{"report_id":"3cb68fc6-dd0c-49e0-8a9f-a6d8d7ef13cf","version":6,"status":"done","tags":[],"date":"2026-03-19T00:21:39Z","url":{"schema":"http","addr":"mobilelegends.gratiss.xyz","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":0,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"title":"Mobile Legends Diamonds Generator","dom":{"size":27486,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2366)","md5":"332990ac03432543b6fb653033187057","sha1":"0690f009dcb56fc0febd23f4991e70c4877bb33e","sha256":"6d39ed17f536dc579723e50ce4dce012711803b34f7b65d3a24e924d975fd0f2","sha512":"5ec7e4e6eae0c328313daa7de7520e7b762ac43dec69af34a5c615222a044fa3bd293ef95b92a17bf65dd222faf98dcc15b473a68d514d1a59678a058a0c4509","ssdeep":"384:bUDsIDEuvKpRK/Z4g8Z7L2s7sf+JwXCFxRLgwL:bUZgrpQ4g8Es7sf+JwXCFxRLnL","tlshash":"48c2fea4c6f904365157c0d1baa17a0f2eb49907cb0e060d72fc0be56fdbd86d86396e","dom_hash":"domhash70071852b7d4688ac3467e89e2d695e3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mobilelegends.gratiss.xyz","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":0,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-23T00:21:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-19T00:21:15Z","timestamp":1773879675,"ip_dst":{"addr":"Client IP","port":50114,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2026-03-19T00:21:15.424451+0000\",\"flow_id\":2007256211876363,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"142.11.247.237\",\"src_port\":443,\"dest_ip\":\"172.18.0.15\",\"dest_port\":50114,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=www.fallout.gratiss.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R12\",\"serial\":\"06:89:E9:AA:12:E9:F6:88:3C:39:4E:42:DA:B4:4F:9E:48:26\",\"fingerprint\":\"24:ea:67:6d:d8:94:64:29:ea:9a:60:44:ad:12:db:82:ec:5d:3a:ee\",\"sni\":\"mobilelegends.gratiss.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-03-18T04:14:16\",\"notafter\":\"2026-06-16T04:14:15\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5b94af9bf6efc9dea416841602004fbb\",\"string\":\"771,49199,23-65281-11-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1218,\"bytes_toclient\":4106,\"start\":\"2026-03-19T00:21:15.027147+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-15T22:16:12.279722Z","alert_count":0,"request_count":3,"received_data":65991,"sent_data":1660,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rendozguides.com","ip":{"addr":"94.23.67.154","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2019-01-19","domain_rank":0,"first_seen":"2026-03-19T00:21:41.086248Z","last_seen":"2026-03-19T00:21:41.086248Z","alert_count":0,"request_count":2,"received_data":776,"sent_data":841,"comment":"","tags":null,"fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"i.imgur.com","ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":3309,"first_seen":"2012-05-21T08:09:36Z","last_seen":"2026-03-18T22:02:47.667129Z","alert_count":0,"request_count":1,"received_data":107306,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"mobilelegends.gratiss.xyz","ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"domain_registered":"2017-04-11","domain_rank":0,"first_seen":"2026-03-19T00:21:41.084442Z","last_seen":"2026-03-19T00:21:41.084442Z","alert_count":111,"request_count":37,"received_data":1457967,"sent_data":17060,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:4.6.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:2.1.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootbox.js","description":"Bootbox.js is a small JavaScript library which allows you to create custom modal dialogs using Bootstrap modals, without having to worry about creating, managing, or removing any of the required DOM elements or JavaScript event handlers.","website":"https://bootboxjs.com/","common_platform_enumeration":"","icon":"Bootbox.js.png","categories":["JavaScript libraries"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Backstretch","description":"A simple jQuery plugin that allows you to add a dynamically-resized, slideshow-capable background image to any page or element.","website":"https://www.jquery-backstretch.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics","JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-15T22:19:58.945817Z","alert_count":0,"request_count":3,"received_data":5354,"sent_data":1366,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.rendozguides.com","ip":{"addr":"94.23.67.154","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2019-01-19","domain_rank":0,"first_seen":"2026-03-19T00:21:41.09292Z","last_seen":"2026-03-19T00:21:41.09292Z","alert_count":0,"request_count":2,"received_data":783,"sent_data":849,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/jquery.noty.packaged.