81","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:08.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch70x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 23:42:51 GMT","end":"Mon, 10 Nov 2025 23:42:50 GMT"},"fingerprint":{"sha1":"12:3B:29:8B:88:86:0A:66:C7:E1:5B:6C:39:8B:8C:EB:E6:00:98:F1","sha256":"0A:E7:80:5D:1A:43:1D:27:01:8B:57:D4:CB:42:7E:EF:A3:B2:EF:AE:3F:BF:42:3B:92:7E:DD:2B:38:9F:5E:4A"}}},"request":{"raw":"PUT /api/v2/tracking/events HTTP/1.1\r\nHost: api.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 78\r\nOrigin: https://www.gwch70x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"PUT"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=29YE0jA2n0vJ6T7B; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:08 GMT\n__ddg10_=1757002268; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:08 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:08 GMT\n__ddg1_=J7gdY5oI0McGx7mfGw3d; Domain=.gwch70x.life; HttpOnly; Path=/; Expires=Fri, 04-Sep-2026 16:11:08 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ndate: Thu, 04 Sep 2025 16:11:09 GMT\r\naccess-control-allow-origin: https://www.gwch70x.life\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\nx-request-id: 72b3f8d1-8f5e-4886-afc0-bb230cef6f4e\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-16T09:25:25.811432Z","times_seen":182690,"resource_available":false,"data":null}},"time_used":1238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"api.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/default.Bi3uqo3_.css","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:09.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/default.Bi3uqo3_.css HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=bV3kUQUdP6wWm5ur; __ddg10_=1757002267; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.287743012.1757002266; _ga_VRDLWS0SHC=GS2.1.s1757002266$o1$g0$t1757002266$j60$l0$h0; _ga=GA1.1.1274475123.1757002266; ajs_anonymous_id=153469b8-2f6e-4ae2-9a8a-74175003c1b8; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJmNjY1NDNkNi0xMjBmLTRlY2ItODZhNS0yNjZjNTdkYjVmZGIlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU3MDAyMjY2NTI0JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NzAwMjI2NjUzMCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; AMP_MKTG_15377f970f=JTdCJTdE; welcomePackTimestamp=1757607065\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=q9UYWO5laFQUht9A; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:09 GMT\n__ddg10_=1757002269; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:09 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:09 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-b495\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 5\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 7532\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46229,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (46228)","md5":"c99bad756e77cdb464b3a9c015fa9d77","sha1":"a91cdf3fa878195c0f06c0fb71101ef9bd85bebb","sha256":"7c38c1efdc8530cb6ed1162100f26571685b49330b5e9e55787e8231756683e4","sha512":"30fdd98e99e883f5632cb01f8a586da89719e8fbee4672a2678763104b4024e669fce51c2e53a085417d8e411cae05bc8ed332ecab84c6671a1cab755099458c","ssdeep":"384:G0jQN6Dc0cWJ7Hv0DyikxbMv0Dyi6Tt3JnymteZFcy/xqFnMRfv63ji:LrtHvkQivkk6PDwSV","tlshash":"8323a821761d203db53bdda6b490169e203af307d5238faeee583629cdc71d72b25398","first_seen":"2025-09-04T16:11:26.346174Z","last_seen":"2025-09-04T16:11:26.346174Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/DP5Ff1Si.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:02.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/DP5Ff1Si.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=G0C2CLt5YCi2Fluj; __ddg10_=1757002249; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=URItGt9NAfRYbzQ6; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\n__ddg10_=1757002262; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-76488\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":484488,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (47580)","md5":"4af963b580fa40b3fe3e0389b0c34049","sha1":"e2ce8a83352b251395deaf758b0b4d7c055af582","sha256":"ce0ad4ff994426e83d407fef173f7fecbd0cb2381fad17d1f6f70b63d6ef77aa","sha512":"a3ce2dd160a1d0663458a1f1d9db604209bc4f408590a10c7f06e5781458e81a15311658659da06cb891b35fef860f3adaa7b63d139984203ef5b44b14103b82","ssdeep":"6144:4VY31DWkAnE4GrcwQpRoysvWXQfK5xf4wJPTOMnFmOCWOwDWjmbvnNUDfgKnYAHD:4CYkAEVQLoyifKzf4sSmFyWOwDR84KnF","tlshash":"61a45ad971d6b02213e619e4907b0106f3392a54384ed4e8f16daeeb3d7680a91b7f7c","first_seen":"2025-09-04T13:25:01.0554Z","last_seen":"2025-09-04T16:11:26.348922Z","times_seen":3,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gx.webim.ru/button.php","fqdn":"gx.webim.ru","domain":"webim.ru","tld":"ru"},"ip":{"addr":"91.142.87.234","port":443,"asn":41722,"as":"Miran Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:02.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webim.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 21 Jan 2025 21:48:29 GMT","end":"Sun, 22 Feb 2026 21:48:28 GMT"},"fingerprint":{"sha1":"C9:8F:2B:90:8F:AA:A2:41:5B:E2:A2:52:7D:CB:E8:06:B8:A0:74:B2","sha256":"A4:69:EC:34:42:8B:01:37:A2:0E:C6:34:5F:3A:A3:2C:80:A3:01:0A:B8:13:8B:33:B9:87:E0:C2:5A:16:AB:59"}}},"request":{"raw":"GET /button.php HTTP/1.1\r\nHost: gx.webim.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 04 Sep 2025 16:11:02 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\nX-Webim-Version: 10.7.124\r\nEtag: \"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a\"\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-08-16T09:27:48.071588Z","times_seen":96868,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":103,"dns":0,"connect":32,"send":0,"wait":33,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/DIUZ9vJL.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/DIUZ9vJL.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=ZzsLgCAapgDluibl; __ddg10_=1757002263; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=LlzEN5ViSqZpmCSV; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg10_=1757002263; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-142c\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5164,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5163)","md5":"868c50f9220f308b7bc94e029e292bf6","sha1":"820a01d436fb4f4d146e830444ed00b7453f5886","sha256":"5e2c1bbef05a4c8e4e05a0bb1116b31ed190bb16f2a5ab3f576ebed15e4a809a","sha512":"878a4b1945dfe36c11c703c09cf8427704746ac228ee66b120233cf4961936eb8a695030a6ce61c252d22d970ae862be809b70a1bafad46a08fd1be3c121488a","ssdeep":"96:oekq53hKMoKMj1W3FdeF31f5HnPx1oRstVCBR4Ir8Dtgjiby+qUECPRv5:oW3BY1W3eFFvmQVCkIgJbtD","tlshash":"10b1b7e4b0d9e0dbbb764fd1c032225260076ba57434e0d0f27aad73215be58a562b3f","first_seen":"2025-09-04T13:25:01.088084Z","last_seen":"2025-09-04T16:11:26.35249Z","times_seen":3,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/CFU304S8.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/CFU304S8.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=ZzsLgCAapgDluibl; __ddg10_=1757002263; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=xaZg4PRv4JdAMvCn; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg10_=1757002264; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: W/\"68b97987-78\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":120,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"65b0cca89e40818f39fdd7753db6d142","sha1":"24e169a25a2e5e795d2ba4918ad600ab939bc23a","sha256":"261a0d9b3884cb4797de2dd31290199dbcec4f295a6ca9ee2c3b48ab9d9651ce","sha512":"e4c57b7230da955929c01aa05a22c6039a4ab395d6480587e21169106ce56e84aa99238c37d03c5944a72a6c799d55cc072ee59b5e498caf41fd1f6e021b43be","ssdeep":"","tlshash":"53b092d6728a3ce12602b810a15b80b4a131e6240b8a47208026f08739724a48a52e38","first_seen":"2024-12-07T17:14:43.577967Z","last_seen":"2026-08-04T09:28:00.148891Z","times_seen":102,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":193,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/DXyKtzhm.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/DXyKtzhm.