{"report_id":"3a6016ce-249c-4add-8a8c-176339edb9c3","version":0,"status":"done","tags":[],"date":"2026-08-24T06:00:45Z","url":{"schema":"https","addr":"restuts.com/efootball-pes/","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":0,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"restuts.com/efootball-pes/","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"title":"eFootball PES 2026 Hack myClub Coins and GP Cheat Generator","dom":{"size":51139,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9840)","md5":"5fb3830cb77d3d9eb48f0bca21ec8cc1","sha1":"b2013939314906e44c6430b98c6deffce0bcabdf","sha256":"0faace120aea236f14f04751f110a7c63bfd2054059024ba4486f356b96b2e02","sha512":"074ac4ef39ec464b3e45cf309191293c4fcb918bcda5dadb13225200f2604e739a93382b432227ae62152f42fead5c5fdf926a7192edc49d7eaeed358412b201","ssdeep":"1536:4CXAapGiUni09xUDuLVMV2tKkELVQD8ZjG4PI0R:4KkiUi0zzmQD8pG4P1","tlshash":"d03309b3e788451aa75f53d9e596b334a179421acf019ae979ec319863c0dfb04f320d","dom_hash":"domhash26e08ef0c1bf81f75e84f06b18f89473","first_seen":"2026-08-24T06:00:50.012974Z","last_seen":"2026-08-24T06:00:50.012974Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"restuts.com/efootball-pes/","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":0,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-28T06:00:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"restuts.com","ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":32,"request_count":32,"received_data":1275817,"sent_data":16888,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:20.7","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cookie Notice:2.4.8","description":"Cookie Notice provides a simple, customizable website banner that can be used to help your website comply with certain cookie consent requirements under the EU GDPR cookie law and CCPA regulations and includes seamless integration with Cookie Compliance to help your site comply with the latest updates to existing consent laws.","website":"https://wordpress.org/plugins/cookie-notice","common_platform_enumeration":"","icon":"Cookie Notice.png","categories":["Cookie compliance","WordPress plugins"]},{"name":"jQuery Migrate:3.4.0","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Contact Form 7:5.7.6","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"WordPress:6.2.11","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"static1.twitcount.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2015-12-04","domain_rank":1897032,"first_seen":"2017-02-01T13:11:06Z","last_seen":"2026-08-24T05:26:22.56905Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":463,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"restuts.com/efootball-pes/","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e6b41d1bd84ba54746200e196962756","sha1":"d0aad50a9630bc31c8c0c572674e98adaa25e432","sha256":"77f8704935b7250f2c5d3e669dbf66ffe95ceb214a7b691fb589863c4ca7bd8b","sha512":"96f34c7d6396e492b999a9050dfe34165fac591444017eac19ccdd4e1b1f50bca2e79c4942bfce4df581777c71a2e7e8ddc9d872231fd2ad61611759b5035cc7","ssdeep":"","tlshash":"4141416a276d1c6e32bb20e3af5f5f4b5b2610031580e43ac8fe76851872c91c2f9c89","size":2159,"data":"","first_seen":"2026-08-24T05:26:26.664119Z","last_seen":"2026-08-24T06:00:50.039638Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/efootball-pes/","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c193205c0c47f5da1659c5ab004333a","sha1":"201004e2464838ffb3f6238652a350242703cd15","sha256":"610b90652f576588e60bdc9254fac06dd22cb5a28dc1f2bd1b034cd71364c712","sha512":"f55e6021cd65551ed3c414f131da38927e000ebb5e745214d1de097423b6a61c0fb4abe2d97d78a0855e894079b26ef3c6e3c9a956169e61d49c0359a2ac8b05","ssdeep":"","tlshash":"e8b02b203c800eca80f80ff42535727343d132133cb0cc420accd0815f10101c488107","size":129,"data":"","first_seen":"2026-08-24T05:26:26.667633Z","last_seen":"2026-08-24T06:00:50.040229Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/efootball-pes/","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e77c5a00240b7b74294257283b6ce14","sha1":"260db363eb63d35a2bfc249191ac8bb956567d2d","sha256":"79f285c5648572ebd6bc337d4c9e02eb74bc71e022eee34cf11b7702f64ba307","sha512":"c0d8a60cee0acc3747740926d0ccb836c9b6ad3946206c0138b55c79a94b8f5974e6468ef2b710fac394c562e7a202b7638f8c75735d4d31d707af537f0a3e33","ssdeep":"","tlshash":"e7e0d80876594d6ed19547c9c1056f92863831363aa0fd98c85e68b83cebce7f95a00b","size":386,"data":"","first_seen":"2026-08-24T05:26:26.670561Z","last_seen":"2026-08-24T06:00:50.040785Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/efootball-pes/","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"91c96bb5809e9ce22d75333a41320a45","sha1":"2bc574f9bc068a8f7771f658156fb9c8907fc872","sha256":"b6fbc46fa9ec2e1e07d1bd4b7226e3503e2dad35817879277665980e3c7381f9","sha512":"0473b34b6fc46e03ee71b6a26c860e21c667d4017f1e9328546657dc3fd58089922c793ff8aa11afb00a25246e656cc8d4e7a5bc0b24e3093c322440ffb5be35","ssdeep":"","tlshash":"e5e012e9878198972add4c439925a8c75472507a878532c34328b98c05cd016c449154","size":295,"data":"","first_seen":"2026-08-24T06:00:50.041348Z","last_seen":"2026-08-24T06:00:50.041348Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/efootball-pes/","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"dfe50f6825e7a63b30aa088ed4682817","sha1":"40d486080028ec91ede7befd91e52e031e42b735","sha256":"ec1182cc83e7609494c24b9710459a2f8dc564080cac987c735ae6f7916843bd","sha512":"36f12bc038048c97a4e9c306e03588f226398bf4444f9745cbfb033c26af6a353a32c12707bf25866a573aa1a1a915d1f9742200d85e0fefefd77fe99b360277","ssdeep":"","tlshash":"3cb02b1825c15d4020b4c3dc030c3130b14101074c06934759cc41401fa4064c040246","size":123,"data":"","first_seen":"2026-08-24T05:26:26.676081Z","last_seen":"2026-08-24T06:00:50.042217Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/efootball-pes/","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e0d02d0cd3a7e7878b89507f6ba7ec4","sha1":"7ce0be60d5bcb4bbf694e7464d66496e12aecf51","sha256":"65f7948aa62ec70e3373969cb873988fd3e9f69108867f68e70717ddc7abbb54","sha512":"0c4116105321f29c52ba0ba12785cefdf8535b3d226c0dfdd2764154706f8ee9e3958212195a44f6f1a461dd80fd40b4c52b79de1718c776f15bde180a5a852e","ssdeep":"","tlshash":"5f0126b87624117000ded4a8f17fbbc9787a20137b4354c0945d88f85a74ff95052c98","size":658,"data":"","first_seen":"2025-09-30T18:45:17.178278Z","last_seen":"2026-08-24T06:00:50.042803Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/efootball-pes/","