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"11e473ecf73535a56e73ac14b781dddc","sha1":"83cfa0b74ead5b55b8083ee6e487d71492b02bd1","sha256":"93ec2f7a40353c82614d6c184ef0987fcebd48b8180a149e6cf5d3aea4580f02","sha512":"2880bebf592765dec048cb8d85c0e7f595058efbcbed1e9218570af9d8ea71821a09aa5992c2cde5f56b994c5060cca89cd9dae57e01ccdcd329257c78c73533","ssdeep":"384:xwmYJ9dWC5fGXxIVP5I8QiAXv1C26mOABzI044NAwkoG6hYWMJf2hDWZ:amaIIVhI8pANk4fG6WZUpG","tlshash":"51b2e8ce6859232041b7d69ff0dd6a096870e573994d15393abec7e2dc30c4822fbb68","size":24881,"data":"","first_seen":"2023-03-10T02:04:40Z","last_seen":"2026-06-09T02:30:06.62179Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/dynatexer.dev.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d57464b7dabfa5fcb1cd918b5f2de245","sha1":"3d44696abb5e2fab174956620c1f3b36bc0891cb","sha256":"93620b642732d18a1ba19b384e217c7268495fbc1cb14f9b6d43bcdc54750dde","sha512":"beeae1640ca10124549d6b4ce1b87092335f1f2ddd5a0513401873ba05a2e6fb441c68647ad6c590cbe778f0346bbdc9f0a2c0e9e4bb8a1dd29150119dfa1d09","ssdeep":"96:Lpfa1rqI7Kym7IXbuHiWZtuNWZt8b+S8i+QkqpiX8fRh29FMDeuGVLWjv7Xwuwb9:9faKr8C8CBhqcX4w9FC3GVLQUfh","tlshash":"9112ed9cf78d2497832872258c1f14cd553ef5b3e8868c6f7c58209cb8e096da276e75","size":9492,"data":"","first_seen":"2023-03-14T03:56:32Z","last_seen":"2026-06-09T02:30:06.598057Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/bootstrap.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fb3a932747299f7829de9f6d26ceef4","sha1":"26ca6658a64de26cb93ca6ceec20cdec138e25fa","sha256":"bd6c4ad9b6e567c960121b915947e74adc2befe428dbbf86df1751c2f252941c","sha512":"cec3c3b3a1199d06ab5775b3db869e3f514cebb7d0f74ae60117b546578185666757619c9c439d1f87dc5970ddea0b11f16598e59f17a5257554464d482f868e","ssdeep":"768:p1+7/uRE672wlNrDMlbGqXYu+jS1s8ep0s1QfrXf8X8GfpZOWQ:/FRx7zYyS1WOv8vpZDQ","tlshash":"a1f28546b230316107efb1e5515f020e72396a6ee90690bc78a5daf63db9c48317bf39","size":35431,"data":"","first_seen":"2023-03-07T12:04:51Z","last_seen":"2026-06-09T02:30:06.59137Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"32015dd42e9582a80a84736f5d9a44d7","sha1":"41b4bfbaa96be6d1440db6e78004ade1c134e276","sha256":"8af93bd675e1cfd9ecc850e862819fdac6e3ad1f5d761f970e409c7d9c63bdc3","sha512":"eda31b5c7d371d4b3acced51fa92f27a417515317cf437aae09a47c3acc8a36bdbb5a5e70f0fbfd82d3725edf45850dde8ca52c20f9a2d6e038b8eaaceee3cf1","ssdeep":"1536:AP1vk7i6GUHdXXeyQazBu+4HhiO2wd0uJO1z6/A4fGAub0i4ULgGiyz4npa98Hrb:z4UdWJiz6UAIJ8pa98Hrb","tlshash":"a283d6d9b2c67062977734b851bf410bb17a98dab80c8c60f0a4d4e47eb4a8d517bf2d","size":84320,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T16:57:41.25068Z","times_seen":15308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/jquery.animatecss.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"66ef29f05d8698a52e9e578fa051a1db","sha1":"c9ccf70c57b73ac39779d3bbf41f3ca6acbfb049","sha256":"c2ef1adf8d9b5a7d93ee4a915e81969f9767ba4f9f8acb3a59a1b68b85297b29","sha512":"8933fffcbf5012d20f5b5715e3593ca00e36d17cf70c3e7647ec0c486071932d83c18fed22798b3675855f48004a220bd2a834a50ec0cca91caf3f5b6b8577b2","ssdeep":"","tlshash":"a521f6c9b052b146475bb373803f5107b53a68e0e44c1978b87a51c9bf199489b23f3d","size":1112,"data":"","first_seen":"2023-03-14T03:56:32Z","last_seen":"2026-06-09T02:30:06.626715Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/outdatedbrowser/outdatedbrowser.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"156c6e0f3311c5d0595bba8049da2143","sha1":"541a49dc8e556636f9061fc6ce7b882220bcf685","sha256":"299fe0b3ae446ae8b7b893dd5de69edc88b63cf307ea6b4e4d820fafd4312acf","sha512":"e2cfe9ba4dcab57d2666025658776d21e2d3e535d358550b57a26ddc075f0ee4af01d1a35c40060ee8797621b9fe7cf62dddf18b64ec1709df8448596c982fd9","ssdeep":"","tlshash":"5c5122c67093a411af07455da0adbe08b41b1d0d5a8266e8732fb6b3655d848e07fab8","size":2902,"data":"","first_seen":"2023-03-12T18:36:36Z","last_seen":"2026-06-09T02:30:06.596013Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/bootbox.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"791745c3a0e8e4a33f55b644cb6ff935","sha1":"7ed378ec6d9c462b6bd627a207a9db79a2b287a4","sha256":"d3850ac41c90349e6bd81273a0e8501d010ec32d772339cda673466d83db7aeb","sha512":"8adcd135e874f5b1ab252602345ca634ef08c3748853ce614688d581727a697e7ccda745d0c624d30cb87241922583cffeea5554f569f679d5b8680e23458af7","ssdeep":"192:iLnr8QmxYY72OlfojjuXBacAEkEVg3pXrzTGv6:i/8BKrypxPLC3pz46","tlshash":"a3128181e819e13326737872308f9706303ad969e65948225241e2d59ffaddc43ffb3a","size":9904,"data":"","first_seen":"2023-03-11T22:58:39Z","last_seen":"2026-06-09T02:30:06.612577Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/jquery.backstretch.