{"report_id":"2a3f8068-0788-4868-a119-28ab53778fb3","version":0,"status":"done","tags":[],"date":"2026-09-20T21:52:21Z","url":{"schema":"http","addr":"efootball.hilesi.org/","fqdn":"efootball.hilesi.org","domain":"hilesi.org","tld":"org"},"ip":{"addr":"104.21.9.115","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"efootball.hilesi.org/","fqdn":"efootball.hilesi.org","domain":"hilesi.org","tld":"org"},"title":"eFootball 2027 Para Hilesi - Bedava Coins Kasma Yöntemi","dom":{"size":25506,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (464)","md5":"bb3f34838f0c683843477bd47beba8cd","sha1":"f2b800fc5a0009121c6289bdd22107de5d5375d0","sha256":"3ec326b600783fcf73a55960a1d974f6ce84487c23cd38ac797f9139a1b93739","sha512":"2e58a48da809725fc1702a5233919a252d00ea183265d4aa2c88495f6c4f57ce29c96404762527c7ddf7dfb4ef54d1619618d619c08956ff4fef45dbcbd5dc64","ssdeep":"384:t6j29A7tfPOuApcMP7Xnf3ECPKDZXCV6MjiliAti9iOibiKiriKiA:oC9A7tfPOuaP7f3LWUVsf+zOzA","tlshash":"80b20913a2e20412665761ea3fd2ab0b3a758307da05dda87a5d51e4dfccad28cf335c","dom_hash":"domhash966025e37ccf9d4f3f42b0c27974a9d3","first_seen":"2026-09-20T21:22:05.1815Z","last_seen":"2026-09-20T21:52:28.178778Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"efootball.hilesi.org/","fqdn":"efootball.hilesi.org","domain":"hilesi.org","tld":"org"},"ip":{"addr":"104.21.9.115","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T21:52:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"efootball.hilesi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":14692,"sent_data":578,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"efootball.hilesi.org","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-07","domain_rank":0,"first_seen":"2026-09-20T21:22:03.211358Z","last_seen":"2026-09-20T21:22:03.211358Z","alert_count":6,"request_count":6,"received_data":351101,"sent_data":3153,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":9,"received_data":235866,"sent_data":5130,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"efootball.hilesi.org/","fqdn":"efootball.hilesi.org","domain":"hilesi.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd2ccd1df4d63958e5f77a3cf78c1b7f","sha1":"d9d07196e049d1af5663152fffa6e61787786755","sha256":"ccb699675a1c272738409dbdc75515e380aabd0ba0c5d6c192f6a82636717c1e","sha512":"9deb13e844e9a349ad98903290cf0e1c14985de306b2bae40bcdb1ab5cac5bab1ab55e669787716a52365f34e41f5143c780dcbfd8da35d61ba69d9ad6a36a9b","ssdeep":"96:nC5znBwMMa0ph3ySwSWiliAE2iAAiAPiA+iAhiriDWiXGAJaYg2:nC5zBwMMaUFKiliAtiAAiAPiA+iAhirW","tlshash":"ce91f19bb39709300edfa5af3796c7883831800f5c41d5197c3d85a14f24e9aa9fa7e8","size":4268,"data":"","first_seen":"2026-09-20T21:22:05.214023Z","last_seen":"2026-09-20T21:52:28.201654Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://efootball.hilesi.org/","date":"2026-09-20T21:51:52.187Z","timestamp":1789941112187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://efootball.hilesi.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 17 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 300854\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-21T02:47:26.034209Z","times_seen":302241,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":20,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/passionone/v20/PbynFmL8HhTPqbjUzux3JEuf9lvQ6Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://efootball.hilesi.org/","date":"2026-09-20T21:51:52.190Z","timestamp":1789941112190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/passionone/v20/PbynFmL8HhTPqbjUzux3JEuf9lvQ6Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://efootball.hilesi.