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"956cc6215816b8620f0abaf242a85d41","sha1":"7182ac540b49251f550fe5db8e6ae1890fa76123","sha256":"3a783ac654b32d78aedb477a46a043981701c49788c8f96ed658fd00fc4742d8","sha512":"4d93805ab7d57195a4212f9c78adb1931c3a6f11d814f5cb96663582fb673d152bf31c959e900a4e71cdbc86ba2d0398071e96b8b82f74e23903643815cc74b1","ssdeep":"","tlshash":"73f05c4a18558fab5fc7013f3aca554e70ba418e4494c150bcbd7da21f309e329e925c","size":452,"data":"","first_seen":"2023-03-07T01:26:48Z","last_seen":"2026-08-24T06:00:50.043312Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/plugins/simple-social-buttons/assets/js/front.js?ver=4.1.1","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"353de2f2d4428fdc1a02d1dabe1a3abf","sha1":"25d4e879634c743cb151ba4beae1e4aabb9c9606","sha256":"e0447c33437b68ce8263e7ce898c532cb1676e1dfc94662aea3300263e425265","sha512":"3b6f8001bbe57a59f50f32c757b02a0c49b889aa0f7ac90caea143d51d5c93d61d8ce6c39ab9f4e616d66ad7783f6caf017a97966217eb3766992d3fc9312b74","ssdeep":"192:ned6bf2L3+N+Ua9qfpNandiCK1F3MrEN9Hhn6Rir3yrWNlcldCfBEtSAVJ+1Hmps:ng6bWEN9B6RyyWNlcldCfBEtSAVJ+1ws","tlshash":"a5f11255b7e913152e3b34e20b5fb758ba19844bc049d8d9f42f43883fa03be21792da","size":7483,"data":"","first_seen":"2023-03-07T12:09:24Z","last_seen":"2026-08-24T06:00:50.023181Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/themes/tortuga/assets/js/navigation.js?ver=20160719","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9ac31b658ebe0691a473326aedda822","sha1":"84cabc4320248be75e116dc8b519dfa3ff5795b0","sha256":"b5e6d2b22f2bc640f9bdb100d08bc7b3b216acdaf4e5eab2f1cf8aba92bb4496","sha512":"87add14d52f0391429ee1ba87eabc4c505e7282dcfc25ae19d4c39659231c968cff732bae77dfd7e95cccb219f4a24e13d70ed8f86de9aaf0d50fd33c753744f","ssdeep":"96:3CvE/4TO2ONwvtaBo1qqhtPRq7lept7COmFCsnWvftKo+Ozf/onfC:yEwT9OfogCRqeqHos0L/26","tlshash":"34b11fc53d8f6567846bf363653dc089f83ac43292062255b5baab291e9d19003cffbc","size":5391,"data":"","first_seen":"2026-04-15T18:16:08.046877Z","last_seen":"2026-08-24T06:00:50.027528Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-includes/js/comment-reply.min.js?ver=6.2.11","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"ebe1642d5d453454bedcb4d4a907747a","sha1":"ec867e9f141b4cf951952920b0cdba33bdfc7cb0","sha256":"b9f5043ae6ce389972c4a751929465ba7401c0c73340e9117ed281d32099619e","sha512":"e4978709e20ff022a56294d3e2ef9fe88c7732cac9e51d04a5fc3b9ab265acdcfbb6f54a7ff660baef8bc78400bacd0df6b25694bdd74d95cb864b69b8505a63","ssdeep":"","tlshash":"9451b8d433c95d362a8373355eff530261722709b50804608816c86521bcfd963b67fe","size":2982,"data":"","first_seen":"2023-03-14T17:33:38Z","last_seen":"2026-08-24T06:00:50.023997Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.4","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"e407e57f40d249c37f8a1721c4d634fa","sha1":"55b6478ecb3900125722e8aa1bf548adfec4fb08","sha256":"aac18687b81b4b4a5fc589b9556b76aa14f8eeb44b7a92c3fb1254bed0476b10","sha512":"8ab19334d9298f94e97e66188026f5dcf9a177dad757ef21b3c301fc115412ad8976a9fc45e3e84b9bb571a57ac67d59dcb370e8afb002214322f3e7c5c0a9e3","ssdeep":"1536:VjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvy:VeeIygP3fulzhsz8jlvaDioQ47GKz","tlshash":"e893f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89817,"data":"","first_seen":"2023-05-21T22:14:06Z","last_seen":"2026-08-24T06:00:50.031386Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.6","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"7be65ac27024c7b5686f9d7c49690799","sha1":"241ada4a86443adc5623d1a3a8018a96d9de6d5a","sha256":"52db930f81d97113dde679cac624cb5435b56d4ac486e91a0b6692d2cb615a84","sha512":"bbe6373705c81da5c7c3c132583338b875ca76cd5f963dfba95195bd8e2710e819b62924130f49b04fc0ea07e35677580924575d62e8cbce75d1644ce5f96d15","ssdeep":"192:EajuLigkRhS1rNp7NWzdkfszvx3imWAel/L0Fx18b2Vauta2fI/OTz+UCR7:EajuLigWhS1rT7NW2fszhibLexa2VauK","tlshash":"e12203e6a197e5f0cbc228788c17c091b2bf821cb8899464fb5dccd2195cf17166bb79","size":10241,"data":"","first_seen":"2023-03-29T21:17:20Z","last_seen":"2026-08-24T16:55:53.024343Z","times_seen":16616,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.0","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"739a203540a8f98b07dced831b76043e","sha1":"be9f2ac08882a338aa8ea547aba7e5f66bf6fa43","sha256":"e0b7a99767f80b6c187a7f473c4ee3e0b7bf1c896d917e918c7b7a97ae5aa79c","sha512":"e7557b154810f399e98b6d6a59a4b512031ac8c58a606e61067d1ead7fdac7d2b7b3847500644142f8060408dedd9b23f8a8e94656cf2af7f643210de654af42","ssdeep":"192:amprDN+e3IUefKSfI0bP1CMjt9kdgOFWIa/aC3+sZv9LRb:amprx6PfK2P1CMjt8FWIa2sZV1","tlshash":"3752c86db566b9714eb732b9f03bd30b71b205cd5a0d8940d19cc8f6287d89e812bf68","size":13426,"data":"","first_seen":"2023-03-11T16:20:15Z","last_seen":"2026-08-24T06:00:50.0222Z","times_seen":401,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.6","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bc2b1fa970f9cecb3c30c0c92c98271","sha1":"7c6bb87aaa24714b7b3b3c86dd932736a80270a9","sha256":"1060091178cbd6c843b802f516f230f1a3a1e85f1afbd6ef84d80e5430ba457e","sha512":"1b39c7152e6561c6108a36e5b89a635ce1ef883ef683b4fb4e58d32bf2a7f415fb1df4695562d2e8acd85a3bf5933071294d5a1d162993930a5dc7851b9a5ed3","ssdeep":"384:Ie8sHDZ/J+oHewgOQGp/GJ3eYE3kfn3GVqv0s+pfYm03pYg:Ie8s1/J+oHlgOXhzYE3kf3wqv0s+pfYH","tlshash":"3f42c6e1832551721eb606f390e513d1a66576adf44bcaa0e498dd2a18bccc324f3fb7","size":12943,"data":"","first_seen":"2023-03-29T21:17:20Z","last_seen":"2026-08-24T16:55:53.024947Z","times_seen":27336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.8","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"38f95416d5f7349b65699f64e6a587fd","sha1":"2ca6f6f77481c3cdbcaacfc61a56c24f3c933ade","sha256":"08756c47213d461baa3b01f42448a76d11f524470c7a34f9018733889bd4f49c","sha512":"e855ab926916cc3a9aef67e6bcac01056180650710804624452f2d2acb7ce5ce563fbdc5146d51ffe6607fbcdff8d806765d4fe14c6316ae559bb0c6281edafa","ssdeep":"96:c7FZY7QB0zRHEFjedGgSrWN06CwuEUKj4vZPTxJpEMfHBE6J0/Pn07:uYNzRHIJgSaN06lj4BPl7E6O6JCk","tlshash":"e602429c7b241b7845c781ff24cf65a079331adad8d414283436ecd28bb5cd617236b6","size":8700,"data":"","first_seen":"2023-03-14T16:58:28Z","last_seen":"2026-08-24T06:04:09.279583Z","times_seen":8699,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.0","filename":"https://restuts.