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5353603da3ae1f042c3c17cdbde206b1","sha1":"8b0900baa63577b22b045568a76f3f5f0c782970","sha256":"b7dea323f4da0259b6e4f256153809958411a55c29b33cf5b06c2572e98e16dd","sha512":"9ff244288a7a18fb6fe2b30c2cdcb593f0e6bcca4b8ec039dd9cb4377b9f2df0a8fda59fac26558bb59540570949b61bc456aaccaf7db9892e943d69e2a27b9a","ssdeep":"","tlshash":"9981845b37a23143d12ae1e9520a4b05fa3658297807752efabc9df198d0d4d127ff38","size":4095,"data":"","first_seen":"2023-03-07T14:44:55Z","last_seen":"2026-06-09T02:30:06.620572Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/jquery.flexverticalcenter.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e0101529052935189cf9aaf127bf8d8","sha1":"e8ff3106288ccfa9352b33639d31d459038ea9b4","sha256":"c872b14e118bcf0a4cf689d20b9940311bb017d6fa9d5e204229d4319062999b","sha512":"49868801f67f7934bc22635774939464881d466d0e5a9286b8f4661143d26abf5c8a34697b379bfbf4b4e418de5ba9685e40425e435d4daae6e61114e7ec9ca2","ssdeep":"","tlshash":"c101bd9eb381947692ca3b3fc2bb574bb5228a2b8121f07ad33440c85d6004dab031f5","size":818,"data":"","first_seen":"2023-03-14T03:56:32Z","last_seen":"2026-06-09T02:30:06.623199Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/sweet-alert.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0aa07fba93dfb99b0f3779f21cbf7e6c","sha1":"cb19a7af3bafa8a5eca41bf2647b50c95a7e40d3","sha256":"ce3d3481cf65d3f3dde8454f7e67ee233cb619a671f43f63dd982ed08fdfd4c5","sha512":"0bed00083e888beea272bb096712c7b01e25ef5050e243ffe09db4ac2cc3988e92a5121a252f08b555be8578a002c30b318062b5f904d2d61074224fdbd9ef4c","ssdeep":"192:NjRjqj24LF0eVTmRiexzifuy1CyRMyoxhGyi/Jq+Muyrg3ymiLKp8HRlPoPOTGTr:NFWpLF0MTmRiex+fu2CyRMyChGyixfMU","tlshash":"9b22c599321431771ba365f1489f518370711afeee0588700a78c8f42decc896ea7b77","size":10423,"data":"","first_seen":"2023-03-07T12:02:55Z","last_seen":"2026-06-13T19:13:30.844453Z","times_seen":768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/faker.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fdaa9df371fd201ff7e8154e18e9a180","sha1":"0a5305fc049b1e21d2a9cdfd248f5f953f9c4a28","sha256":"7b67d1e0d47a273b76b65adcc15e00978d664d8b09c1f6b6fd86a37861f499ef","sha512":"9c48d9c25c4fc4c50eec67556a576ea3e1207f9a21e9a297225f303cc59463a3ff50fdef81c9d27f52aab1cc0e5dc097779fd9ab52c6169c1f4706dafb92da7e","ssdeep":"6144:kGA4hMMPwBZaXhsXdae7rZrwsMtoF3WibLDJwJve:O4voyhSaYlNM8hLge","tlshash":"06d409d298532b3657bc13c860f7f48c61adc17b74c6bd47a9b6c946320ad1360bbad8","size":649883,"data":"","first_seen":"2023-03-17T10:32:19Z","last_seen":"2026-06-09T02:30:06.593182Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/jquery.magnific-popup.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"df874db9336e363a9bdb35daa382e683","sha1":"18722154001e87b0626bc0de9345779320361d77","sha256":"ab7725780dc0bd1bf9517d99c5c3610ebe9393f67d750f045631880fe253c4c9","sha512":"d80b337b77ba4d53192380b60d61a1ae509d7e9d845f3831530b346b6287b19fec1fb443d7358d7d374105ab24d5574e3e9b80dd5ff0751de588e69f57518ca5","ssdeep":"384:iPhVIFQ2G2XGtqVxRQ1giFCdLtA4Tn5h5/w6l8aZwHwztLCpz3sp:iPCgC1zn5h5o1qkOLCZsp","tlshash":"c5921854f2b2b26393a335b8646f600939729953ed06c855b55e88d87efcec89027f3c","size":21014,"data":"","first_seen":"2023-03-07T12:21:51Z","last_seen":"2026-06-13T10:14:00.243799Z","times_seen":304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/main.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"605eed086c1e92710f14b0c2d174301e","sha1":"af608be9bf4643cef056c882515cfb1da0ae7372","sha256":"1af560c52c94edff115258db00d8703199cfcdc2adb0805ab194e12845a5f78f","sha512":"336ed81addbd3fe9f515abd8034f1553c3a75bafc43f388da32de2fe315d1aff0c6e9f81461a5e936b53b84b0aa933f88dc12fe381620d9120bbca45566d0e7f","ssdeep":"384:eZIjlwmKCtuEusjOh/C8xtuEusjOh/+8EeqBDhPt3483MBrLDmCVCv5gnAy3nG3S:ESC3BDbo4WLDmCVCv5wAy3nG3nUJpUUL","tlshash":"45e221b6b9d2042545a3f6266dbf5a122a700107dd0afd14fa9c4e6d3f1c82de2bb7d0","size":33844,"data":"","first_seen":"2025-12-03T09:43:26.677223Z","last_seen":"2026-06-09T02:30:06.636188Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/css/jquery-labelauty.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"558fd65267255f111445110ee1841c77","sha1":"4f83918468392732019bdd5a02bafb4a4c6102a1","sha256":"224622e4f773e26237e7f35a336e964bceecea1690126ea95ac0fb3519eb5dd4","sha512":"f77269aae96d9ff93de7025d291a23427ac129592cc6c38d80304f9bdb74e972fda6b33c290c88bff4a901f872793f3fc7c49fa10eccfea0517810f9f2c0d5e1","ssdeep":"","tlshash":"7761bc199621858cd5755077b8c7233de09d0a164302bda0d2fecca49f9ac16ff33e5a","size":3265,"data":"","first_seen":"2025-09-25T16:48:26.194471Z","last_seen":"2026-06-09T02:30:06.606752Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/jquery.countdown.