hostligo waf