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.0","line_number":2,"column_number":970}]},"http":[{"url":{"schema":"https","addr":"restuts.com/efootball-pes/","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-24T06:00:16.125Z","timestamp":1787551216125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /efootball-pes/ HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/7.4.33\r\ncontent-type: text/html; charset=UTF-8\r\nx-pingback: https://restuts.com/xmlrpc.php\r\nlink: \u003chttps://restuts.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://restuts.com/wp-json/wp/v2/posts/514\u003e; rel=\"alternate\"; type=\"application/json\", \u003chttps://restuts.com/?p=514\u003e; rel=shortlink\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 24 Aug 2026 06:00:16 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:20.7","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cookie Notice:2.4.8","description":"Cookie Notice provides a simple, customizable website banner that can be used to help your website comply with certain cookie consent requirements under the EU GDPR cookie law and CCPA regulations and includes seamless integration with Cookie Compliance to help your site comply with the latest updates to existing consent laws.","website":"https://wordpress.org/plugins/cookie-notice","common_platform_enumeration":"","icon":"Cookie Notice.png","categories":["Cookie compliance","WordPress plugins"]},{"name":"jQuery Migrate:3.4.0","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Contact Form 7:5.7.6","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"WordPress:6.2.11","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":50893,"size_decoded":12301,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9840), with CRLF, CR, LF line terminators","md5":"e6b813a958dc81962de451d73976a3c6","sha1":"83e16af837c1acdb5ce966cb41074da32f378557","sha256":"9550f9f848457bce4225cd9eab5dbbca3bef4cb194b57ac1edce7f29eed3fcfe","sha512":"f4c348e30a6a6133c75373f5590452d33a3e040e659e60db18034103a80c29c11787abe654d70747cdce7c5efdbcb3bbc4664d1d99459c2f0a35577516c8390d","ssdeep":"1536:y4Hap2o617i4oxcE/4f3pV2tKAzyVQD8SjSKe3Ec:yZEo8W4k4RQD8gSKeZ","tlshash":"f5331ab3e694052a576f53e9d467b238e1798216cf0186e979ec30e8a7c0cfa45f321d","first_seen":"2026-08-24T06:00:50.014147Z","last_seen":"2026-08-24T06:00:50.014147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":936,"timings":{"blocked":-1,"dns":54,"connect":23,"send":0,"wait":557,"receive":0,"ssl":302},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/themes/tortuga/assets/genericons/genericons.css?ver=3.4.1","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.268Z","timestamp":1787551217268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/themes/tortuga/assets/genericons/genericons.css?ver=3.4.1 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 May 2023 20:57:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15949\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28529,"size_decoded":16279,"mime_type":"text/css","magic":"ASCII text, with very long lines (18732), with CRLF line terminators","md5":"ad2744c2cec1da79171b1833333e4b20","sha1":"01288e267c0eaef36709f45beac0a7249a97f59e","sha256":"a767d7e7af88326afb37242f2828280a2c930945cb94b636b1f05a0afb634621","sha512":"97746533fb75cb91d2c8ba07d3cbba213e0aefd51b0aad2230bd66aaa7c5f22d9d2f32fa5fb05ff51fadd67205eb61c794afbe3b449b0a1d9dd227e757e67add","ssdeep":"384:x6H21lHT+RERegeG2NKJtO3EdEMQvujSE2mJzJ0u39qZi0dRqaZ7MkGb:x6W1lcNGZQ3MJjS/mJF39jM3QkGb","tlshash":"e7d274f6910e14a06712fb94f387f7801f5c722e98909cc6f4122c9d97e5a2e83a27dd","first_seen":"2023-04-05T11:31:05Z","last_seen":"2026-08-24T06:00:50.015417Z","times_seen":788,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/themes/tortuga/assets/fonts/open-sans-v15-latin-ext_latin-regular.woff2","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.569Z","timestamp":1787551217569,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/themes/tortuga/assets/fonts/open-sans-v15-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/wp-content/themes/tortuga/assets/css/custom-fonts.css?ver=20180413\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 09 May 2023 20:57:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18876\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18876,"size_decoded":19163,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18876, version 1.0","md5":"81d0487ba73afd292730e6f89e83c2ea","sha1":"20f0b5b7cac1d9a707d3cce56b7a4c16a5a11d46","sha256":"557116ee5706daa3b6cb2f52e7490e22db9c30ebfc447a5c85458a5fa0f6f84b","sha512":"f069c794442a237d55a31a4f17fbfbf5d8c4d82c12508ad45371641dfa177f03b7ef59360d2e91237d5d3c38cd11b0f3a145317b58af8d0cfc0e19c65eb313c7","ssdeep":"192:W7BvtpYenEqvaCzTZjKcUGOvkObBPzMtUwwLYe96a3P5gVit9dVpmmFIETa5rb22:WJAmaE+cUGGrlkwLdhdedF3JfbNovqT","tlshash":"de82e1116c47146635def1b8a9db6f0d03317ddac11ae8263ad82ab6eb4d43f30e88c4","first_seen":"2023-04-10T16:23:38Z","last_seen":"2026-08-24T06:00:50.015979Z","times_seen":2958,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static1.twitcount.com/js/twitcount.js","fqdn":"static1.twitcount.com","domain":"twitcount.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.815Z","timestamp":1787551217815,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /js/twitcount.js HTTP/1.1\r\nHost: static1.twitcount.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T01:40:43.275174Z","times_seen":18088007,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/themes/tortuga/assets/css/custom-fonts.css?ver=20180413","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.254Z","timestamp":1787551217254,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/themes/tortuga/assets/css/custom-fonts.css?ver=20180413 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 May 2023 20:57:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 556\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4179,"size_decoded":884,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8a94daf027edd4767b2480085205d443","sha1":"0bc6c1e98cc1f31e7aac95853d84a293eff1b874","sha256":"d229a0b3558ebbe45a1653dee9fc9f5e0b2d7d6a44d4ca95a1e8dbc797e208c5","sha512":"906236176460116af89ede257bccd6925fa50b50ce8ec903d7c7533766f1bc9bef9732770760d30aaec30d2b48e005942b8cc5174398945814e80b4e9d23a814","ssdeep":"96:KhlWHAHwFJVQgFczhfcEft9yUwflfi/ela2:K/WgiJVQycz5cEfAjh","tlshash":"7a81ac430aea3a255f21460e7b7e6a19df08082a724555b2bd7e16184ff7fd8439cf8c","first_seen":"2026-08-24T05:26:26.643411Z","last_seen":"2026-08-24T06:00:50.017167Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-includes/css/classic-themes.min.css?ver=6.2.11","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.256Z","timestamp":1787551217256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-includes/css/classic-themes.min.css?ver=6.2.11 