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=ZzsLgCAapgDluibl; __ddg10_=1757002263; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=wE79pXPU0szUTi1j; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg10_=1757002264; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-405\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1029,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1028)","md5":"774cedca2458be86699b1dadec4de6a4","sha1":"8df155284b5d86e0a526adfe1551e71dff94d3aa","sha256":"1b1c4bfa32e4bc1d4e363204c042dbb8cf2000d16d49f0807accfbb73152ad83","sha512":"86b2303b92988a4752b1fadedae16f065c7a3b378efa9bca7e9823561220bc910ad4ea8219650175e977005b91f85a86231ad7c54d6eb7801f6aced1c9290a82","ssdeep":"","tlshash":"3d110e2bfa0e0b2663331c764aa931e6cf650b8b2c7984c43c54df261237c83e5a6f04","first_seen":"2025-09-04T13:25:01.048284Z","last_seen":"2025-09-04T16:11:26.354288Z","times_seen":3,"resource_available":true,"data":null}},"time_used":674,"timings":{"blocked":376,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KN757LMM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:05.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:21:11 GMT","end":"Mon, 03 Nov 2025 19:21:10 GMT"},"fingerprint":{"sha1":"07:D4:DA:62:23:19:DE:C6:08:D3:6A:78:15:9D:A5:07:00:39:48:12","sha256":"B1:A9:08:B9:66:58:87:B4:23:94:8F:68:98:E7:F0:EE:8F:DA:A7:88:CC:7A:04:0E:80:74:B0:58:9E:A9:3E:D5"}}},"request":{"raw":"GET /gtm.js?id=GTM-KN757LMM HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 04 Sep 2025 16:11:05 GMT\r\nexpires: Thu, 04 Sep 2025 16:11:05 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 04 Sep 2025 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1348:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1348:0\r\nreport-to: {\"group\":\"ascgcycc:1348:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1348:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 129479\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":382738,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9775)","md5":"8fbbe083dd07f4f68debb79431daea91","sha1":"86f9225faee9996d5b29007da81b480a3e17284c","sha256":"e106f2a0af04a41c8efd8500ed2fc67f3db4dc5eafb73f047f2dcb89c39355e4","sha512":"9c2e96b28243d10bfbf6f0f3729794dd1b4b604a0b94c97bd386e9f013cb82387ef93e726edeee6050d84356c94919ff6b0d363e96eaefbe82205dcd777f704b","ssdeep":"6144:Qe9wW5JhyAJr2GCHgG1RBdIM8WAQ42UIhqM9Az/:QewWThyAJr2GCHgoBVpO7","tlshash":"4b8429cdb3c6742683a3a478403f114ba17b6aa2f84cd895f186dcd42e74a9a4177f7c","first_seen":"2025-09-04T16:11:26.355088Z","last_seen":"2025-09-04T16:11:26.355088Z","times_seen":1,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":63,"dns":4,"connect":8,"send":0,"wait":28,"receive":20,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/flags/?v=2\u0026config=true","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"54.242.14.170","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:06.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 15 Dec 2024 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:07:A5:B7:4A:00:EA:45:09:50:EF:4B:44:63:83:38:E2:97:F8:13","sha256":"6D:1D:1C:48:82:61:EB:EF:E4:D8:57:9A:EA:F6:ED:0A:07:BB:6C:17:71:6F:A3:F1:88:57:DC:E3:A4:E8:44:96"}}},"request":{"raw":"POST /flags/?v=2\u0026config=true HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.gwch70x.life/\r\nContent-Type: application/json\r\nContent-Length: 228\r\nOrigin: https://www.gwch70x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 04 Sep 2025 16:11:06 GMT\r\ncontent-type: application/json\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://www.gwch70x.life\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 1\r\ncontent-encoding: gzip\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":642,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"00049e63fcb1817ffd6e8d327bec848e","sha1":"7044ab4ba49f279b84555277f444e6798e7cd204","sha256":"9341a2460a6b1877d9657e089b4e5d8c8a67fedc6e3b5197b94823725e02d7c3","sha512":"cc0b0cc884b0968effa3a72f7382c2560e595fc42d27817e2f5fdd5f9d9202f0719afd06d471e9c9b2016381200295386d1f37e24abd6e6fb64de6769ed80113","ssdeep":"","tlshash":"faf0a25df560157d8c149715d2d659148ffb06273254786ce0ac409571db4c996a6a03","first_seen":"2025-09-04T16:11:26.357157Z","last_seen":"2025-09-04T16:11:26.357157Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/ext/cdp-customer//v1/analytics-js/inAppPlugin.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:06.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /ext/cdp-customer//v1/analytics-js/inAppPlugin.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=WGlehTicUfveEtWr; __ddg10_=1757002266; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.287743012.1757002266; _ga_VRDLWS0SHC=GS2.1.s1757002266$o1$g0$t1757002266$j60$l0$h0; _ga=GA1.1.1274475123.1757002266\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9xQPcdiiUtbc9kW2; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:06 GMT\n__ddg10_=1757002266; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:06 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:06 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:06 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\netag: W/ecae41c11d7a4fa8113a98ea436f432c\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: public,max-age=300,immutable, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nservice-worker-allowed: off\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5854,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5854), with no line terminators","md5":"9d809228dc97f0373ccbef8c5e4d6f36","sha1":"3e737a42cfc5a0e28eb48af1ee35ddf1261a08f0","sha256":"d9505a91f86c817da1c30c03472c862b761d0f0050a563edce2873a8e30a64f9","sha512":"63161ae066f36ecdbfe16b8f3762416ba5d8d73d5158d15516ff5a43cc9ff49fd351fb4d0fb33434ae32a1da2f5656f6f89b84eb13215c7cefb1e20ba36de675","ssdeep":"96:frOeJ1t6SzUP0w3Gt+buZolWdTW2ELyWfQWYrZ6y77vGEKQDCMZa3E2byhApAa7e:3kL2IbuZolWdCZyWnNEKQK7bWApA1d","tlshash":"71c11e9df393e82d01f3ea6de47b6033913e77036058b521e017cac1696878d6613bba","first_seen":"2025-08-23T09:38:09.641742Z","last_seen":"2025-09-04T20:54:35.092061Z","times_seen":32,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gwch70x.life/middleware/mirror","fqdn":"api.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.81","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:08.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gwch70x.life","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 23:42:51 GMT","end":"Mon, 10 Nov 2025 23:42:50 GMT"},"fingerprint":{"sha1":"12:3B:29:8B:88:86:0A:66:C7:E1:5B:6C:39:8B:8C:EB:E6:00:98:F1","sha256":"0A:E7:80:5D:1A:43:1D:27:01:8B:57:D4:CB:42:7E:EF:A3:B2:EF:AE:3F:BF:42:3B:92:7E:DD:2B:38:9F:5E:4A"}}},"request":{"raw":"OPTIONS /middleware/mirror HTTP/1.1\r\nHost: api.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,region\r\nReferer: https://www.gwch70x.life/\r\nOrigin: https://www.gwch70x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=50BQ27o2D3ggx0yY; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:08 GMT\n__ddg10_=1757002268; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:08 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:08 GMT\n__ddg1_=1F63gh5zI8e4quGaz0Lr; Domain=.gwch70x.life; HttpOnly; Path=/; Expires=Fri, 04-Sep-2026 16:11:08 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Thu, 04 Sep 2025 16:11:09 GMT\r\naccess-control-allow-origin: https://www.gwch70x.life\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type,region\r\naccess-control-max-age: 86400\r\nx-request-id: 3e237a77-1e0a-404a-82d9-03577e8cc0c5\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T09:31:27.571776Z","times_seen":17916434,"resource_available":true,"data":null}},"time_used":819,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":819,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"api.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-04T16:10:48.