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"76267a3cccade327e4dc5c039e0195f6","sha1":"39f20727bc70c4f8dbfaa066417ba69712ecc17e","sha256":"b5e61baff7e113d5a69e890bea1778be2fdffe0194cfd1d7b616a8c0a82cb83d","sha512":"880632dcdfa453ba34086be174cf641865f63509fe7f8206bad14eb0dfc2815b2d620828d8bb2fafcfd5c225d995358b892d374cce76c1e3943117fdef9f9182","ssdeep":"","tlshash":"dc6187ceb7b361c904e882a601ae1102517be15bd4d6406cf6fcadc47669fa9302f978","size":3349,"data":"","first_seen":"2023-03-07T13:23:57Z","last_seen":"2026-06-09T02:30:06.600164Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/magnific-popup.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"256bb741cef9fb35954e2616e30f1b6b","sha1":"2c0b679b8022ce0251e7bea79a6d21a6752f5e3b","sha256":"f64f968c361b328c7ffaf97ced836823866fb25214aab9276596dcc9bed1ea50","sha512":"9de2ad981e4435066945374a943a2aaf1f0aecc8eb72d7e666c29a7507ac96c37d3ecf47a89a194d57f4d5ae1e39fcfaab9e28799f3411bffb2c78c993e591a2","ssdeep":"384:g7gs/MAY6541hpzvKpGdyZ0yE9TQkh5/DAdE6Dq3M7YqjDigDH:qgkNELr9BQkh5ES6WcVvDH","tlshash":"73920894f5a6b113c7e735682b2f600d36739523ea07c891b55984982ef8dccb027f6c","size":21123,"data":"","first_seen":"2023-03-14T03:56:32Z","last_seen":"2026-06-09T02:30:06.58312Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"209bbbc9fd4440cbdec670f72d4a5cdd","sha1":"2ee422ddd1c1831a0de14ef2be18c5e2df755cd7","sha256":"ea6485914a68c701d635ae504f054d799f6d47c4326af646a8d360a242096a2e","sha512":"c8bfe32a4bcc449b75a15f7ec6ddb581009b4a51db150e8d6c6bf64aa7ddc9bff5f32840205443776cda55a89a86441ae91d468086581b722046e5a0348f9519","ssdeep":"","tlshash":"d5b0121ab4d94510013321240d274000182a300721029c50b54c2cd00fcd6144103114","size":112,"data":"","first_seen":"2025-12-03T09:43:26.68825Z","last_seen":"2026-04-06T14:03:45.005221Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/css/magnific-popup.css","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /css/magnific-popup.css HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 26 Mar 2026 00:21:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1520\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6041,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6041), with no line terminators","md5":"4a0be329e3a0d6b2b165f7401776e9e1","sha1":"b2c67530e307da256e18f63508b72c38ce1406a5","sha256":"5c00ade692bdc4987005e16c4d1664f2ae41df236b2189ec1de2d0b8e2062195","sha512":"5932b857a1b3fdeb7f5b51de8af7f19834c1eb943a6f1b67c50991b30b1b6745ce11d71a7c2501ef96dd87e9089d8f03cc2180cc84cf21aacd0d8c1bd56409cf","ssdeep":"96:VmUc40OO7ElPnUkrjjZXbZbPd5jm5gb9UcgC2A5w9i7Uc4CX+bXJ/:VNO7ElPnUkrjjZXbZbPd5uDJ0w9iXX+R","tlshash":"e0c132b36a52317dde22de16a5839b9d2223922fe16315dfdf879818c6cf8cc1515348","first_seen":"2025-09-25T16:48:26.192581Z","last_seen":"2026-06-09T02:30:06.588777Z","times_seen":9,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 28791\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":84320,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32180)","md5":"32015dd42e9582a80a84736f5d9a44d7","sha1":"41b4bfbaa96be6d1440db6e78004ade1c134e276","sha256":"8af93bd675e1cfd9ecc850e862819fdac6e3ad1f5d761f970e409c7d9c63bdc3","sha512":"eda31b5c7d371d4b3acced51fa92f27a417515317cf437aae09a47c3acc8a36bdbb5a5e70f0fbfd82d3725edf45850dde8ca52c20f9a2d6e038b8eaaceee3cf1","ssdeep":"1536:AP1vk7i6GUHdXXeyQazBu+4HhiO2wd0uJO1z6/A4fGAub0i4ULgGiyz4npa98Hrb:z4UdWJiz6UAIJ8pa98Hrb","tlshash":"a283d6d9b2c67062977734b851bf410bb17a98dab80c8c60f0a4d4e47eb4a8d517bf2d","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T16:57:41.25068Z","times_seen":15308,"resource_available":true,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/img/yellow.png","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /img/yellow.png HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 26 Mar 2026 00:21:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3125\r\ndate: Thu, 19 Mar 2026 00:21:16 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 15 x 14, 8-bit/color RGBA, non-interlaced","md5":"9542e5acddc63116b471445785a1d287","sha1":"9f19e48c2b44844ba3b16467b8f9b34c0f1c8971","sha256":"f6aef009b719db2e9534695346491b5e72db16c4c8061ba292359ab6f0f5163f","sha512":"a83d99a2f3c3cd31f56a2678687bbb01a84f1437a525317c8685abfc7d3fd41132e18108ec1c3412cc66abe3ecc7a2e02ca4c3b689e3d7fb19b8e8b41ae54420","ssdeep":"","tlshash":"58515cae8d70a05f69dd76910dcd0245a36872ac8a533b2ca4c299df0491d876b66079","first_seen":"2023-08-16T23:26:15Z","last_seen":"2026-06-09T02:30:06.637226Z","times_seen":10,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Russo+One","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Russo+One HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 19 Mar 2026 00:21:16 