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 May 2023 21:09:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 163\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":292,"size_decoded":491,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"5b5c1b5f5f2abec9521f6fab79535b3d","sha1":"43ae1f166375b25867dad9dd7d596b84c34446a9","sha256":"4bb45c55ac10b6e1e21baed7183b47ba0bbe90cb893449dfdc2308ac02ead264","sha512":"54eb0bfd9b6659d8d0b0f1df97ce70ea4487c4e90538576a53a5a699189685d6a4c452c417edb43cf449eb598ca517ecced02b973a1469dc58561e4ce3948e9f","ssdeep":"","tlshash":"5be02bd1769f14e1701fe25c4515458990b50180c8b3aff1e4dbf0dee6e90f926ea68b","first_seen":"2023-06-26T15:34:53Z","last_seen":"2026-08-24T06:00:50.021228Z","times_seen":57,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/plugins/cookie-notice/css/front.min.css?ver=6.2.11","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.270Z","timestamp":1787551217270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/plugins/cookie-notice/css/front.min.css?ver=6.2.11 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 15 May 2023 20:19:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 967\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5334,"size_decoded":1295,"mime_type":"text/css","magic":"ASCII text, with very long lines (5334), with no line terminators","md5":"42d1ded165ef075d4a34f90debfdfc93","sha1":"9d4f1473e17840cb173e1e2070915e885591426b","sha256":"f158b8591a08b6c02bb345ae96dd62f0c632f7f635bb4a5f449fce24bdc11789","sha512":"4d96f79f43cf2bd1c86ebe02c1947ef71c4494a24b22daa5f55580771b3ab21480b70270adaf71457c2c98a70f33472fc7f1607ec637582482de30369f8c051e","ssdeep":"96:HP7YUcsW/NOajf4mns7KDBLNd/k93ik8oLrWrzrsrZ0:v7rQns7K1L1","tlshash":"d6b1215eba85034c51e7961196d84a98672bc87bd0b21cccb24ab02a8fc7fcf3748557","first_seen":"2023-04-05T05:06:34Z","last_seen":"2026-08-24T06:00:50.021698Z","times_seen":2091,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.0","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.273Z","timestamp":1787551217273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.0 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 May 2023 21:12:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4599\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13426,"size_decoded":4942,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13326), with CRLF line terminators","md5":"739a203540a8f98b07dced831b76043e","sha1":"be9f2ac08882a338aa8ea547aba7e5f66bf6fa43","sha256":"e0b7a99767f80b6c187a7f473c4ee3e0b7bf1c896d917e918c7b7a97ae5aa79c","sha512":"e7557b154810f399e98b6d6a59a4b512031ac8c58a606e61067d1ead7fdac7d2b7b3847500644142f8060408dedd9b23f8a8e94656cf2af7f643210de654af42","ssdeep":"192:amprDN+e3IUefKSfI0bP1CMjt9kdgOFWIa/aC3+sZv9LRb:amprx6PfK2P1CMjt8FWIa2sZV1","tlshash":"3752c86db566b9714eb732b9f03bd30b71b205cd5a0d8940d19cc8f6287d89e812bf68","first_seen":"2023-03-11T16:20:15Z","last_seen":"2026-08-24T06:00:50.0222Z","times_seen":401,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-includes/css/dashicons.min.css?ver=6.2.11","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.261Z","timestamp":1787551217261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css?ver=6.2.11 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 May 2023 21:09:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 35106\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59017,"size_decoded":35436,"mime_type":"text/css","magic":"ASCII text, with very long lines (58981), with CRLF line terminators","md5":"199ab254604eef2d0f2d0212ad55d512","sha1":"cfb4b3fe7a9965fe5a07ba1ff1f681147aca1fc7","sha256":"128e27fe89ce384324a1b93577abd5f36833e6f8c29b0547370655dfae9646a0","sha512":"0c35d957c1799190525476cb8f6cf2d7703fd2d17cdb553437f5bc144169038756965dbe996ad21ad6e27065e8ccb8f81a8aa8b1ec9d482bef60c23cb7ac729a","ssdeep":"768:Pey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5rJq:Px/ZvB/qPWMiquqioMUXQSJYIMW+rJq","tlshash":"9043c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2023-04-21T01:45:03Z","last_seen":"2026-08-24T06:00:50.022656Z","times_seen":695,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/plugins/simple-social-buttons/assets/js/front.js?ver=4.1.1","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.275Z","timestamp":1787551217275,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/plugins/simple-social-buttons/assets/js/front.js?ver=4.1.1 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 15 May 2023 20:20:05 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1877\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7483,"size_decoded":2220,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (360)","md5":"353de2f2d4428fdc1a02d1dabe1a3abf","sha1":"25d4e879634c743cb151ba4beae1e4aabb9c9606","sha256":"e0447c33437b68ce8263e7ce898c532cb1676e1dfc94662aea3300263e425265","sha512":"3b6f8001bbe57a59f50f32c757b02a0c49b889aa0f7ac90caea143d51d5c93d61d8ce6c39ab9f4e616d66ad7783f6caf017a97966217eb3766992d3fc9312b74","ssdeep":"192:ned6bf2L3+N+Ua9qfpNandiCK1F3MrEN9Hhn6Rir3yrWNlcldCfBEtSAVJ+1Hmps:ng6bWEN9B6RyyWNlcldCfBEtSAVJ+1ws","tlshash":"a5f11255b7e913152e3b34e20b5fb758ba19844bc049d8d9f42f43883fa03be21792da","first_seen":"2023-03-07T12:09:24Z","last_seen":"2026-08-24T06:00:50.023181Z","times_seen":148,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-includes/js/comment-reply.min.js?ver=6.2.11","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.281Z","timestamp":1787551217281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-includes/js/comment-reply.min.js?ver=6.2.11 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 May 2023 21:11:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1226\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2982,"size_decoded":1569,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2946), with CRLF line terminators","md5":"ebe1642d5d453454bedcb4d4a907747a","sha1":"ec867e9f141b4cf951952920b0cdba33bdfc7cb0","sha256":"b9f5043ae6ce389972c4a751929465ba7401c0c73340e9117ed281d32099619e","sha512":"e4978709e20ff022a56294d3e2ef9fe88c7732cac9e51d04a5fc3b9ab265acdcfbb6f54a7ff660baef8bc78400bacd0df6b25694bdd74d95cb864b69b8505a63","ssdeep":"","tlshash":"9451b8d433c95d362a8373355eff530261722709b50804608816c86521bcfd963b67fe","first_seen":"2023-03-14T17:33:38Z","last_seen":"2026-08-24T06:00:50.023997Z","times_seen":20,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/uploads/2020/06/cropped-logorestuts.png","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.289Z","timestamp":1787551217289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/uploads/2020/06/cropped-logorestuts.png HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 May 2023 20:58:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6364\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6364,"size_decoded":6649,"mime_type":"image/png","magic":"PNG image data, 250 x 108, 8-bit/color RGBA, non-interlaced","md5":"623145a2cec84012dab02fe88d882933","sha1":"64c49342320b2944026fdf711cc7770b64827c62","sha256":"b9691f3d9df799fc10b126d5045f587b497bfa7d7a4dcc2bb27e79a2b588d0be","sha512":"95ac6295cfed6aa234e48af4bf3b58b80987c772be1e8d296057e98ef3a92d290768e2b0762f01bc57039091545c94e2c6952d94a935c1fa0a0112b48fbdf035","ssdeep":"96:QuN0cUGCtC52A9tH1Y4O9djAOP9AHW21lCspQOSgZnK998kRXFt+RgoMdq6P62hP:QuNxUG0W5O9B7OHDn1Rg9OKXmGZyAN5r","tlshash":"20d17dd54b83e99c679b127c820843252b61f566c8a7fc90682b555a098d7083cba4fe","first_seen":"2026-08-24T05:26:26.615641Z","last_seen":"2026-08-24T06:00:50.025242Z","times_seen":2,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/plugins/simple-social-buttons/assets/js/frontend-blocks.js?ver=4.1.1","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.271Z","timestamp":1787551217271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/plugins/simple-social-buttons/assets/js/frontend-blocks.js?ver=4.1.1 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 15 May 2023 20:20:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 0\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":295,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T01:40:43.275174Z","times_seen":18088007,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.6","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.279Z","timestamp":1787551217279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.6 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 15 May 2023 20:19:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3918\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12943,"size_decoded":4261,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12943), with no line terminators","md5":"5bc2b1fa970f9cecb3c30c0c92c98271","sha1":"7c6bb87aaa24714b7b3b3c86dd932736a80270a9","sha256":"1060091178cbd6c843b802f516f230f1a3a1e85f1afbd6ef84d80e5430ba457e","sha512":"1b39c7152e6561c6108a36e5b89a635ce1ef883ef683b4fb4e58d32bf2a7f415fb1df4695562d2e8acd85a3bf5933071294d5a1d162993930a5dc7851b9a5ed3","ssdeep":"384:Ie8sHDZ/J+oHewgOQGp/GJ3eYE3kfn3GVqv0s+pfYm03pYg:Ie8s1/J+oHlgOXhzYE3kf3wqv0s+pfYH","tlshash":"3f42c6e1832551721eb606f390e513d1a66576adf44bcaa0e498dd2a18bccc324f3fb7","first_seen":"2023-03-29T21:17:20Z","last_seen":"2026-08-24T16:55:53.024947Z","times_seen":27336,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.6","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.258Z","timestamp":1787551217258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.6 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 15 May 2023 20:19:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 878\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2859,"size_decoded":1206,"mime_type":"text/css","magic":"ASCII text","md5":"0e4a098f3f6e3faede64db8b9da80ba2","sha1":"65b9b3c849f3fbdd783ddbfb183616ff55c7ee53","sha256":"ab21762c3f447aa08cbefd5ea3866165f925bd5058a9ae19e23721462de6fb60","sha512":"47cf04b377c4d5d512ee93439d17d21f6e0c5011e3cdc9ebe2835c91b6bfe7d5b3e4e23dd8c00017d7b235d08a8524a103edf3a199c8b1d5cb9a182d8d5eae73","ssdeep":"","tlshash":"ab510264660028504bff92d77ea99b047b6e7481ce1faf97b0c21a7c5b782851223e5e","first_seen":"2023-04-05T02:48:12Z","last_seen":"2026-08-24T19:24:13.029186Z","times_seen":24750,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/plugins/custom-bulleted-lists/css/style.css?ver=6.2.11","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.262Z","timestamp":1787551217262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/plugins/custom-bulleted-lists/css/style.css?ver=6.2.11 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 May 2023 20:36:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 386\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1337,"size_decoded":714,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"adf64d8568b0f5429a468ad985a10324","sha1":"cc093a99e8e326489b4de2c4bef977a860cf829f","sha256":"a1bf4f84855b629c09345a90dd197a0e3924ea4381665314fb6392b12348b36e","sha512":"ba3b1c8dbfec2218ec37af2796ccb5668fd902a2447007e655d9594428416ffae99f7770cabb46a7579070e8c5b4b59b5578af4045b2be5f49460de6a8fe384d","ssdeep":"","tlshash":"00212cf9e669019743369aedb353a762fb0c30bb8640251cb781e74c4ff00749469acd","first_seen":"2026-08-24T05:26:26.606946Z","last_seen":"2026-08-24T06:00:50.026859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/themes/tortuga/assets/js/navigation.js?ver=20160719","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.276Z","timestamp":1787551217276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/themes/tortuga/assets/js/navigation.js?ver=20160719 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 May 2023 20:58:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1424\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5391,"size_decoded":1767,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e9ac31b658ebe0691a473326aedda822","sha1":"84cabc4320248be75e116dc8b519dfa3ff5795b0","sha256":"b5e6d2b22f2bc640f9bdb100d08bc7b3b216acdaf4e5eab2f1cf8aba92bb4496","sha512":"87add14d52f0391429ee1ba87eabc4c505e7282dcfc25ae19d4c39659231c968cff732bae77dfd7e95cccb219f4a24e13d70ed8f86de9aaf0d50fd33c753744f","ssdeep":"96:3CvE/4TO2ONwvtaBo1qqhtPRq7lept7COmFCsnWvftKo+Ozf/onfC:yEwT9OfogCRqeqHos0L/26","tlshash":"34b11fc53d8f6567846bf363653dc089f83ac43292062255b5baab291e9d19003cffbc","first_seen":"2026-04-15T18:16:08.046877Z","last_seen":"2026-08-24T06:00:50.027528Z","times_seen":3,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.8","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.277Z","timestamp":1787551217277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/plugins/cookie-notice/js/front.min.js?ver=2.4.8 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 15 May 2023 