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=G0C2CLt5YCi2Fluj; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:30:49 GMT\n__ddg10_=1757002249; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:30:49 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:30:49 GMT\n__ddg1_=YLRAYN1NOKJeRGRW6RJw; Domain=.gwch70x.life; HttpOnly; Path=/; Expires=Fri, 04-Sep-2026 16:10:49 GMT\ni18n_redirected=en; Path=/; Expires=Fri, 04 Sep 2026 16:10:51 GMT; SameSite=Lax\nuserVersion=45.10.240.13; Max-Age=86400; Path=/\nuserBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; Max-Age=86400; Path=/\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:01 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-powered-by: Nuxt\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":383774,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65063)","md5":"2a0acd7a89e741c1da796192f1712c7a","sha1":"9ab94caafb053c33762f7df26b3e26e49e58ee5f","sha256":"cafdb9ef28f8e4fad6055e2166266884a8ccbbb407ec058d1623eb6a166da32d","sha512":"9e88ae4def7a37b251ac308d1422bcb63040dc21523c92b8009742a96adb3c9b4c3967b8828fd739f808975a4de26c76f53cf7449e52bb2ceb57178570d21b50","ssdeep":"3072:7JYXSbqAfuybg1s705YOwfwONtsEb2FRdbUH7xB:HbqAfB705YOwo4tsEb2FRq7z","tlshash":"1884d5c32535382e615fd457f5a1ee94f434a816e31367ebf0e62a25cbc2d8a1273938","first_seen":"2025-09-04T16:11:26.36064Z","last_seen":"2025-09-04T16:11:26.36064Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13243,"timings":{"blocked":103,"dns":1,"connect":19,"send":0,"wait":13038,"receive":0,"ssl":79},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-04T16:10:52Z","timestamp":1757002252,"ip_dst":{"addr":"186.2.165.80","port":80,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"ip_src":{"addr":"172.18.0.16","port":55112,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.life Domain","source":"{\"timestamp\":\"2025-09-04T16:10:52.039868+0000\",\"flow_id\":1582466641633802,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":55112,\"dest_ip\":\"186.2.165.80\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027876,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.life Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.gwch70x.life\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.gwch70x.life/\",\"length\":568},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":553,\"bytes_toclient\":1323,\"start\":\"2025-09-04T16:10:51.926218+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/Loading.Bk2PI8_1.css","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/Loading.Bk2PI8_1.css HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=dGA1yhZSIcJwCQMb; __ddg10_=1757002262; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=I6tYU68t2m5qgTLK; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg10_=1757002263; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: W/\"68b97987-ee\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":238,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"972ff87ed4252206f8f9d733a46cb522","sha1":"9998cd5afd3ccbd6aaa949b68fdf49bf05224cdb","sha256":"5ae8f77f7cb1ee4548d819e6f03fe4e3fbfcc50845c8ee77480d3f08a86de00b","sha512":"1dd31797719cb3c45a9694f1e7dc1bafddbe7da579d78d6aba797d4599ac185310493de67489970b64846b0d612979cae66138ad87b50721b24adbb78cfcc180","ssdeep":"","tlshash":"51d0a7d5864444530f670a3311cc5d59c8b02ec2c8be1c1eb399d1aa03492a933b7e69","first_seen":"2024-05-07T05:56:59Z","last_seen":"2026-02-25T19:06:54.055809Z","times_seen":57,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/DcYaAAs8.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/DcYaAAs8.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=ZzsLgCAapgDluibl; __ddg10_=1757002263; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=BNmW7DxHwFPoPQzc; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg10_=1757002263; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-132e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4910,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4909)","md5":"e0defebbf5b1f7c3d20dbe586b3fbf8d","sha1":"9a98a50ea930d1d592049d8b06b7ea997cb551d2","sha256":"d9619c358bb0ae0a7f26b18f953048dd92f3626ab73eedce704273def898ca3a","sha512":"199e25a1e97cd105e0b598fc32a8dc3b770103fe9aadff0bc0b0ac7e720f25e16dff85a883093e34e59f5d531d4798d0d5eac6e2c74786bb42ebb3021d0fc539","ssdeep":"96:fSI0Lgam5pFjwsmyzqVBRJzxv7A28/s1/HEwYx+3cCL:f8mjsyGRFThSu/j4U","tlshash":"44a1858f1240762e7ded4b5553f4681883304886fc1c27edf4ae5d389b5a88f61bb674","first_seen":"2025-09-04T13:25:01.076Z","last_seen":"2025-09-04T16:11:26.363521Z","times_seen":3,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/favicon-16x16.png","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:04.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=ZzsLgCAapgDluibl; __ddg10_=1757002263; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=lIEduJYPH7i1DP3J; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg10_=1757002264; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 1103\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: \"68b97987-44f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1103,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"11f24fdbf91f702bda779fc31cda72b6","sha1":"675c7e4a5d8443b041056cf934a6e2f652914a62","sha256":"22680e0318483689dda6c739ddcada0864dc530300444247c87d8233b347b858","sha512":"56998c6ce69ca75e2c00756450a2c33ed491a5be0499d5003eb3638d643efb5d395705a986df5301f74ffc9c0f10c707b9e7837a491ec7afa55f349240d2087e","ssdeep":"","tlshash":"de1146d1e121e051c26614f169222480ff67407bfeff8b1afd22a4145c5a6b997f76c1","first_seen":"2023-05-21T11:43:23Z","last_seen":"2026-06-26T20:23:29.961595Z","times_seen":155,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/C1D7ZzFx.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:04.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/C1D7ZzFx.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=wE79pXPU0szUTi1j; __ddg10_=1757002264; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T09:31:27.571776Z","times_seen":17916434,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/apple-touch-icon.png","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=ZzsLgCAapgDluibl; __ddg10_=1757002263; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=dM8Ktm2E74vqxYn8; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg10_=1757002263; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 5476\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: \"68b97987-1564\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5476,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"b0fd6219c3cc6542ac16de5fb1a803e5","sha1":"32e23eec5c195ebb1288a30e3eb88fabef54d68e","sha256":"3de26349c4bfab8a20055a516f6a01a3e26870922b5e158d25b222150248bb9f","sha512":"ca31b6c5eed2c86716e420501bba2bd940b0b74627e9acf6c535e1391dd518851aaa699484966b2c9b463af4b84fea8a91072966e6d355f12e7bbd7e04b724a8","ssdeep":"96:TitXRWWOLtp6cCMcakSchLRel2CgQ+dwmcwveg4tjvR8VRtvS:TUoWOLPIaihg29dwAv5Vi","tlshash":"b0b18db839459902eec1e13923565bd0af3111a036012c4a136fc9375b147a23abbfdd","first_seen":"2023-05-21T11:43:22Z","last_seen":"2026-06-26T20:23:29.98019Z","times_seen":156,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/DlAUqK2U.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:04.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/DlAUqK2U.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=wE79pXPU0szUTi1j; __ddg10_=1757002264; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Hce5cceufyieouu6; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg10_=1757002264; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: W/\"68b97987-5b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 3\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 82\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-08-16T09:26:31.875352Z","times_seen":25557,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/8sGV3137.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:04.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/8sGV3137.