GMT\r\ndate: Thu, 19 Mar 2026 00:21:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1081,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"78c4bb30fa63a10567a2b6415850f270","sha1":"974ae425bed4ee0c971ef7575795417a17e33725","sha256":"cb46dee1a9c26fc5f603bf841937478f1428ad40cb7e21247ce67d8bd19a6671","sha512":"4a16ac7991ee71a7f461fea710419e61e4c706e19364def4dccc0288f41a727a7614b9e339f6678e18cd2a793a26116e38255019ad1385505cc5bd1e7026efa4","ssdeep":"","tlshash":"7b1180d10c2be8509fc30dd122ce7d32de0f614178449465aafe18acfc69d256356b5f","first_seen":"2025-09-19T13:39:38.004923Z","last_seen":"2026-06-10T12:50:04.315289Z","times_seen":245,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":111,"dns":1,"connect":21,"send":0,"wait":18,"receive":0,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/css/jquery-labelauty.css","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:16.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /css/jquery-labelauty.css HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Thu, 19 Mar 2026 00:21:16 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-13T19:33:02.139729Z","times_seen":133538,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/img/background.jpg","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:16.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /img/background.jpg HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Thu, 19 Mar 2026 00:21:16 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-13T19:33:02.139729Z","times_seen":133538,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/css/hover-min.css","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /css/hover-min.css HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 26 Mar 2026 00:21:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6376\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":103876,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"244b38454e0e4a29c173ab35ffe57a8f","sha1":"aefc2a9856e4757de84bf3dd390bb15d8d89a1d3","sha256":"0686f87d29206a500448f1694703dff4f383c18e15b2e5ffa9b7412ec33c7c88","sha512":"679145a70804d047bf8c4b06a646132d297a4563f546a380c81051d554b12c85922f33777c2f55063a61cbd3b032127396cd1cc87d04cc04147f83575ffb8e3a","ssdeep":"1536:LB1BSiIfrfji9qeU6DUQ75Z8ZjCRbquQNmxUnBcB/:GfrfjiN","tlshash":"6ba35de5955122859117cf02c7cc5fa9c77cca63a6221cde730a690f8742b9e738bb27","first_seen":"2023-06-23T20:06:05Z","last_seen":"2026-06-09T02:30:06.594851Z","times_seen":15,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/css/jquery-labelauty.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /css/jquery-labelauty.js HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 994\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3265,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2047)","md5":"558fd65267255f111445110ee1841c77","sha1":"4f83918468392732019bdd5a02bafb4a4c6102a1","sha256":"224622e4f773e26237e7f35a336e964bceecea1690126ea95ac0fb3519eb5dd4","sha512":"f77269aae96d9ff93de7025d291a23427ac129592cc6c38d80304f9bdb74e972fda6b33c290c88bff4a901f872793f3fc7c49fa10eccfea0517810f9f2c0d5e1","ssdeep":"","tlshash":"7761bc199621858cd5755077b8c7233de09d0a164302bda0d2fecca49f9ac16ff33e5a","first_seen":"2025-09-25T16:48:26.194471Z","last_seen":"2026-06-09T02:30:06.606752Z","times_seen":9,"resource_available":true,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/img/arrow.png","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /img/arrow.png HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 26 Mar 2026 00:21:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3001\r\ndate: Thu, 19 Mar 2026 00:21:16 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3001,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 14, 8-bit/color RGBA, non-interlaced","md5":"1b3e043e1aa8a202c16c32bf0da3cbc7","sha1":"404ad5d6f06c254372f4ebb1d737f23395e7a626","sha256":"8ae22f4525d811574216be82fb79b11c10e08ca68d27a593cf4902901cfebb8b","sha512":"452d48f92ab85db9ee1c9314f4fd1730c623484da599e42cee8eb4c3f318c1bc4ded7875be4daae7c06d924b8f24b4a339672950f408ebf0b0d3bb36ac80ac4e","ssdeep":"","tlshash":"fd517e6fc960608e78de3a004dcd4146e77d327c99a73b3c94d2e1ce0055e076f15075","first_seen":"2025-09-25T16:48:26.171611Z","last_seen":"2026-06-09T02:30:06.6147Z","times_seen":9,"resource_available":false,"data":null}},"time_used":648,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":648,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/bootbox.