20:19:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1964\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8700,"size_decoded":2307,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8700), with no line terminators","md5":"38f95416d5f7349b65699f64e6a587fd","sha1":"2ca6f6f77481c3cdbcaacfc61a56c24f3c933ade","sha256":"08756c47213d461baa3b01f42448a76d11f524470c7a34f9018733889bd4f49c","sha512":"e855ab926916cc3a9aef67e6bcac01056180650710804624452f2d2acb7ce5ce563fbdc5146d51ffe6607fbcdff8d806765d4fe14c6316ae559bb0c6281edafa","ssdeep":"96:c7FZY7QB0zRHEFjedGgSrWN06CwuEUKj4vZPTxJpEMfHBE6J0/Pn07:uYNzRHIJgSaN06lj4BPl7E6O6JCk","tlshash":"e602429c7b241b7845c781ff24cf65a079331adad8d414283436ecd28bb5cd617236b6","first_seen":"2023-03-14T16:58:28Z","last_seen":"2026-08-24T06:04:09.279583Z","times_seen":8699,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.6","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.278Z","timestamp":1787551217278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.6 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 15 May 2023 20:19:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2894\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10241,"size_decoded":3237,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10241), with no line terminators","md5":"7be65ac27024c7b5686f9d7c49690799","sha1":"241ada4a86443adc5623d1a3a8018a96d9de6d5a","sha256":"52db930f81d97113dde679cac624cb5435b56d4ac486e91a0b6692d2cb615a84","sha512":"bbe6373705c81da5c7c3c132583338b875ca76cd5f963dfba95195bd8e2710e819b62924130f49b04fc0ea07e35677580924575d62e8cbce75d1644ce5f96d15","ssdeep":"192:EajuLigkRhS1rNp7NWzdkfszvx3imWAel/L0Fx18b2Vauta2fI/OTz+UCR7:EajuLigWhS1rT7NW2fszhibLexa2VauK","tlshash":"e12203e6a197e5f0cbc228788c17c091b2bf821cb8899464fb5dccd2195cf17166bb79","first_seen":"2023-03-29T21:17:20Z","last_seen":"2026-08-24T16:55:53.024343Z","times_seen":16616,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/uploads/2023/09/eFootball-PES-2024-Hack-Cheat-myClub-Coins-and-GP-Generator-No-Human-Verification.jpg","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.581Z","timestamp":1787551217581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/eFootball-PES-2024-Hack-Cheat-myClub-Coins-and-GP-Generator-No-Human-Verification.jpg HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 29 Sep 2023 21:05:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 241096\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":241096,"size_decoded":241384,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1286x785, components 3","md5":"f71071d966d1b437849061ff1c110642","sha1":"48873e2f0c61150a29ec4531a96ae984107b51c8","sha256":"15b9b36c7f2139b6dd39d3825be1b36357a0605cdc44c976c650331b77a9fcd5","sha512":"94994ae1132f257be97ab2046e761d3aee82e048724c4f115c7f3834ca4ba3c9a3e574cc0f4a9df94104f41c532f4bff827e0796dbd14a5debd99daa5d4dc357","ssdeep":"6144:hi6YKWds3pDQITq0Pre8TvuWcXYVHLTU1:5Y5CpkHyeCTRVrT0","tlshash":"0b3412135a81ca97f92912373985332a91791ba7d94fc853b5fd50fce78baf490348e0","first_seen":"2026-08-24T06:00:50.02912Z","last_seen":"2026-08-24T06:00:50.02912Z","times_seen":1,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":257,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/uploads/2020/06/cropped-favicon-192x192.png","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:18.085Z","timestamp":1787551218085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/uploads/2020/06/cropped-favicon-192x192.png HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 May 2023 20:58:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9968\r\ndate: Mon, 24 Aug 2026 06:00:18 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9968,"size_decoded":10253,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"897050e3b3366977c219c6c339385451","sha1":"a63e7e28f18735043e449568572ea2f5c27db297","sha256":"d716e4a3c33788577feda67d96d658785d702ee6a3d076459e3ba60e1bf5946b","sha512":"75be6f1b0dc0dfe6b3ced28b4c880d281da16f50536bb45ec8de35c6393365c318ea9b57c50d3d3d437c9a89384fc53b2c2565d12b8310dfc519edbf2dfbbecb","ssdeep":"192:1P35SGK29NMjCVJj164qejFx1sMVeXGoJ3URpyM+xxXFvltlBhhv66:1v5Sp2/bVJj44qenbVoG43UzgLBhZ","tlshash":"af229e94e5b61a2e7829b5e178373cdc4c726c096533601bc6cfb92f74289fa1a7b502","first_seen":"2026-08-24T05:26:26.638952Z","last_seen":"2026-08-24T06:00:50.030018Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/uploads/2020/06/cropped-favicon-32x32.png","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:18.086Z","timestamp":1787551218086,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/uploads/2020/06/cropped-favicon-32x32.png HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 May 2023 20:58:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 905\r\ndate: Mon, 24 Aug 2026 06:00:18 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":905,"size_decoded":1189,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"95fe07f51ae29f4cbcf8244a17bbe199","sha1":"1c049607d6ce669422433750c578ed08491137e2","sha256":"24550b4666fa1779b77fbe5d096d0ac1ef9a2c0c923db77380a5890b05329ef3","sha512":"5ad2a1b6822462d2f6e9625373616bc11e0c9bbf5fc2fe4a26409a50d5768a74e0f3a89763e68c4413f41c6df5c38886603252cf526af39334898185238a4da2","ssdeep":"","tlshash":"6f116330a6fbdc95e62d3ed668410a429ee6cfc9692c0c88c2e6425124cac230af46d2","first_seen":"2026-08-24T05:26:26.628945Z","last_seen":"2026-08-24T06:00:50.030585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.4","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.272Z","timestamp":1787551217272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.4 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 May 2023 21:12:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30374\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89817,"size_decoded":30718,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"e407e57f40d249c37f8a1721c4d634fa","sha1":"55b6478ecb3900125722e8aa1bf548adfec4fb08","sha256":"aac18687b81b4b4a5fc589b9556b76aa14f8eeb44b7a92c3fb1254bed0476b10","sha512":"8ab19334d9298f94e97e66188026f5dcf9a177dad757ef21b3c301fc115412ad8976a9fc45e3e84b9bb571a57ac67d59dcb370e8afb002214322f3e7c5c0a9e3","ssdeep":"1536:VjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvy:VeeIygP3fulzhsz8jlvaDioQ47GKz","tlshash":"e893f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-05-21T22:14:06Z","last_seen":"2026-08-24T06:00:50.031386Z","times_seen":58,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/uploads/2023/09/eFootball-PES-2024-Logo-900x400.png","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.291Z","timestamp":1787551217291,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/eFootball-PES-2024-Logo-900x400.png HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 30 Sep 2023 05:34:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 360248\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":360248,"size_decoded":360535,"mime_type":"image/png","magic":"PNG image data, 900 x 400, 8-bit/color RGBA, non-interlaced","md5":"b6199f89b0cd9f8fa233a6c11350275d","sha1":"1a87b2837cfeccd0f8ce9071ce6b5da6f9b49400","sha256":"82d932f981e646ce7e595d44da1605d15955638f147789d60bc4db35c84a56e8","sha512":"cefd6f049e685dedff444b4ffacdf1b24ecf33671ec6fb1d852dccbe03967bfb00d25356244b70425969c786f3848781b1b0d63f45ae148f6936bc28b0c9eff4","ssdeep":"6144:leiF5x1A4uM0wxDAzRShaJCrHZcyqi4x4zpgtlK5gRw0z7r1aktb8Xqv8zj0:16ffi7rtfXzpOzw0Xr1/vvWQ","tlshash":"8f7423fadd35c5020816adaecba641e644c3e99e6fc4463acbd39d6dc2d855383c3638","first_seen":"2026-08-24T06:00:50.032071Z","last_seen":"2026-08-24T06:00:50.032071Z","times_seen":1,"resource_available":false,"data":null}},"time_used":770,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":544,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/themes/tortuga/assets/fonts/open-sans-v15-latin-ext_latin-italic.woff2","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.574Z","timestamp":1787551217574,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/themes/tortuga/assets/fonts/open-sans-v15-latin-ext_latin-italic.woff2 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/wp-content/themes/tortuga/assets/css/custom-fonts.css?ver=20180413\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 09 May 2023 20:57:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18072\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18072,"size_decoded":18359,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18072, version 1.0","md5":"7131a88d0a6fdeedd782ffe1b680b988","sha1":"c09f306e1644302d2be3659aaba2994c83a62170","sha256":"d19240db8ad56c528dec609e35e6c5bff30cb7e6e55e9fc98f0810965b401d25","sha512":"5b332021bc7e884643d26c08051c6e75959606e68cdf308e2841ef5627a688951709acc4697f24a5b49183ebd948be53687b134f0319c4d18134049ef0781fb7","ssdeep":"384:KIsZGMrtBSJ2fV07OGoYyPHhpiderYRPvi13SF:AVtA2fn+yp8PPF","tlshash":"4f82d1d07b4c388dc18f635173602543d3626e26b485efb4a36067ad142a99fbef0cd0","first_seen":"2023-04-10T16:23:38Z","last_seen":"2026-08-24T06:00:50.033159Z","times_seen":213,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/plugins/simple-social-buttons/assets/fonts/ssb-icon.ttf?eahqa2","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.575Z","timestamp":1787551217575,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/plugins/simple-social-buttons/assets/fonts/ssb-icon.ttf?eahqa2 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/wp-content/plugins/simple-social-buttons/assets/css/front.css?ver=4.1.1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 15 May 2023 20:20:05 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4239\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6136,"size_decoded":4568,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, ssb-icon   ","md5":"f1b1d862a569bbf26afef363472464ea","sha1":"5649aa27d2572f5597ef594d11eddd9bd8c2164f","sha256":"65effed019c96df30638340081f21c1fe64e87f1230ddb0d48e2e8b763dbd131","sha512":"89b07a06bc4c2bed576c4950d7748b943804459d6917bfc40d16eb6ae1032570575135ae42f64768250aa30ae130c1e6f7447d0bac116d0d6df596a97155ea53","ssdeep":"96:z764zSPJgUHsEIUJLU8FW0l3UUMtIaV0Zmpp1ffew0/qyGcOVGxmdtNysN3r5DG:Kga1sEIdh0l3UTtI9Ypfffl0/qyGcwxI","tlshash":"f9c1e782534acf9fc09186b04e05b3c24fd7e943db6da35181cd9d586458be88c3cbea","first_seen":"2023-04-18T02:52:43Z","last_seen":"2026-08-24T06:00:50.033668Z","times_seen":99,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-includes/css/dist/block-library/style.min.css?ver=6.2.11","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.255Z","timestamp":1787551217255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.2.11 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 May 2023 21:09:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11778\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":97527,"size_decoded":12108,"mime_type":"text/css","magic":"ASCII text, with very long lines (48325), with CRLF line terminators","md5":"b2141216670fa85722abf850f7088199","sha1":"8f8b763666df34315a93e21f65c905523d53e3f9","sha256":"e2c65da091e1f2ca5a1c23f0a092ad0052bf2abcd4291097f8c059c3db7f4fb9","sha512":"193df5f6f93cf3ca2669abdd654a71ceacca896b20cade808c1b880d4a7b2da031375ecff4fa0bd5f49596cb57b28fbf61b21e0c85cf2cf40e72f42491ed4d27","ssdeep":"768:Fi44/Jj1eJYfD5n4CT52u5SEb+UQ3ZoQsFvc7i9bGUg5zyH5Hi/UYvcHLrbuS/KT:AheJYf642u5SEb+UQ3Zo/xHHgf1E0Qz+","tlshash":"0893305417b0dcf939ffa73a5e5ee248a513aa41c24a9be7e076d190614ca490cf3b0f","first_seen":"2023-06-26T15:34:53Z","last_seen":"2026-08-24T06:00:50.03495Z","times_seen":34,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/plugins/simple-social-buttons/assets/css/front.css?ver=4.1.1","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.263Z","timestamp":1787551217263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/plugins/simple-social-buttons/assets/css/front.css?ver=4.1.1 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 15 May 2023 20:20:05 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9680\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":98192,"size_decoded":10009,"mime_type":"text/css","magic":"ASCII text","md5":"d2d7f8726472601a2442024af9673a52","sha1":"f696e5b362a385c6e47eae7a60089e068f7f9734","sha256":"75c39aaddf3285a4a5fd9327549d9e3aa80d91cdfb2f2b1dd21ef67885a1d9ce","sha512":"4b8277db8de4c7689bd9af18a0528d188650e984339dbe3302bf15f6f1d650e8062d30d8493c91818653d66bc4abbde22c9916ac5ca354d12100df478625da0b","ssdeep":"1536:NtluOmsCVLxZRl3vpqaqG8s2YY0733h1Br1pUxl3WOzItOjjB6f5dEKgK7gw+mU+:NtshlSz7h/Y/","tlshash":"dea3dd9aa7ad0304330fa8942643df792f284057d849e67975ad14da7bc63fd00bb29f","first_seen":"2023-04-19T14:44:14Z","last_seen":"2026-08-24T06:00:50.035473Z","times_seen":100,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/themes/tortuga/style.css?ver=1.9","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.265Z","timestamp":1787551217265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/themes/tortuga/style.css?ver=1.9 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 May 2023 