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/_nuxt/DP5Ff1Si.js\r\nCookie: __ddg8_=Hce5cceufyieouu6; __ddg10_=1757002264; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=STWp9iO7M8qIzD4n; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg10_=1757002264; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-35d5f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":220511,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (37705)","md5":"edf2e10b6d7a42681bbe9085aedd0e68","sha1":"18655f593eb6fa4d79adf4674cc49f12aa0360eb","sha256":"f3d0e395758406fb2703a3fc34e7d9508b0897e5b799920f458ad21f9186343d","sha512":"22bb3ae2fea7955a49118fbdfa84992ef34e41b9943238a88758e2a6e3df2dfcf2a9fe47abf3df3a63d6404ae7fa2f909abb3a11573c581051862aa2d2e9873a","ssdeep":"6144:cCuayegAuTVcvTIOg1msarrOu/DoxNITgAQ:cCuayegAuTVcvTIOg1msarrOu/ExNCg7","tlshash":"28549a26492c18a9213e4563fe1c6bd22ca4c5fde6ce87eb037c972c68f43e05a6535c","first_seen":"2025-09-04T16:11:26.36591Z","last_seen":"2025-09-04T16:11:26.36591Z","times_seen":1,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/Ci0qgXkX.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:04.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/Ci0qgXkX.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/_nuxt/DP5Ff1Si.js\r\nCookie: __ddg8_=Hce5cceufyieouu6; __ddg10_=1757002264; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PEDXeNwP5oYTUi5O; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg10_=1757002264; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-21d3a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":138554,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (43811)","md5":"20422f0db1c47ccd19cf54c7ee86523c","sha1":"50a4f0f051ebdde331dba2c0df67fc421e091db5","sha256":"a845b132fab069942669a0719f6d8d86e66cc8041cba5c061502f147ab950c30","sha512":"4dd082fbee1688fba632ba7d13c73994aac0e2eedf3ef06d207ed0d528d0fe264650eb3cc806c1020d170a538b5cf047228374e7195f26c4782a5c4fc59ad388","ssdeep":"1536:QsrUHXu9+2FYIFQqN1q46HAXJF707AMvrHCRAxpdh5CVaxwWNz5p3Cke/5p:QxHXuw2FYm2T5q+IR/r","tlshash":"20d3504b4e0c0e7a056213b12fada7b366acc03471dbc3e557bf82182375475aea679c","first_seen":"2025-09-04T16:11:26.367765Z","last_seen":"2025-09-04T16:11:26.367765Z","times_seen":1,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/analytics/pv?pgi=GTM-KN757LMM","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:06.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"POST /analytics/pv?pgi=GTM-KN757LMM HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 430\r\nOrigin: https://www.gwch70x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=5mlnomrGHa08OKuf; __ddg10_=1757002265; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.287743012.1757002266\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YGw5muGsc6EWUXgL; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:06 GMT\n__ddg10_=1757002266; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:06 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:06 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T09:31:27.571776Z","times_seen":17916434,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/ext/api-amplitude/2/httpapi","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:07.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"POST /ext/api-amplitude/2/httpapi HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.gwch70x.life/\r\nContent-Type: application/json\r\nContent-Length: 1903\r\nOrigin: https://www.gwch70x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=H1k4Fb6gvt0Gnnf7; __ddg10_=1757002266; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.287743012.1757002266; _ga_VRDLWS0SHC=GS2.1.s1757002266$o1$g0$t1757002266$j60$l0$h0; _ga=GA1.1.1274475123.1757002266; ajs_anonymous_id=153469b8-2f6e-4ae2-9a8a-74175003c1b8; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJmNjY1NDNkNi0xMjBmLTRlY2ItODZhNS0yNjZjNTdkYjVmZGIlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU3MDAyMjY2NTI0JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NzAwMjI2NjUzMCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; AMP_MKTG_15377f970f=JTdCJTdE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=bV3kUQUdP6wWm5ur; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:07 GMT\n__ddg10_=1757002267; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:07 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:07 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:08 GMT\r\ncontent-type: application/json\r\ncontent-length: 70\r\nx-amzn-requestid: 054296e3-8f75-4c6a-9b80-0d6c89a59958\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":45,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"5f8c6f461bd385242c695578c1293363","sha1":"1227b7496336e7529552281f50d8f6e9f88a0b01","sha256":"6c1c27bf0ec1a6ba9a6952572fb057028460b93f1ce630d30487c33a90f51f74","sha512":"d0929736a25a5e0e998130aea561361ddaab22989956ce8f4132bc9b238db71fe52d1351be78760b71dcc3de92619ca6e1c7cc1d69436a647ae5e7d4546e8828","ssdeep":"","tlshash":"f390020c524911756132014666468025937091ac02100215141440070af34440263fa4","first_seen":"2023-05-18T04:48:01Z","last_seen":"2026-08-07T05:05:06.344701Z","times_seen":305,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/Icons.qQm1orq6.css","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:09.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/Icons.qQm1orq6.css HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=bV3kUQUdP6wWm5ur; __ddg10_=1757002267; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.287743012.1757002266; _ga_VRDLWS0SHC=GS2.1.s1757002266$o1$g0$t1757002266$j60$l0$h0; _ga=GA1.1.1274475123.1757002266; ajs_anonymous_id=153469b8-2f6e-4ae2-9a8a-74175003c1b8; AMP_15377f970f=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjJmNjY1NDNkNi0xMjBmLTRlY2ItODZhNS0yNjZjNTdkYjVmZGIlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzU3MDAyMjY2NTI0JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJsYXN0RXZlbnRUaW1lJTIyJTNBMTc1NzAwMjI2NjUzMCUyQyUyMmxhc3RFdmVudElkJTIyJTNBMSUyQyUyMnBhZ2VDb3VudGVyJTIyJTNBMCU3RA==; AMP_MKTG_15377f970f=JTdCJTdE; welcomePackTimestamp=1757607065\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=pD7ggk33pb47OWB4; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:09 GMT\n__ddg10_=1757002269; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:09 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:09 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: W/\"68b97987-2ce\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 5\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 166\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":718,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (717)","md5":"3e6183a67c86cebf9ad2a0611895162e","sha1":"ce80a6e5642d3ea81204e9c8747ed885c7ab1ef0","sha256":"6baa8a3ad0ce9c9119b83f842e12b1b65fae74614af6920d83733272a8b80803","sha512":"c2249d5c0f180cf4efa94db013ce66f39e57fa2ca5c68cdce58ba8e1f8a35d95ddd48e037f605a7ad9366ca961fba231f8bb2e07cb5269af715d1406f1c62a1d","ssdeep":"","tlshash":"a901d87d3946f913633bca8e8394082351e2776bdd4195842983383e7d7a7605b4f073","first_seen":"2025-09-04T13:25:01.059229Z","last_seen":"2025-09-09T11:33:28.961132Z","times_seen":3,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/cryptojs-aes.min.js?v=1","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:02.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /cryptojs-aes.min.js?v=1 HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=G0C2CLt5YCi2Fluj; __ddg10_=1757002249; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NZT4mAVGDAEOGBVK; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\n__ddg10_=1757002262; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-359a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":13722,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (629)","md5":"cd93b7f0987a614bc17698503bcb6af9","sha1":"68a66448326499ff34c75bf31e2769b278584e0c","sha256":"8d4fae1a37a5b5338c889d0897b50024194b4d3ae94940e7e42c1c1423a1183e","sha512":"e3b87dfe10c0e3f3d801a85ae9c654a74eac22c2a93a757568a0d2b13755c36aeb5f9337e94a21db4ef2d1f0f1cfb98fccbbb0151d5cdf8d967730df96bfde98","ssdeep":"192:9BIGDmDm90mP9z8Ui015lN1I5rI2Tru6hMJFmHV+mdpwIfyAaYfKnNVYkUUFJZm3:9yiB0ez8UiIX1SrTegsEHJuI+y8Z7AX","tlshash":"625297c936edb94263963028587f6017b86b28b6945c4824f29cd4ddff9899dc03ae3c","first_seen":"2024-11-30T18:08:34.076577Z","last_seen":"2026-06-26T20:23:29.818692Z","times_seen":1206,"resource_available":true,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/ls-cdn.amplitude/plugin-session-replay-browser-1.4.0-min.js.gz","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:02.