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 1936\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 08:33:48 GMT\r\nexpires: Sat, 18 Sep 2027 08:33:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 220684\r\nlast-modified: Tue, 09 Sep 2025 17:08:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1936,"size_decoded":2748,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 1936, version 1.0","md5":"b9e20321a5112a80a0d9dcb103cab165","sha1":"2bd9651599b6eeda3e4cb088a915c35765c4b5dc","sha256":"6461918ac8577995815edbe636172e85863345e7407d541c3635a30158372d42","sha512":"d4e9d24a59f650087baf3d1b9e7670c96f68f86e2bffd633d5a927589f73199dc9ecfa42d85593d0b6f01b5f49077629f4fdf2fb7ea8eea4c2bbc403bfa032c4","ssdeep":"","tlshash":"87413b285afc4131ebd3eebc387d03e011127a8167dec2c96244f0ce6c9e5e48a3918e","first_seen":"2025-11-28T00:26:44.452042Z","last_seen":"2026-09-20T21:52:28.182694Z","times_seen":5,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://efootball.hilesi.org/","date":"2026-09-20T21:51:52.195Z","timestamp":1789941112195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://efootball.hilesi.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29392\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 12:44:22 GMT\r\nexpires: Sat, 18 Sep 2027 12:44:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 205650\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29392,"size_decoded":30205,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29392, version 1.0","md5":"a6323dda0842401b2923554d0ed8945f","sha1":"6a5e89b2f9b47f5a2fb11831479c02b4eebe3089","sha256":"cedb374b05a35034cf96db185db4eeb8f8ce49e1a56197673702ff11b5533d6e","sha512":"6fe8df13c6dbc738b1cfd40c14bda19dca6114b3a4f521ff46fa7ebe25f6ce11046b7d41c1a8528d2294afea5a1c985ff43db37a2de028c1fb61b7197210dac1","ssdeep":"384:Wz9Te6aaq6lpCaascbVjmWd8NifWrHJi9grlYlMl1EfUxFvskjZAFWiMhv4K6Nb2:u9jN2bVjmWQFqgskSWiVK6NbKd","tlshash":"65d2f15cb579c636a098e4b70df5e3bf9599cb39224b9b288341c0385aa3941e442b97","first_seen":"2026-02-19T22:46:38.271285Z","last_seen":"2026-09-21T00:46:00.00418Z","times_seen":16378,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":28,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@400;700\u0026family=Passion+One\u0026family=Fjalla+One\u0026family=Acme\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://efootball.hilesi.org/","date":"2026-09-20T21:51:52.049Z","timestamp":1789941112049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Roboto:wght@400;700\u0026family=Passion+One\u0026family=Fjalla+One\u0026family=Acme\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://efootball.hilesi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 20 Sep 2026 21:51:52 GMT\r\ndate: Sun, 20 Sep 2026 21:51:52 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14008,"size_decoded":2479,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"92f86523a71dd6bd1cfaf9f699b9755e","sha1":"b8faf5f2fc20e1a3b6b39929e13f6ad1d3e07a1a","sha256":"38ee1eaa024ee173e3023cb26e720d29769c2bb13eb2ea3ff003e0f1e7e66c14","sha512":"6e2374113a31ad25b3ab0aaa3508b2c9675d94a6be3d3542287967057db805c821b7c20c35dd141a75288d0c75ebfc534360586b900a0518b14cc3b04c79c1ed","ssdeep":"384:A5B9fM919W969yh9/qY4X9N9t949fd9k9D939yQ9/qY4a989c9q:ADyjooYhREHPWP2ZZYQRVKy8","tlshash":"ac520aa1042754009b834cd223cebf36fe1e52107442d0b9abfd5babeddbca6526935d","first_seen":"2026-09-20T21:22:05.199573Z","last_seen":"2026-09-20T21:52:28.184462Z","times_seen":2,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":35,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fjallaone/v16/Yq6R-LCAWCX3-6Ky7FAFrOF6kg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://efootball.hilesi.org/","date":"2026-09-20T21:51:52.194Z","timestamp":1789941112194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/fjallaone/v16/Yq6R-LCAWCX3-6Ky7FAFrOF6kg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://efootball.hilesi.