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /js/bootbox.min.js HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3425\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9904,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9748), with no line terminators","md5":"791745c3a0e8e4a33f55b644cb6ff935","sha1":"7ed378ec6d9c462b6bd627a207a9db79a2b287a4","sha256":"d3850ac41c90349e6bd81273a0e8501d010ec32d772339cda673466d83db7aeb","sha512":"8adcd135e874f5b1ab252602345ca634ef08c3748853ce614688d581727a697e7ccda745d0c624d30cb87241922583cffeea5554f569f679d5b8680e23458af7","ssdeep":"192:iLnr8QmxYY72OlfojjuXBacAEkEVg3pXrzTGv6:i/8BKrypxPLC3pz46","tlshash":"a3128181e819e13326737872308f9706303ad969e65948225241e2d59ffaddc43ffb3a","first_seen":"2023-03-11T22:58:39Z","last_seen":"2026-06-09T02:30:06.612577Z","times_seen":29,"resource_available":true,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/jquery.backstretch.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /js/jquery.backstretch.min.js HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1560\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4095,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4095), with no line terminators","md5":"5353603da3ae1f042c3c17cdbde206b1","sha1":"8b0900baa63577b22b045568a76f3f5f0c782970","sha256":"b7dea323f4da0259b6e4f256153809958411a55c29b33cf5b06c2572e98e16dd","sha512":"9ff244288a7a18fb6fe2b30c2cdcb593f0e6bcca4b8ec039dd9cb4377b9f2df0a8fda59fac26558bb59540570949b61bc456aaccaf7db9892e943d69e2a27b9a","ssdeep":"","tlshash":"9981845b37a23143d12ae1e9520a4b05fa3658297807752efabc9df198d0d4d127ff38","first_seen":"2023-03-07T14:44:55Z","last_seen":"2026-06-09T02:30:06.620572Z","times_seen":16,"resource_available":true,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/jquery.noty.packaged.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /js/jquery.noty.packaged.min.js HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4667\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24881,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24881), with no line terminators","md5":"11e473ecf73535a56e73ac14b781dddc","sha1":"83cfa0b74ead5b55b8083ee6e487d71492b02bd1","sha256":"93ec2f7a40353c82614d6c184ef0987fcebd48b8180a149e6cf5d3aea4580f02","sha512":"2880bebf592765dec048cb8d85c0e7f595058efbcbed1e9218570af9d8ea71821a09aa5992c2cde5f56b994c5060cca89cd9dae57e01ccdcd329257c78c73533","ssdeep":"384:xwmYJ9dWC5fGXxIVP5I8QiAXv1C26mOABzI044NAwkoG6hYWMJf2hDWZ:amaIIVhI8pANk4fG6WZUpG","tlshash":"51b2e8ce6859232041b7d69ff0dd6a096870e573994d15393abec7e2dc30c4822fbb68","first_seen":"2023-03-10T02:04:40Z","last_seen":"2026-06-09T02:30:06.62179Z","times_seen":43,"resource_available":true,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rendozguides.com/gen/mobilelegends/img/logo.png","fqdn":"www.rendozguides.com","domain":"rendozguides.com","tld":"com"},"ip":{"addr":"94.23.67.154","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rendozguides.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 14:56:22 GMT","end":"Fri, 22 May 2026 14:56:21 GMT"},"fingerprint":{"sha1":"06:45:F2:96:35:0C:96:B0:87:E1:49:82:96:BC:4E:72:0A:C1:90:81","sha256":"8D:D2:CB:FF:D9:03:D7:08:EC:45:44:30:2A:27:C8:40:DE:16:A0:BF:D7:E8:03:7D:48:3B:51:26:20:B2:50:07"}}},"request":{"raw":"GET /gen/mobilelegends/img/logo.png HTTP/1.1\r\nHost: www.rendozguides.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nx-redirect-by: WordPress\r\nvary: Accept-Encoding\r\nlocation: https://rendozguides.com/gen/mobilelegends/img/logo.png\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T20:33:39.75785Z","times_seen":16395013,"resource_available":true,"data":null}},"time_used":521,"timings":{"blocked":185,"dns":116,"connect":31,"send":0,"wait":151,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/outdatedbrowser/outdatedbrowser.min.css","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /outdatedbrowser/outdatedbrowser.min.css HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 26 Mar 2026 00:21:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 261\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":796,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (796), with no line terminators","md5":"9a96b0b4b199cfa35362ab9093657556","sha1":"fe465c02536a300f495a18f8840690178713ebaf","sha256":"68ff72f298eab25564fb531dcbb051c87bdda4133d35008c3523b9357df7f902","sha512":"917f1fc787746bf84731cc1b7bcf1c11ddb36ff3ff788c9a0547c8b896487dc1fd3cbd6990123b9928ffe1ce0d58b63c9badb3ba69b1713c06cb4d2cc85ba87b","ssdeep":"","tlshash":"2201ef305421321cf0376066b4e0b58a30308142df7b173d9a9d7a98c3b60a031bf3cd","first_seen":"2023-07-27T16:39:51Z","last_seen":"2026-06-09T02:30:06.603407Z","times_seen":22,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/jquery.animatecss.