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /ls-cdn.amplitude/plugin-session-replay-browser-1.4.0-min.js.gz HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=G0C2CLt5YCi2Fluj; __ddg10_=1757002249; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=dGA1yhZSIcJwCQMb; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\n__ddg10_=1757002262; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 07 Jun 2024 21:58:38 GMT\r\netag: W/\"ead49d69bc7839b0b873b096d418e1ea\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nx-amz-version-id: a9eB74QCYmN.zM7i5ckvNX3RYMk8LisI\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: AMS58-P4\r\nx-amz-cf-id: 2QIJtF8qZG4nP6BDaB-S2vELnRWGBZ0ehM2vEp5SbIUTSwK9JGmWXw==\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":126923,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c19b1b5d91c8d683b1310562d9c4a225","sha1":"4d45dcac5c6a88e10052f4e356b2170c20413441","sha256":"bb5779145f1ebdcdee053876a4ed060174dda4656978972304c79ddd5f36dac4","sha512":"3a4e8d2e8f5d9a3b45c08ce99374c149a5b67d04d016edfe6259dfbbba948a049301c0cfa5f9bf334cb93b9b4a3558cffa725c166a943c90834c8d2237a1a21c","ssdeep":"1536:Ask/3qTBpVX0Ib6vhb2pJkuppl5METErM2jnpkDtoT1JaM18PIQunrr9gltn2BE/:IqBfX046vhb2pKMQt1Jawi697w","tlshash":"4ec329deb397b033539355a980bb0101b73a6a19300d4464f62ad9ea3c7d847a277fbd","first_seen":"2025-08-09T06:39:58.991299Z","last_seen":"2026-03-24T13:49:06.781634Z","times_seen":48,"resource_available":true,"data":null}},"time_used":710,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":710,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/D2zqvuUF.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/D2zqvuUF.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=ZzsLgCAapgDluibl; __ddg10_=1757002263; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=g47wkc8MOEhOwWko; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg10_=1757002264; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-457\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1111,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1110)","md5":"6388c86f4ea255e1365717974ff04b52","sha1":"5958616162dcad411da59dc5be28be158918c82a","sha256":"9bd8ec759b0680f997ca269054b550860a7e3fcad47190a2b2ff451021e64248","sha512":"4b619be70f5921dcae4b92ee41b9bcd19c997d151f8de4eeabc22c33b2fc951d177f4a9d2e5adb49bde9051e3f4044661dfcb1fc531a16c91ec7cf966acc0383","ssdeep":"","tlshash":"bb21657d4aec2dcc091cbc802ad89d6c3504d248a291cc8638a6fee7f887d5aec08471","first_seen":"2025-09-04T13:25:01.083215Z","last_seen":"2025-09-04T16:11:26.376409Z","times_seen":3,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":328,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/ls-cdn.amplitude/analytics-browser-2.6.2-beta.0-min.js.gz","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:05.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /ls-cdn.amplitude/analytics-browser-2.6.2-beta.0-min.js.gz HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=XAWgxBRgMjPxXGnx; __ddg10_=1757002265; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Urn41RmGsgcAA8um; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\n__ddg10_=1757002265; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 28 Mar 2024 00:42:57 GMT\r\netag: W/\"7300cb5f3b4294338b104c0f3268002f\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nx-amz-version-id: IogUhwUfPmM04el12d60iABuuT4mFuey\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: AMS58-P4\r\nx-amz-cf-id: WVtPmfTOh84MNWfOxEiwKDaF6hazlak17-GkFoFdMn1xjVnwibjPzg==\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":66596,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a81d9804ed47201de5314a7110e680be","sha1":"df58e208599843e46894e9c2bbfdf2feb2a985a5","sha256":"59dd69f4230f7535182747c17235fe4526d34826a142498485779bfdb5d617f1","sha512":"2c15805effa726a40e1b3156d003df4b5f602ab4c1b09b8897ff759d143c0a33a5eb7cc90887b850b1f209ccb05b7be263935ad805ad86383f88947d777fdb42","ssdeep":"768:p6wmsZPARRFO/J6zZsideR53I+dte7I4GWyihZurBJ8:/msY4/JceR54+zeU4GWyaZudq","tlshash":"f35372c9f6cbf0250393a5b8907f140ab33e7e9d242d4428f626d9d53c6d6499233bb9","first_seen":"2025-03-26T18:10:08.318249Z","last_seen":"2026-06-26T20:23:29.909592Z","times_seen":142,"resource_available":true,"data":null}},"time_used":696,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":696,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?en=page_view\u0026dl=https%3A%2F%2Fwww.gwch70x.life%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=521262541.1757002266\u0026dt=GET-X\u0026auid=287743012.1757002266\u0026navt=n\u0026npa=1\u0026gtm=45He5921v9186219929za200zd9186219929xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948811~104948813\u0026tft=1757002266022\u0026tfd=17111\u0026apve=1\u0026apvf=sb","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:06.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:23:13 GMT","end":"Mon, 03 Nov 2025 19:23:12 GMT"},"fingerprint":{"sha1":"24:F3:A9:B9:32:0E:AB:CF:68:58:D1:69:62:DB:5E:10:0E:22:84:8E","sha256":"93:9D:6E:47:75:F3:0C:86:A2:05:DE:67:D1:CE:D6:ED:3B:EF:0E:2F:A6:35:DD:ED:FA:0E:C0:01:29:FB:69:41"}}},"request":{"raw":"POST /ccm/collect?en=page_view\u0026dl=https%3A%2F%2Fwww.gwch70x.life%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=521262541.1757002266\u0026dt=GET-X\u0026auid=287743012.1757002266\u0026navt=n\u0026npa=1\u0026gtm=45He5921v9186219929za200zd9186219929xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948811~104948813\u0026tft=1757002266022\u0026tfd=17111\u0026apve=1\u0026apvf=sb HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.gwch70x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 04 Sep 2025 16:11:06 GMT\r\npragma: no-cache\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.gwch70x.life\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T09:31:27.571776Z","times_seen":17916434,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":88,"dns":0,"connect":20,"send":0,"wait":31,"receive":1,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/Cc9XZ-bZ.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/Cc9XZ-bZ.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/_nuxt/DP5Ff1Si.js\r\nCookie: __ddg8_=zQE3UkG7ghHSP8CR; __ddg10_=1757002263; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ZzsLgCAapgDluibl; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg10_=1757002263; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: W/\"68b97987-326\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":806,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (805)","md5":"edcca5d565fe593d22506240dd296af9","sha1":"20cdeb6e7a4c2d920816324b235e3254f73c382e","sha256":"276f7c0689e543e6a1e96d73f0389e85c671a61bf8381d338a87b4146c5f9571","sha512":"62cd1f75b2f4ec5e393060e62446cfe41b0eb0397d0d4294647e3e1df464b515f754f56f9c962b1304d05f5fed5defcae2b24b59656ec045d5fe63330dd7c898","ssdeep":"","tlshash":"8501490bd94481b8011cdcf4e421cc3aa27784ab53e9d7b1d1df57715be1071d10d62b","first_seen":"2025-09-04T13:25:01.067259Z","last_seen":"2025-09-04T16:11:26.380199Z","times_seen":3,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/HBjraRa3.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/HBjraRa3.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=ZzsLgCAapgDluibl; __ddg10_=1757002263; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=CRqU8D0hEP1JBalC; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg10_=1757002263; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-82db\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":33499,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32971)","md5":"a96b50d501435790764cd41480997319","sha1":"b6390e6846a7c5883d0524259e882ca59f05f525","sha256":"56ebaebef4563859e2aeabfe6c344e7258a38ca702084e437a1112aaac090613","sha512":"03fe0af9ccbb9e9156584b8589c5fb6a9006c380f69208cf438d4ba84bc7ed9ca662738b48ad785af5a57d0fbb17f2c3f32848c56c2b0e7b2bdc37d2a3863eca","ssdeep":"768:xXU8MMca080Hjkh5UyvucDYxhROs9SewPpUzSsLP20+6a7kHGQPLFODM:QI088a5bvuc0xys9SeSpU1Lu0+67mQhN","tlshash":"95e2c6cc7641b018a3a711b6e1ef580fb37a2984980e8554a0aef5e43d7c4bd43abddd","first_seen":"2025-09-04T13:25:01.069388Z","last_seen":"2025-09-04T16:11:26.381908Z","times_seen":2,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/BzJ5TwHR.