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 06:06:10 GMT\r\nexpires: Fri, 17 Sep 2027 06:06:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 315942\r\nlast-modified: Tue, 16 Sep 2025 13:41:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45228,"size_decoded":46041,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45228, version 1.0","md5":"1b492d988a78c417f463cab50fd9bf01","sha1":"e5935ccbf5498efb471e3fb9e23f7d0b3ce904e4","sha256":"96bbdb37b0db8ffc26756924566453f5fdcdf58ada20262cd75071b540361b12","sha512":"a85b9560d26aeda8969a2d767f24473101dc52b777d3230aa65b9b77240579989c6222cdf0222c87e85527c7115f3b28e2bdfe88aef8f66dd80ea37df18dc183","ssdeep":"768:/CARQwtR2xjVquaEHl+hC3ttiWRatuXR2Unn/n/nPCqLQ5qIJIm1LE5uy6Unt:/P2u8p3tFatI/i5qIhUt","tlshash":"da13028c04bac18b9647717669771e35782b27cee72ce0de775480b58bb0f0e260b656","first_seen":"2025-09-17T05:46:54.805235Z","last_seen":"2026-09-21T01:29:58.399251Z","times_seen":5546,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":52,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://efootball.hilesi.org/","date":"2026-09-20T21:51:52.197Z","timestamp":1789941112197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://efootball.hilesi.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20556\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 02:37:37 GMT\r\nexpires: Fri, 17 Sep 2027 02:37:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 328455\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20556,"size_decoded":21369,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20556, version 1.0","md5":"8feefe1e602c4b14ff414a77c3af2c2c","sha1":"e57daae78e76c8944e97edecfa656f8608e09db5","sha256":"2addf2d86d7a5778653b36d551e97a39da52855f82fac7461cfc1bd86d460aed","sha512":"893f9695ee887eed00246f24d4ec3e17ed64e2af4fab055f951795f50d34f3685aafcfbda943060a132c42169d2ef5c99d3db4fb901d57a09e712b4ff02afd92","ssdeep":"384:tpv6fcCujSd2+uNZ0omwRnNPqfWvx/CldKV8D2w9lQXL79Ci5q8S/USM2BHRpWp6:fxC0So4wRhx90K6ywQLIWS8S5By5AR","tlshash":"8792e056b288746a77e4e3ecc859ae6c65ed9b0f0c1b15b909322122f196c4734930f9","first_seen":"2026-02-19T22:35:21.90447Z","last_seen":"2026-09-21T02:46:57.00391Z","times_seen":44822,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":35,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://efootball.hilesi.org/","date":"2026-09-20T21:51:52.198Z","timestamp":1789941112198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://efootball.hilesi.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29392\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 12:44:22 GMT\r\nexpires: Sat, 18 Sep 2027 12:44:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 205650\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29392,"size_decoded":30205,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29392, version 1.0","md5":"a6323dda0842401b2923554d0ed8945f","sha1":"6a5e89b2f9b47f5a2fb11831479c02b4eebe3089","sha256":"cedb374b05a35034cf96db185db4eeb8f8ce49e1a56197673702ff11b5533d6e","sha512":"6fe8df13c6dbc738b1cfd40c14bda19dca6114b3a4f521ff46fa7ebe25f6ce11046b7d41c1a8528d2294afea5a1c985ff43db37a2de028c1fb61b7197210dac1","ssdeep":"384:Wz9Te6aaq6lpCaascbVjmWd8NifWrHJi9grlYlMl1EfUxFvskjZAFWiMhv4K6Nb2:u9jN2bVjmWQFqgskSWiVK6NbKd","tlshash":"65d2f15cb579c636a098e4b70df5e3bf9599cb39224b9b288341c0385aa3941e442b97","first_seen":"2026-02-19T22:46:38.271285Z","last_seen":"2026-09-21T00:46:00.00418Z","times_seen":16378,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":41,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"efootball.hilesi.org/uploads/coins.png","fqdn":"efootball.hilesi.org","domain":"hilesi.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://efootball.hilesi.org/","date":"2026-09-20T21:51:52.201Z","timestamp":1789941112201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hilesi.