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /js/jquery.animatecss.min.js HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 423\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1112,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1112), with no line terminators","md5":"66ef29f05d8698a52e9e578fa051a1db","sha1":"c9ccf70c57b73ac39779d3bbf41f3ca6acbfb049","sha256":"c2ef1adf8d9b5a7d93ee4a915e81969f9767ba4f9f8acb3a59a1b68b85297b29","sha512":"8933fffcbf5012d20f5b5715e3593ca00e36d17cf70c3e7647ec0c486071932d83c18fed22798b3675855f48004a220bd2a834a50ec0cca91caf3f5b6b8577b2","ssdeep":"","tlshash":"a521f6c9b052b146475bb373803f5107b53a68e0e44c1978b87a51c9bf199489b23f3d","first_seen":"2023-03-14T03:56:32Z","last_seen":"2026-06-09T02:30:06.626715Z","times_seen":9,"resource_available":true,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/img/user-icon.html","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:16.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /img/user-icon.html HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6204\r\ndate: Thu, 19 Mar 2026 00:21:16 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress:4.6.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":23873,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4754), with CRLF, LF line terminators","md5":"3cf93014fd5c4bb185d2ac0941fb8672","sha1":"92ca424db8b3c837229d1f6ada17bbc425d010f4","sha256":"599cb3f8f8248b8f523f5bcc2f2353bb5d284d27e76e0a3ea922138f9e37d048","sha512":"998ed2d7b9273952f2e0af640a36594ecccc109f33b64ca2366c1f0d2200386c827b0e81fcb114c6af0516939316c3219611d5958a74a3a5a30e249fcff722ef","ssdeep":"384:m53CLn0ve5e97dBInc5F83OOzLZUFnhQukgWRnY5Xp/tV2dojLC4Rh9QVAEAMVHl:00025e97XDxBk9S53V2doa4RhSVMMVHl","tlshash":"dbb2b5a70c9cad3701a30985e079bb05e1ae9871c74ad9a1f1f8813d5783fc1ac27acd","first_seen":"2025-12-03T09:43:26.649637Z","last_seen":"2026-06-09T02:30:06.601567Z","times_seen":6,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/magnific-popup.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /js/magnific-popup.min.js HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7305\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21123,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (21123), with no line terminators","md5":"256bb741cef9fb35954e2616e30f1b6b","sha1":"2c0b679b8022ce0251e7bea79a6d21a6752f5e3b","sha256":"f64f968c361b328c7ffaf97ced836823866fb25214aab9276596dcc9bed1ea50","sha512":"9de2ad981e4435066945374a943a2aaf1f0aecc8eb72d7e666c29a7507ac96c37d3ecf47a89a194d57f4d5ae1e39fcfaab9e28799f3411bffb2c78c993e591a2","ssdeep":"384:g7gs/MAY6541hpzvKpGdyZ0yE9TQkh5/DAdE6Dq3M7YqjDigDH:qgkNELr9BQkh5ES6WcVvDH","tlshash":"73920894f5a6b113c7e735682b2f600d36739523ea07c891b55984982ef8dccb027f6c","first_seen":"2023-03-14T03:56:32Z","last_seen":"2026-06-09T02:30:06.58312Z","times_seen":24,"resource_available":true,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/img/game-mode-icon.html","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:16.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /img/game-mode-icon.html HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6203\r\ndate: Thu, 19 Mar 2026 00:21:16 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress:4.6.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":23893,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4754), with CRLF, LF line terminators","md5":"9f6726058ec396b0f8a6a339b7b9c4b0","sha1":"4c059b3ad21c7f8e574509dd3fa0bbff91bf5365","sha256":"7bfe6c638104927c147837a18a8c1f3749960446bfe7b2b344161553129c75a6","sha512":"ed04fa9e283068cb556e03463b994187e7ac69a6061396191c855f58da779d061b728258a411e0c5f7d9d5b9028c8f65e1aa64d34e3b37767d6842216385c651","ssdeep":"384:M53CLn0ve5e97dBInc5F83OOzLZUFnhQukgWRnY5Xp/tV2dojLC4Rh9QVAEAMVHP:20025e97XDxBk9S53V2doa4RhSVMMVHP","tlshash":"deb2c6a30c9cac3701a30985e179bb05e1ae9871c74ad9a1f1f8813d5793fd1ac27acd","first_seen":"2025-12-03T09:43:26.656212Z","last_seen":"2026-06-09T02:30:06.581068Z","times_seen":6,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ptsans/v18/jizaRExUiTo99u79D0KExQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:16.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/ptsans/v18/jizaRExUiTo99u79D0KExQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mobilelegends.gratiss.