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/BzJ5TwHR.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=ZzsLgCAapgDluibl; __ddg10_=1757002263; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=TkS7I5oKxxVqFViN; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg10_=1757002263; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-d13\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3347,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3346)","md5":"f6ce485b45d60be95bda75e5201fa3e6","sha1":"cd0403b6ed3db241813ba7f8ef9ad769eb3a8ed3","sha256":"d9a3f3de6e380bdc3dc470aa8211bf1464d8cbd46745d9b20504a5ee2b2c9254","sha512":"60f1ac35e803ffd81ee5e9361da3cf3c112b0c51f66a968814d980939b7f9fd49c7dde59d0db3fc742c9abde6b268d231163d0e44579f9c1d05977638ec8751d","ssdeep":"","tlshash":"086141fc1635a57226eb17bb43a20c9242764855f049b27010da8f0d553dc984bf7ffa","first_seen":"2025-09-04T13:25:01.089546Z","last_seen":"2025-09-04T16:11:26.385065Z","times_seen":3,"resource_available":true,"data":null}},"time_used":433,"timings":{"blocked":138,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/BqzaD3Pl.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:05.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/BqzaD3Pl.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/_nuxt/DP5Ff1Si.js\r\nCookie: __ddg8_=STWp9iO7M8qIzD4n; __ddg10_=1757002264; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=XAWgxBRgMjPxXGnx; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\n__ddg10_=1757002265; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: W/\"68b97987-1fe\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":510,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (509)","md5":"48659d4240295b9e64caab349266ed60","sha1":"72d8336e72ca76db1563fac1c496ded6ff65ae3c","sha256":"127ea5b1a4a77e85a4a100e7f9301b32e1e607a2c9b3b9f714def75e098b0ab1","sha512":"4ad1491e8175e0c642a3032062dd6e2ebb251ba4c1b94e4192e4fa50688cfbf6b748d45c0433bf36af924f90c65f4bb9e35267929b16482411800a5346042745","ssdeep":"","tlshash":"e8f0c92eb1dab43543ccd8c441380c006861ad602c0e218ed19b9f13b1d07a3708bd30","first_seen":"2025-09-04T16:11:26.386239Z","last_seen":"2026-04-12T00:18:50.830483Z","times_seen":46,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/ext/google/recaptcha/api.js?render=explicit","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:05.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /ext/google/recaptcha/api.js?render=explicit HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=XAWgxBRgMjPxXGnx; __ddg10_=1757002265; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=SaRXJliwzc7eqdyC; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\n__ddg10_=1757002265; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:05 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:05 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: br\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: private, max-age=300, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 04 Sep 2025 16:11:05 GMT, 0\r\nservice-worker-allowed: off\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1019,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1019), with no line terminators","md5":"555cf8d947a008dc6c1ce078e6c73e68","sha1":"5bfe8e8a346b5aeb72639a0a7d4e510fda3ee0f7","sha256":"e48798aae3210cbc80dcefee2bb79d31030f01cc2981a510194b63801b272e31","sha512":"2da9785fa43c695396529a2c87771058f22798c1b8c393614cb732704d970af171ac4f4e9e8022b7614129878d2c9db5f3a106bf95aa48ed2b33cb1857a29431","ssdeep":"","tlshash":"85113e770a04a0390b3209e1e2fbcbb1e492701cf11c85e8aa01dbd82e7addbce08484","first_seen":"2025-09-02T11:58:06.199672Z","last_seen":"2025-09-04T16:11:26.389106Z","times_seen":3,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/roboto-regular.BtWrZLw2.woff","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/roboto-regular.BtWrZLw2.woff HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=dGA1yhZSIcJwCQMb; __ddg10_=1757002262; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=uuvru9LYmHvch5Ry; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg10_=1757002263; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:03 GMT\r\ncontent-type: font/woff\r\ncontent-length: 139160\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: \"68b97987-21f98\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":139160,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 139160, version 1.0","md5":"ae91f35c10375f1dab7137a298aba7c9","sha1":"6b9aae9dddb20bdfc56381f0d64bf54433977413","sha256":"264a621481c81a289ac3227cd63cc91902de13789dd9df920f0e2f465fa2bd38","sha512":"b0253e74fe7baf39316ec12622b1ace4899c51f6ce5c193e0ca2dbf713e4e1ce3d5ed4145d46680a91c68baa44bd73a31834e544c0d732f77975e72424151b60","ssdeep":"3072:2isY+Dpc1q2EHUmPsBut5j+mN9s+EIUb0Psp45nE:Tspc1s0osS5rc0Er","tlshash":"60d31255eb38110ff8be77f86dcad33408f471d5c7a322a4955802abae44fd4ea24da1","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-03-01T21:47:53.345572Z","times_seen":69,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":383,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/eurostile-regular.i2b9H2-b.woff","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/eurostile-regular.i2b9H2-b.woff HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=dGA1yhZSIcJwCQMb; __ddg10_=1757002262; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=yN6GXNM0FgRJeEts; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg10_=1757002263; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:03 GMT\r\ncontent-type: font/woff\r\ncontent-length: 97680\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: \"68b97987-17d90\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97680,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 97680, version 1.0","md5":"535b1e86232aafcca96b143529c8226d","sha1":"9408a42efc92ea6972f4d0f50560c22ca84d8a08","sha256":"c5a7a7d506426bb073f4f866f0ea9f3c57c8e856444e5403494d9db263e85671","sha512":"b54f1a43cd21271056f02d0626c573357b3ad962969d24a7c03914513d6644155108d5fb0608d47c734e650e1141de70cb9cc13e1ee1f08830c33ecd7dbb8abf","ssdeep":"1536:mndVS5OB0M0Lfxv9JKgzmzwv25WCnEx2pW594UIi/m3KYdu+WLSkNQ:mv3BbuX0gswcIb4UIi/m3K4u+B1","tlshash":"95a312039a03b7246d764afa2eaf4b39f5d4ef988d0d63c147e1a410194d52f2f6126f","first_seen":"2023-04-14T07:00:11Z","last_seen":"2026-04-25T06:32:47.453739Z","times_seen":81,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":341,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/d4aiDjLF.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/d4aiDjLF.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=ZzsLgCAapgDluibl; __ddg10_=1757002263; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=p0o3cAQlWDZzHE6o; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg10_=1757002263; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-21c7\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8647,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8646)","md5":"376e23c5d4ca846e13e9d09791a25385","sha1":"3c10c8704fcb34899dec5926979abf202f75df30","sha256":"9db6702a9a86c7d19b8a02861c8c5f2559192800753d4fe6213043a417990c9f","sha512":"f428be75093080b0d75478c41953b83a030260b3c58543d25b5ad82253292536f158b6b8e5fabc416d3a7ce49128bdcdeb15ad2d0ffdff65d1f2f40cb107ea34","ssdeep":"192:MiFojMIZjkItgj6pnaJe/HA9iReMDjHMtpgCtAoRXSAd55rD1W55Jr0UWip8W4JQ:MiCMIZjy0LhYRHMAhPMN07i6jC","tlshash":"2f0240de520a65b00bd706fa81e846d0d6b00844f04d997c64f8dedf477ec8917a6bbe","first_seen":"2025-09-04T13:25:01.043031Z","last_seen":"2025-09-04T16:11:26.394503Z","times_seen":3,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":144,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/B4H9rhCY.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/B4H9rhCY.