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 16:03:48 GMT","end":"Sun, 06 Dec 2026 16:03:47 GMT"},"fingerprint":{"sha1":"11:B8:3D:04:B7:15:54:32:0F:3B:B7:DB:69:F0:21:FE:80:D5:6F:0B","sha256":"4A:D6:12:42:54:C3:B0:24:A0:E4:63:5B:A4:8D:00:34:5C:28:07:21:30:09:93:D8:48:53:49:58:55:5D:97:9A"}}},"request":{"raw":"GET /uploads/coins.png HTTP/1.1\r\nHost: efootball.hilesi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://efootball.hilesi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 20 Sep 2026 21:51:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 2116\r\nlast-modified: Sat, 07 Mar 2026 20:53:16 GMT\r\netag: \"844-64c755be026b1\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 1818\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4N9Fny3yGjGncP4TGSgueBtGR%2B2ahqAmeDU%2F%2BwqSNzGg7zsoLXxCRrVNJ6%2BoIKIx7xTk5qhaXffgV%2FYaxfWPilsuOYqankXPViHctu%2B7Py21ic8Xe8uwevTwfNnoi81cgFJ8KJxnmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3e40dcf4e035fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2116,"size_decoded":2834,"mime_type":"image/png","magic":"PNG image data, 101 x 100, 8-bit colormap, non-interlaced","md5":"36cfa6661a4fa84452ef3535411e9852","sha1":"4a28afb2c901bbddb739c6f311720a8cac2aa11f","sha256":"041565f55c7be297046b53e17765c76ec9ee3a8a2a828d1a5350b8ebf3cb6bcb","sha512":"9b3c7f34e06884138ead5cb7c1517b9a7eebd45fca6e4ca1d02133104e3fb37a48e4f22f801b5f831dcaa1111cea049ead4a44273ee70bd5440eac5867c9801d","ssdeep":"","tlshash":"f841e7d363d4804abb0d847b2d265cce5c428874d2f26757509891a1bb7619ffb91b83","first_seen":"2026-08-24T14:18:29.777874Z","last_seen":"2026-09-20T21:52:28.186719Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"efootball.hilesi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"efootball.hilesi.org/","fqdn":"efootball.hilesi.org","domain":"hilesi.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T21:51:50.863Z","timestamp":1789941110863,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hilesi.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 16:03:48 GMT","end":"Sun, 06 Dec 2026 16:03:47 GMT"},"fingerprint":{"sha1":"11:B8:3D:04:B7:15:54:32:0F:3B:B7:DB:69:F0:21:FE:80:D5:6F:0B","sha256":"4A:D6:12:42:54:C3:B0:24:A0:E4:63:5B:A4:8D:00:34:5C:28:07:21:30:09:93:D8:48:53:49:58:55:5D:97:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: efootball.hilesi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 20 Sep 2026 21:51:51 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 14 Sep 2026 14:29:49 GMT\r\npriority: u=0,i\r\nvary: Accept-Encoding,User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WUfM7333n0uyN%2FoYc9iUG8lQDhUIMoHywACAVYyAIAuAjii3ZW9dV8f5y%2FzYVOq9Ay4j3lwEG%2F6PFaZ9EWwysCWEEFdO7E924eC3%2F8eF1Wan4XJZokP7VooGhas4xfK17YhdJdoyRQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e40dc76d7c5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":25514,"size_decoded":8891,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (464)","md5":"1bd50e7ea9631ba3d1199bad85d3446d","sha1":"53085cd207691b912d23ef4ee313b51995915d84","sha256":"242c78dee3358d474d81b2174cb411ad5648571d2d33242ca61a243d4252c9fd","sha512":"8e1ab9e7168264c4c054c5acb65386fff5d27d21f3e3af7550f3797f125872c2d07c9ac97464ee648409a2769a848723423b3aab639611facaaa82dacbf0894f","ssdeep":"384:zxj29A7tfPOuApcMP7Xnf3ECPKDZXCV6MjiliAti9iOibiKiriKie:FC9A7tfPOuaP7f3LWUVsf+zOze","tlshash":"ebb20913a2e20412665761ea3fd2ab0b3a358307da05dda87a5d51a4dfcdad28cf335c","first_seen":"2026-09-20T21:22:05.186853Z","last_seen":"2026-09-20T21:52:28.187466Z","times_seen":2,"resource_available":true,"data":null}},"time_used":799,"timings":{"blocked":0,"dns":60,"connect":20,"send":0,"wait":718,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"efootball.hilesi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"efootball.hilesi.org/uploads/efootball-2027-para-hilesi.jpg","fqdn":"efootball.hilesi.org","domain":"hilesi.