20:57:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10032\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60826,"size_decoded":10362,"mime_type":"text/css","magic":"ASCII text, with very long lines (368), with CRLF line terminators","md5":"7e80ef736f682c0d58ab7bba30ab6573","sha1":"60f950ae6a0e210802bd28f40467d65f5b4e122c","sha256":"57ae6568e6a3ba9afc5abfe8a7700689f71c3abf7b492443bdba3a58b8fe391f","sha512":"096179fef14e98e3e4a197671447471fadfc14f775f728032cc30dec765a332195705b125935eb5e076359d111da5f4b2f422cbc55643a333cd8dfbe9b951450","ssdeep":"768:1H/JvcisOYGDEcrL3auiPN4sJwe2VVoreDHVl9v+PP+RRENDAuPMfoYmrFiakKRn:1H/6Q6XkuOr4AsROr4z","tlshash":"ac5353a86f97244a970bdb55ebf47ba1de500070df0b41fcb4e0a21492c5ab926fd38d","first_seen":"2026-08-24T05:26:26.635987Z","last_seen":"2026-08-24T06:00:50.036294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/themes/tortuga/assets/css/safari-flexbox-fixes.css?ver=20200420","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.266Z","timestamp":1787551217266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/themes/tortuga/assets/css/safari-flexbox-fixes.css?ver=20200420 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 May 2023 20:57:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 201\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":483,"size_decoded":529,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"eac5ad4fb87e70ed99b72a82f2850696","sha1":"69513460c00f76b53582643d051de27794daefae","sha256":"03bcf197ba110d9dab47b258e0cffe02cd996474882f3c7f4e144d5973772901","sha512":"52fe0a4a40ac7cde5520f6308bd18a9449f5732cd9b07ed0c9091258eedd3df00ce1964511cc49cef65a01032e326a7930892883afa12c1e70e379acf1892306","ssdeep":"","tlshash":"5bf02e8e5b232109ab67272fc3781c07ac685877d917a1cf7840c900cfd4e464526d81","first_seen":"2026-08-24T05:26:26.60976Z","last_seen":"2026-08-24T06:00:50.036858Z","times_seen":2,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/themes/tortuga/assets/css/themezee-related-posts.css?ver=20160421","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.269Z","timestamp":1787551217269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/themes/tortuga/assets/css/themezee-related-posts.css?ver=20160421 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/efootball-pes/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 May 2023 20:57:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 858\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5664,"size_decoded":1186,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e20d58142cce12ba208913c035caca66","sha1":"ce2b910010e91c735c15aac12ff7ecb8c4f94f4d","sha256":"ed23aa6a6b56f6a16535fcfb67919d77080efd36fdd46209bd2e5bc23d04e3e4","sha512":"2107085860d8374456771d29b54d5970cf55b70254b83cd27270a90c35a4956459750c3f1e6fc6f1f7236e5acf53088e1f6cc068c000d424ead155e93953f24c","ssdeep":"48:A/w2MFzrBuERedWzrlsbEDpA9sAeTslsPtOTeUHo81T87t8WsTpYe5uHugtMOe8h:xFU6nP2aV3Eu9XgrYJcE","tlshash":"f8c1267a1e320c095f46fbc3eafd1ec6cd044832977544f43a94fd086e9aca7486e6a5","first_seen":"2026-08-24T06:00:50.037725Z","last_seen":"2026-08-24T06:00:50.037725Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/themes/tortuga/assets/fonts/titillium-web-v6-latin-ext_latin-regular.woff2","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.571Z","timestamp":1787551217571,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/themes/tortuga/assets/fonts/titillium-web-v6-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/wp-content/themes/tortuga/assets/css/custom-fonts.css?ver=20180413\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 09 May 2023 20:57:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18020\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18020,"size_decoded":18307,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18020, version 1.0","md5":"0c4a773d62593e97c460207d3dbb0b62","sha1":"9ab0601f839a5ccbe83469505b18f7d1feb11471","sha256":"10a0b293d1d46ce9853549ea0dbecb22208e19c9a78ac6a024e7b2642a657e82","sha512":"294cf246d2e7d50c098b49163582f018982b2d15e21290efc97904a40d76b4c4c5f196b6654341ad453fec7bb239c50a4541935a72a4488287b3de6ed9d63b18","ssdeep":"384:dyekZxcDtdzI0LlT2PNCRVoni8gqxxO2LwITOYeunTi+bZ:dyeCcPI0BT2iCiQiWuuV","tlshash":"8882e1a1517ba349ff6f0c7e5745d6a03eca73eb384902382242c13b03b8157d6dd81a","first_seen":"2023-05-07T18:04:58Z","last_seen":"2026-08-24T06:00:50.038655Z","times_seen":133,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"restuts.com/wp-content/themes/tortuga/assets/fonts/open-sans-v15-latin-ext_latin-700.woff2","fqdn":"restuts.com","domain":"restuts.com","tld":"com"},"ip":{"addr":"194.145.209.27","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://restuts.com/efootball-pes/","date":"2026-08-24T06:00:17.572Z","timestamp":1787551217572,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.restuts.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 12:18:48 GMT","end":"Wed, 28 Oct 2026 12:18:47 GMT"},"fingerprint":{"sha1":"C4:89:00:56:5E:16:FC:37:F2:92:B0:C7:80:7E:D5:EE:F5:4E:84:13","sha256":"EB:90:0D:F8:B8:73:C0:92:B6:17:51:3E:28:A5:4A:DF:3D:94:FF:88:29:2A:8B:09:22:E7:40:B5:76:8F:D0:AF"}}},"request":{"raw":"GET /wp-content/themes/tortuga/assets/fonts/open-sans-v15-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: restuts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://restuts.com/wp-content/themes/tortuga/assets/css/custom-fonts.css?ver=20180413\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 31 Aug 2026 06:00:17 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 09 May 2023 20:57:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19504\r\ndate: Mon, 24 Aug 2026 06:00:17 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19504,"size_decoded":19791,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19504, version 1.0","md5":"15df1fb3e82321d94a0ca758c62e25d2","sha1":"9fce105a87ee8b8bef404942cf48c42ba5ea1ac2","sha256":"b41570405890d4f995da7b265ceb5cfb50246a940f9489525a8f526cfd160356","sha512":"6e18ebebd7d7101cd04394595e4243abaebac2894ec303978b8fcb892a2922539c945ee5c549470ce79e44dddb25ccedc03fff272fcda17883c29b504e5de2d0","ssdeep":"384:KWk+vnODEWhu86rzW/9q/6ylmKZE+dxSIMa01beTMXx0AR:KW3nkKrS/GBlmK2czx00c1R","tlshash":"e592d0586ba19d6fe8c7986fe89b5a5f0a897b08875df4045470a30af930cdc9431e30","first_seen":"2023-04-07T00:04:55Z","last_seen":"2026-08-24T06:00:50.039145Z","times_seen":2177,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"restuts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}