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=ZzsLgCAapgDluibl; __ddg10_=1757002263; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1C9moZxiP63VsAxc; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg10_=1757002264; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: W/\"68b97987-11d\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":285,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"be6d83f7cdcb91bbddbfc783b5061b6f","sha1":"7bf4d4f34618a2f70140ac3b9539c32c5cef77b1","sha256":"79a5f55995f201d18500445237edadb8d20001650683fb254d595f23fedbb5e0","sha512":"741b27508301eeb3a875f84be7599fb5bd7bf2f8d74da7ecb2a81ab37a1552de32b87b1554dd593c1c8eca3caaa0732f977695ca2d72c2e51439604bae64247f","ssdeep":"","tlshash":"61d02bceeb7066b8bb10446d545bc752c724f90013a85ac0987b6aa17f609d7c306fd2","first_seen":"2025-09-04T13:25:01.082086Z","last_seen":"2025-09-04T16:11:26.395497Z","times_seen":3,"resource_available":true,"data":null}},"time_used":573,"timings":{"blocked":326,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/ping","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"3.228.132.26","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:05.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 14 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:E3:24:32:5B:DE:76:F0:A4:43:7F:C2:84:CD:98:D0:50:48:25:7E","sha256":"B0:C5:D5:8B:41:34:A0:3C:41:21:0F:E0:A4:E1:C3:F7:66:24:A3:25:E9:E6:67:D5:40:EA:68:FB:D3:70:73:74"}}},"request":{"raw":"POST /messenger/web/ping HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 644\r\nOrigin: https://www.gwch70x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Thu, 04 Sep 2025 16:11:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 403 Forbidden\r\nvary: Accept,Accept-Encoding\r\nx-intercom-version: 5479b46a629485e653b6cd47855b75f57e939ad1\r\naccess-control-expose-headers: x-request-id, x-runtime\r\ncontent-encoding: gzip\r\nx-request-id: 00018k9no0c127h7pro0\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-cache\r\naccess-control-allow-origin: https://www.gwch70x.life\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.025620\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":113,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a5c4fc02ef4c2d55d3d778bd4a8287bf","sha1":"07f290f317be33f6c34f91effc5a02dcbef06627","sha256":"6640744d2c555b4a71f4d721a210191cb01d9521c036f63aaad23acb405965be","sha512":"3be137238845b71f945fb45ebd3f6be6f0d3f23beeceee59737d2ba75d5d4ca1ffc704d86b37c37b6f13b0a5f54e6972e3812be24936ef2be016115f8d14b5f7","ssdeep":"","tlshash":"87b0124fc15a6cfbbbd140436d0a18b14098f4e190f418c5c855e25cc6cf109962779d","first_seen":"2025-09-04T16:11:26.396494Z","last_seen":"2025-09-04T16:11:26.396494Z","times_seen":1,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":223,"dns":9,"connect":103,"send":0,"wait":122,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/cryptojs-aes-format.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:02.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /cryptojs-aes-format.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=G0C2CLt5YCi2Fluj; __ddg10_=1757002249; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fKuuuoqpPNhk7DUY; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\n__ddg10_=1757002262; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:02 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-5d6\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1494,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"e6bc38f77922eaa6f1b23716034b4a2e","sha1":"db781b1e30c4f2a1d63d47054f0903c463cf01ab","sha256":"9ca00bddae85e30d59672da0089ea5e132df97d75a92f42114fe1befbaeaf32d","sha512":"0ad7c00c1564d77f8463dfc81003c0d6cd6ada4e3d01094331f72847f17718e4a6b2c7a2a0bcbd96a1107bc6cb9bcb1721e7b2968ae4544595ab98d39bb30c82","ssdeep":"","tlshash":"163177407debb4c287e8e1d50435a044f67b7a0ab1558ef3aa5aa404ffedf3006326e4","first_seen":"2023-03-07T18:27:54Z","last_seen":"2026-08-07T16:57:51.090464Z","times_seen":717,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/BH18fLn4.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:03.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/BH18fLn4.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/_nuxt/Cc9XZ-bZ.js\r\nCookie: __ddg8_=ZzsLgCAapgDluibl; __ddg10_=1757002263; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ErGjKAtBNXAFVLzx; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg10_=1757002263; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:03 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\netag: W/\"68b97987-103\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":259,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"6661398a6d56e6e6ae7887a1f81a45d4","sha1":"1aac35aae204deb0742b7b0a7c2fb95ec2cc971f","sha256":"a5fac192dd181af7df21469eaae0a39ba97826532ad8d06c96eae7f9c7cf3797","sha512":"14b095925fde73e4ce9bf8d6484d8ce76764b7f2fb548ed1ec68933624decec7644bc5598d3f69663e1fa6a07c9e47e39497a424c9e30b0a33870bc07fa9133c","ssdeep":"","tlshash":"36d0955d5033d0b8117505591cdb5d07d14758bd733453146063db7437a84d2474fd0a","first_seen":"2025-09-04T13:25:01.097572Z","last_seen":"2025-09-04T16:11:26.400403Z","times_seen":3,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":145,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/default.Bi3uqo3_.css","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:04.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/default.Bi3uqo3_.css HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=wE79pXPU0szUTi1j; __ddg10_=1757002264; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Yej1JmNjnyTmsch4; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg10_=1757002264; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-b495\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46229,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (46228)","md5":"c99bad756e77cdb464b3a9c015fa9d77","sha1":"a91cdf3fa878195c0f06c0fb71101ef9bd85bebb","sha256":"7c38c1efdc8530cb6ed1162100f26571685b49330b5e9e55787e8231756683e4","sha512":"30fdd98e99e883f5632cb01f8a586da89719e8fbee4672a2678763104b4024e669fce51c2e53a085417d8e411cae05bc8ed332ecab84c6671a1cab755099458c","ssdeep":"384:G0jQN6Dc0cWJ7Hv0DyikxbMv0Dyi6Tt3JnymteZFcy/xqFnMRfv63ji:LrtHvkQivkk6PDwSV","tlshash":"8323a821761d203db53bdda6b490169e203af307d5238faeee583629cdc71d72b25398","first_seen":"2025-09-04T16:11:26.346174Z","last_seen":"2025-09-04T16:11:26.346174Z","times_seen":1,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/DKjz5IAB.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:04.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/DKjz5IAB.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=wE79pXPU0szUTi1j; __ddg10_=1757002264; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T09:31:27.571776Z","times_seen":17916434,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/DIUZ9vJL.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:04.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/DIUZ9vJL.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=Hce5cceufyieouu6; __ddg10_=1757002264; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PKxTGiAhFHt9DIeu; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg10_=1757002264; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:04 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Sep 2025 11:35:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b97987-142c\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nage: 1\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 2076\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5164,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5163)","md5":"868c50f9220f308b7bc94e029e292bf6","sha1":"820a01d436fb4f4d146e830444ed00b7453f5886","sha256":"5e2c1bbef05a4c8e4e05a0bb1116b31ed190bb16f2a5ab3f576ebed15e4a809a","sha512":"878a4b1945dfe36c11c703c09cf8427704746ac228ee66b120233cf4961936eb8a695030a6ce61c252d22d970ae862be809b70a1bafad46a08fd1be3c121488a","ssdeep":"96:oekq53hKMoKMj1W3FdeF31f5HnPx1oRstVCBR4Ir8Dtgjiby+qUECPRv5:oW3BY1W3eFFvmQVCkIgJbtD","tlshash":"10b1b7e4b0d9e0dbbb764fd1c032225260076ba57434e0d0f27aad73215be58a562b3f","first_seen":"2025-09-04T13:25:01.088084Z","last_seen":"2025-09-04T16:11:26.35249Z","times_seen":3,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/_nuxt/tPdbiW_V.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:04.