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://efootball.hilesi.org/","date":"2026-09-20T21:51:52.053Z","timestamp":1789941112053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hilesi.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 16:03:48 GMT","end":"Sun, 06 Dec 2026 16:03:47 GMT"},"fingerprint":{"sha1":"11:B8:3D:04:B7:15:54:32:0F:3B:B7:DB:69:F0:21:FE:80:D5:6F:0B","sha256":"4A:D6:12:42:54:C3:B0:24:A0:E4:63:5B:A4:8D:00:34:5C:28:07:21:30:09:93:D8:48:53:49:58:55:5D:97:9A"}}},"request":{"raw":"GET /uploads/efootball-2027-para-hilesi.jpg HTTP/1.1\r\nHost: efootball.hilesi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://efootball.hilesi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 20 Sep 2026 21:51:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 289760\r\nlast-modified: Sat, 07 Mar 2026 20:53:16 GMT\r\netag: \"46be0-64c755be45ccd\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 1818\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o4iN8PIp0wQkZsvvEMi8Be354tT3BHl5U4Nwj1Jk4mlih5P2ThjyJIM1CaMhF%2FdB%2FkSzcLDBVjEvOvjFWEj3941ScpyzeVPltkoETeOQPGJ6p0il2E7b1ZokLwWSi98FlcUyC5DGBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a3e40dce5d795fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":289760,"size_decoded":290475,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3","md5":"7aff5ee76ff0745fe946d97e6e39a463","sha1":"b7dfdad5b2a7a7fb8d31883e14770937aa4eaf7e","sha256":"308d5d6f7a6c197de87f20a6fdb41b4611709fdf61dc6e379af3e6ab54b54c37","sha512":"eb5331b3c5d05704bc27919c97445eb80edb3f84f8a67d76021d4c4d1f3509f1b5824ec211b7c203cbad4f3e1cb2a4fe87fbfed9128ffbd3c600399b621f5b8f","ssdeep":"6144:TaHs2ua9Xk9nMnwae2+VPnmXK/IM+IQnQ6KMp6489R2mezw3rMKWEkdvIMad:TaO79nMnwaRKPITtQ6/DHmezwaXad","tlshash":"ae5422656b6c44abc4ddf1b04f868b178a6bc4ad43d64c173606cc5ea885f633c7b227","first_seen":"2026-09-20T21:22:05.188148Z","last_seen":"2026-09-20T21:52:28.190524Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"efootball.hilesi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"efootball.hilesi.org/uploads/efootball-2027-para-hilesi.png","fqdn":"efootball.hilesi.org","domain":"hilesi.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://efootball.hilesi.org/","date":"2026-09-20T21:51:52.055Z","timestamp":1789941112055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hilesi.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 16:03:48 GMT","end":"Sun, 06 Dec 2026 16:03:47 GMT"},"fingerprint":{"sha1":"11:B8:3D:04:B7:15:54:32:0F:3B:B7:DB:69:F0:21:FE:80:D5:6F:0B","sha256":"4A:D6:12:42:54:C3:B0:24:A0:E4:63:5B:A4:8D:00:34:5C:28:07:21:30:09:93:D8:48:53:49:58:55:5D:97:9A"}}},"request":{"raw":"GET /uploads/efootball-2027-para-hilesi.png HTTP/1.1\r\nHost: efootball.hilesi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://efootball.hilesi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 20 Sep 2026 21:51:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 4194\r\nlast-modified: Sat, 07 Mar 2026 20:53:17 GMT\r\netag: \"1062-64c755be82589\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 1818\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rqf97E21e4PethuxULZ%2FEUPjRvfKGcjn2MDk5MmFFqe%2FTWIxDUAoNJ81RP2%2FbzaO%2BnqQ1mZyzhqzjKie%2B0tHVcITixUHDAnowaiIKoANFB%2FNML8CZGLNuCfmhJRVy3dKa58w%2Be2JIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a3e40dce5d7b5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4194,"size_decoded":4915,"mime_type":"image/png","magic":"PNG image data, 555 x 91, 8-bit colormap, non-interlaced","md5":"d1cd26ac25b011f7d90153c1a79197ac","sha1":"929defe8e8a31da7d640dfe197445bd76f7a515d","sha256":"f6b488de76df493f1783be467a556e0aeda68ebb7c49d1399323c1dce5bb293b","sha512":"d175c5c82909709cba2417cd26878f20b3b9b93a1e8f05bd7a82305bb53647223d548f04ac37d65acffed9b47d1a803a7fe4797e07bcf2254ff481232548b5f6","ssdeep":"96:n8vl3jtKkxkjjRtoIKTuM1c7yJkNFC6Pd55c8qFNMNzxWxGOLkic:8xjtrqjovTuWc7yJkNFHdTc8qYWAOLkJ","tlshash":"77816dbe74730d27a61efebb9293641964b305cb6ac601346ebc48ca24e0a3596c2271","first_seen":"2026-09-20T21:22:05.212095Z","last_seen":"2026-09-20T21:52:28.191718Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"efootball.hilesi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/passionone/v20/PbynFmL8HhTPqbjUzux3JEuR9ls.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://efootball.hilesi.org/","date":"2026-09-20T21:51:52.189Z","timestamp":1789941112189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/passionone/v20/PbynFmL8HhTPqbjUzux3JEuR9ls.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://efootball.hilesi.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7540\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 14 Sep 2026 06:49:53 GMT\r\nexpires: Tue, 14 Sep 2027 06:49:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 572519\r\nlast-modified: Tue, 09 Sep 2025 17:08:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7540,"size_decoded":8352,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7540, version 1.0","md5":"6b7ddab100c1b0132d284a7f6caa79c4","sha1":"7cdb85a66e11956cfddd77787fa63eb04767a556","sha256":"eb49ce211df074142d735927bb3e8b655ccf39a7cc444baf02e871bcd47986df","sha512":"4cb40e1dd2621ad3d512fdd9e1f33e0fbaddd09849cb465a390880629b48aba8229472d711d7e82cf4325f9a2566b3311773dbd7046fe429d9213dff733e32f2","ssdeep":"192:nvJdrYRDABrAOty0i0m2SVomUkuPzt7dMytphgx8ZXWDHeNi:QRDMrARZ0DEofPx76CExoXWLe0","tlshash":"3ff1afc3222c508cf75376fc6be8149156c7331658cb6aadae40515df94cc0d3d68dad","first_seen":"2023-05-03T23:14:51Z","last_seen":"2026-09-20T21:52:28.192781Z","times_seen":1085,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"efootball.hilesi.org/apple-touch-icon.png","fqdn":"efootball.hilesi.org","domain":"hilesi.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://efootball.hilesi.org/","date":"2026-09-20T21:51:52.349Z","timestamp":1789941112349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hilesi.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 16:03:48 GMT","end":"Sun, 06 Dec 2026 16:03:47 GMT"},"fingerprint":{"sha1":"11:B8:3D:04:B7:15:54:32:0F:3B:B7:DB:69:F0:21:FE:80:D5:6F:0B","sha256":"4A:D6:12:42:54:C3:B0:24:A0:E4:63:5B:A4:8D:00:34:5C:28:07:21:30:09:93:D8:48:53:49:58:55:5D:97:9A"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: efootball.hilesi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://efootball.hilesi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 20 Sep 2026 21:51:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 24398\r\nlast-modified: Sat, 07 Mar 2026 20:53:09 GMT\r\netag: \"5f4e-64c755b76ab30\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 1818\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vt%2Fhn7rrdWxNzAZlBUZ6kXWYLidyhntWNjaaE%2FBvOO3zor2VusFP76GD3jOyupBI0E2Va0z636CAbCRzwOEe1nRwyOEMX7tOcJ%2B%2Bzk35aFXncWV6KcdDJlTPnS8TSxZZylUGxnLJdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a3e40dd03e965fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24398,"size_decoded":25117,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"ad317a419ea3c48ef942d44475efe82d","sha1":"4879dbdef50fac3a3ac5056a003ba6ef8c149ee0","sha256":"179ec5c8b24198354cce92052dc7e7df71a3e06b6f7277c0c1fcf377c1592ab0","sha512":"722c971aa2d818898b9f5c4bc9b979abaac55cf554eb0f085ad3ea1744eb0286e42281ad96c62f349d509493515e0693af1b5f90d618b6de51d1bbe5990f0d02","ssdeep":"384:aIYMirBGGpUvtZZYWDY2Vep6cu964QTs5VIotkDKIFWyD1OYXFbA9Zw3UyXbgtPg:cMidx0tfYWkERcsCszIrfZUsU9+EEWJa","tlshash":"3cb2e15906d19375a7b29c2d7e77d2ac0d8d9c7312b751280303e2db6ee704e055b772","first_seen":"2026-09-20T21:22:05.185366Z","last_seen":"2026-09-20T21:52:28.193626Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"efootball.hilesi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://efootball.hilesi.org/","date":"2026-09-20T21:51:52.191Z","timestamp":1789941112191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://efootball.hilesi.