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /_nuxt/tPdbiW_V.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=Hce5cceufyieouu6; __ddg10_=1757002264; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T09:31:27.571776Z","times_seen":17916434,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/launcher_settings","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"3.228.132.26","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:05.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 14 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:E3:24:32:5B:DE:76:F0:A4:43:7F:C2:84:CD:98:D0:50:48:25:7E","sha256":"B0:C5:D5:8B:41:34:A0:3C:41:21:0F:E0:A4:E1:C3:F7:66:24:A3:25:E9:E6:67:D5:40:EA:68:FB:D3:70:73:74"}}},"request":{"raw":"POST /messenger/web/launcher_settings HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 358\r\nOrigin: https://www.gwch70x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Thu, 04 Sep 2025 16:11:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 403 Forbidden\r\nvary: Accept,Accept-Encoding\r\nx-intercom-version: 5479b46a629485e653b6cd47855b75f57e939ad1\r\naccess-control-expose-headers: x-request-id, x-runtime\r\ncontent-encoding: gzip\r\nx-request-id: 0002jvg5q42h90iq6fmg\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-cache\r\naccess-control-allow-origin: https://www.gwch70x.life\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.025546\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":113,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b86d8c439f449603de27cf041d677334","sha1":"8ac313b7d83d82cb09f0eff5cad90ca67ef501ea","sha256":"0637529e03d135d974c445eb047e7af61d31cc249660d00509d969e8c8d33621","sha512":"166b03ced3a869e7a8db2f43b39960ec58301c68de03403ef3c6eaaaf0eac82a4251b014e79aff1cb7a857c576000a4835d619507bfc309df28fa07b8e001ee7","ssdeep":"","tlshash":"2fb0120f816b6cf7abd141437c8b11a282d8e0a9d0e008c584b4915cc78e111ca17b79","first_seen":"2025-09-04T16:11:26.401419Z","last_seen":"2025-09-04T16:11:26.401419Z","times_seen":1,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":206,"dns":14,"connect":93,"send":0,"wait":123,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VRDLWS0SHC\u0026cx=c\u0026gtm=4e5921","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:06.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:21:11 GMT","end":"Mon, 03 Nov 2025 19:21:10 GMT"},"fingerprint":{"sha1":"07:D4:DA:62:23:19:DE:C6:08:D3:6A:78:15:9D:A5:07:00:39:48:12","sha256":"B1:A9:08:B9:66:58:87:B4:23:94:8F:68:98:E7:F0:EE:8F:DA:A7:88:CC:7A:04:0E:80:74:B0:58:9E:A9:3E:D5"}}},"request":{"raw":"GET /gtag/js?id=G-VRDLWS0SHC\u0026cx=c\u0026gtm=4e5921 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 04 Sep 2025 16:11:06 GMT\r\nexpires: Thu, 04 Sep 2025 16:11:06 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1106:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1106:0\r\nreport-to: {\"group\":\"ascgcycc:1106:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1106:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 127254\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":368110,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"2637bf9ea690fc7beecccc09bcb01658","sha1":"b9f7c52dacab2fd326f145cb8ae71477fb118264","sha256":"4d25a054f78bef398a992c8277f4411cca760b75feee3bdb64523140e5da4d2d","sha512":"93b308135e7f398efc40dd8b70a2fd672326ef5bc750e04c6b09ccff16be830f772ef1a965df4cabafd4ff55d58da940b8984c408955e64d1f207ad58c004701","ssdeep":"6144:gG9wc55hOsAJr2GCHxG1RBdIgWUk2UIhqNY98aAmL:PwcDhOsAJr2GCHxoBQNc","tlshash":"a27429cd73c6702693a2b478503f118ba57b29a2f44cc899f18adce42e7469a4177f7c","first_seen":"2025-09-04T16:11:26.404469Z","last_seen":"2025-09-04T16:11:26.404469Z","times_seen":1,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/2sJvksnKlECCyE-0Aoh3JRNF/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:06.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:22:25 GMT","end":"Mon, 03 Nov 2025 19:22:24 GMT"},"fingerprint":{"sha1":"F5:9E:5D:EB:46:9B:ED:9F:D2:D7:E8:D1:06:43:DF:9D:0C:13:7E:75","sha256":"AA:C4:C0:AF:38:AE:91:75:3F:86:CE:32:70:A9:8F:C4:2F:7F:D2:28:D1:34:AD:0A:C8:E2:6C:6E:4D:46:72:23"}}},"request":{"raw":"GET /recaptcha/releases/2sJvksnKlECCyE-0Aoh3JRNF/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.gwch70x.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 345610\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Sep 2025 09:45:20 GMT\r\nexpires: Fri, 04 Sep 2026 09:45:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 25 Aug 2025 02:00:16 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 23146\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":807525,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (743)","md5":"f464e9efb54fa9bc820513e94f05b6f4","sha1":"51ae938c1cf3a6c78fdb86c1ea67bff5073a1a67","sha256":"0844a2d14c54573d5e99e5f405bac5ee251556fe73aae8bab4ac0589befc8fbb","sha512":"ceebf5d0ccd3fbdc7979910a68b600c2edc48ff4b50668e29567e9c0df6dfd9b4b36c8fe75f01183a4fcb75f7253d731cb076a2a1426f2b12237caff424f32d7","ssdeep":"12288:3z163nKwEtkOuMFgNm7FA1osoM+xRPFjks9:D163KCMFgNm7u1izxRPx","tlshash":"a40529d879463a795362b1f35467a439a33e9424d84c08adb19ac8f42ef480d34b7ef7","first_seen":"2025-08-28T12:47:01.840328Z","last_seen":"2025-10-04T13:22:40.63164Z","times_seen":132,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":54,"dns":1,"connect":8,"send":0,"wait":10,"receive":37,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gwch70x.life/ext/cdp-customer//v1/analytics-js/ajs-destination.js","fqdn":"www.gwch70x.life","domain":"gwch70x.life","tld":"life"},"ip":{"addr":"186.2.165.80","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.gwch70x.life/","date":"2025-09-04T16:11:06.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gwch70x.life","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 19:17:41 GMT","end":"Mon, 24 Nov 2025 19:17:40 GMT"},"fingerprint":{"sha1":"2F:5D:45:72:31:C4:07:D7:E2:65:6E:D9:7E:56:59:77:CF:D5:0A:6E","sha256":"C8:3C:41:3E:75:AC:77:B7:8E:C3:16:E2:D3:AE:53:2E:37:3E:37:B1:73:F8:46:4E:EB:54:B4:FB:5E:86:FE:1B"}}},"request":{"raw":"GET /ext/cdp-customer//v1/analytics-js/ajs-destination.js HTTP/1.1\r\nHost: www.gwch70x.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gwch70x.life/\r\nCookie: __ddg8_=5mlnomrGHa08OKuf; __ddg10_=1757002265; __ddg9_=91.90.42.154; __ddg1_=YLRAYN1NOKJeRGRW6RJw; i18n_redirected=en; userVersion=45.10.240.13; userBrowser=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0; ssoRedirected=true; _gcl_au=1.1.287743012.1757002266\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=WGlehTicUfveEtWr; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:06 GMT\n__ddg10_=1757002266; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:06 GMT\n__ddg9_=91.90.42.154; Domain=.gwch70x.life; Path=/; Expires=Thu, 04-Sep-2025 16:31:06 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 04 Sep 2025 16:11:06 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-headers: Authorization,Content-Type\r\naccess-control-allow-methods: \r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\netag: W/70a1cd6d5c300a59c3b828b336627efe\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: public,max-age=300,immutable, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nservice-worker-allowed: off\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":9226,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9226), with no line terminators","md5":"ecdb24cdd6b5a3a4a7ba31895f79ca4b","sha1":"3284a1f3ba7aa68b324499a64bf32c8101701663","sha256":"ef949bb08ab368c25ce835e54a53b3eb842de7e868ff81ff99520ed16394637d","sha512":"e76cf7a6f407f484c5537258129ee7d29b765a14204c0cd4e1ee9ca3d9542ac01c5c0b0c557e704d8c69a1a12b29312b99ec0fd25608af07b3c79ea5a83d0492","ssdeep":"192:d61F3JpeOVXIhCBnMfJlUEpFX8nmuONy+2Yn:doF9TMsEzZuF+2Yn","tlshash":"5f1212ccf6c7f0055267bab5817b451ab33ebd1a244a4894f42bcdd5287c619a12bf38","first_seen":"2025-06-01T15:05:10.790294Z","last_seen":"2025-12-16T16:58:04.809767Z","times_seen":521,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-04","alert":"Sinkholed","trigger":"www.gwch70x.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}