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 17 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 300854\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-21T02:47:26.034209Z","times_seen":302241,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":21,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/acme/v29/RrQfboBx-C5_XxrBbg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://efootball.hilesi.org/","date":"2026-09-20T21:51:52.192Z","timestamp":1789941112192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/acme/v29/RrQfboBx-C5_XxrBbg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://efootball.hilesi.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 11:23:27 GMT\r\nexpires: Thu, 16 Sep 2027 11:23:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 383305\r\nlast-modified: Tue, 30 Jun 2026 16:48:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8236,"size_decoded":9048,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8236, version 1.0","md5":"06efd00b7f74385c105f230dffa6cca0","sha1":"1ddd4e5f12e2efb9dc91fd179c39809e1567ca9b","sha256":"bb814ac86e7f409154ced702b9f3543761d09410e837ec728242e6b980a26aa0","sha512":"dcb5c904aeb206f592e488b1e09e0c8d8709de614f6bf407e1a19c49fe8fb93938e139a9e998a1647a845ee712387396cefe6aebf1a7888ec7d8d2cdc11fb07c","ssdeep":"192:GUpWXNPlpLRKLo/ymzypjE0rI0eq/KOvSxLnoc4l1A7DmDdRHp1Y4N2:GU8XN9px/y1WQI0t/KB8N/A7DmDTHA4U","tlshash":"cf029e18cf57ec87ae2007fd4cdb068fc885690b17e6a6d317652186ef840269e63335","first_seen":"2023-05-03T01:59:37Z","last_seen":"2026-09-20T23:29:06.798344Z","times_seen":1057,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"efootball.hilesi.org/favicon-16x16.png","fqdn":"efootball.hilesi.org","domain":"hilesi.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://efootball.hilesi.org/","date":"2026-09-20T21:51:52.350Z","timestamp":1789941112350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hilesi.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 16:03:48 GMT","end":"Sun, 06 Dec 2026 16:03:47 GMT"},"fingerprint":{"sha1":"11:B8:3D:04:B7:15:54:32:0F:3B:B7:DB:69:F0:21:FE:80:D5:6F:0B","sha256":"4A:D6:12:42:54:C3:B0:24:A0:E4:63:5B:A4:8D:00:34:5C:28:07:21:30:09:93:D8:48:53:49:58:55:5D:97:9A"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: efootball.hilesi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://efootball.hilesi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 20 Sep 2026 21:51:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 862\r\nlast-modified: Sat, 07 Mar 2026 20:53:10 GMT\r\netag: \"35e-64c755b881bf7\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 1818\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F5Pg1N%2FoK%2FQDOh8%2BX7rA5vF77c2lXs%2BuH9xNQa0mz%2B0l2zo9zYhug4uPgkyF7LfztfbnLFZKhcvKYXt1M1yyGDPUhU7gyIQERmu150RD6kXPFQwic9OWQ6XS2%2FU7tqdcyOm9agWA5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a3e40dd03e975fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":1582,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"75b870a2a87b7dc56be324fd4f92db88","sha1":"5dc6fb23f40c4def4098682f8823089dc8d1e3b8","sha256":"5975bb7f5826dd82fc52dee15a736300920055b7cd80538df84eec442a3eca74","sha512":"973e7190e43879c5090d9bb1da1891d3677cc65e6227fb19a6cb9129403afb270cc1fcf3df3dfd8f17ce25941c5d156f0238325a22b68bf5acbee4e4f1cf0bb3","ssdeep":"","tlshash":"b11152ebed6c9720c8cb137f416133c5ea388553a56b490da537e509ea04fc8310add3","first_seen":"2026-09-20T21:22:05.18936Z","last_seen":"2026-09-20T21:52:28.199655Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"efootball.hilesi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}