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:29:50 GMT\r\nexpires: Mon, 15 Mar 2027 05:29:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 327086\r\nlast-modified: Thu, 04 Sep 2025 17:27:33 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45532, version 1.0","md5":"3f66ddcf744f9d3144a164781c1c8d12","sha1":"a922c0987319ee73a9645918566d35cb90196b3d","sha256":"2dea6190c113af617923c6b71f7f10ffbdf72074556f79963610254fe40e49be","sha512":"ab44f6e75fdef3596d5aad958e14b1b2bedd4132aebe0b136b8f4ae466d2594a68baa1c4dd047e70ac03116dda521934e13445e85ef0f2d56bd341c46d116d86","ssdeep":"768:fYn3iesPbiNr4ew9DQrVPgxlpWLCbyByd2YVi15T85aavJWo0xB6tkKCEg9sJ29:AnSbbzsfuYXYU38MYJWo0xB6yKCEg2Ju","tlshash":"b613f174e6421cb77b86260a76dcfa805c77486536fc2a27baffc02b52ca02045995bd","first_seen":"2025-09-05T01:58:17.133494Z","last_seen":"2026-06-13T19:30:59.116299Z","times_seen":17197,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":90,"dns":2,"connect":7,"send":0,"wait":24,"receive":31,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/img/top-logo0.png","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:16.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /img/top-logo0.png HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Thu, 19 Mar 2026 00:21:16 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-13T19:33:02.139729Z","times_seen":133538,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-19T00:21:14.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Sat, 09 Jul 2022 23:50:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3847\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:2.1.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootbox.js","description":"Bootbox.js is a small JavaScript library which allows you to create custom modal dialogs using Bootstrap modals, without having to worry about creating, managing, or removing any of the required DOM elements or JavaScript event handlers.","website":"https://bootboxjs.com/","common_platform_enumeration":"","icon":"Bootbox.js.png","categories":["JavaScript libraries"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Backstretch","description":"A simple jQuery plugin that allows you to add a dynamically-resized, slideshow-capable background image to any page or element.","website":"https://www.jquery-backstretch.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics","JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25318,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2356)","md5":"c9b22b4b2a256c91af468232c1e4ffb6","sha1":"140080df624530ca5f16e0412124bb53cd0f63ec","sha256":"5d385da977babb0b52122ecf330e64fe628c52926b522d3f8698dc935057cf7c","sha512":"bfff2c8436dd2fd8d401baa4e0496f8f248329aa179c8c54f8e59a30c11396c55753625c1422b74006f09521a49fd74831d71edc04896973a1ec7059d371c5f2","ssdeep":"192:DKGHKBdmQ04KmIDUQCdMKpRK/S6OZ7LKT+JwXNTXjY07:DuwSIDYdMKpRK/S6OZ7L0+JwXJf7","tlshash":"30b2eea4caf8443661578191baa07a0b2eb4e907cb1f460d72bc0bd15fdbd86cc6395e","first_seen":"2026-03-19T00:21:46.516677Z","last_seen":"2026-03-19T00:21:46.516677Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1618,"timings":{"blocked":743,"dns":345,"connect":130,"send":0,"wait":132,"receive":0,"ssl":265},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/css/font-awesome.css","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /css/font-awesome.css HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 26 Mar 2026 00:21:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4626\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21092,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (19968)","md5":"516bbc7fc6367fd7831c7a8ae9866e67","sha1":"a0d73dbf7188fc4c44ba099e6d7f73bf8afcb13b","sha256":"34acd53e51dc186475155d318f77522eb8c5ee25ce3843fcd96ffafaf1ecf47d","sha512":"b114d8edfab593eba2288c18c5543fef09a7c404f828dcda1b88ba165d483351f9e2e3ba762291daf94ffa043c36bef64d2e0312b72ce976a4a3989a9f824c6d","ssdeep":"192:sqC18McJzlS+/i8K/6/+g5rwr2ynO6mJS5mXM016TO0R/5Zuz6d:bdS+68+o+g5kqfS5mXD6TO4k6d","tlshash":"999250f8e64c04d9a371cc0bd391b338623af772e5806c99f15f9a4d9fc265912c9b29","first_seen":"2025-12-03T09:43:26.657324Z","last_seen":"2026-06-09T02:30:06.584746Z","times_seen":6,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/css/animate.css","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /css/animate.css HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 26 Mar 2026 00:21:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3628\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":58091,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8157)","md5":"6d14af9372674ff9d604cdff89fa6d31","sha1":"4cb8a1e7bc8cb286ba425d8ed103dac41fa7e7f7","sha256":"de6a9b5f5d497a942801147e3637880999c3edf805f1706dcdd61f922b974d12","sha512":"3a6c610e0ddf190c6b2cbc0079e45b0c959b90ce1ae96482bcab7869001cee7abb046cce5665a378770200f9b3eca6f4f5a7f9f92609cc6896d2602408d0ca27","ssdeep":"1536:6kZXhR6hR1zRcEMRFMRgwN1JAIkbDa3Nyf5krhe90DTNRvR3RxRt:6kZRRsRaRWRgwN1JAIkbDa3Nyf5krhe6","tlshash":"6943179e4891228951238e9687dc8e644b3dc77318611ddf33862c4bcf8bbdda3da647","first_seen":"2025-09-25T16:48:26.178242Z","last_seen":"2026-06-09T02:30:06.57766Z","times_seen":9,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/css/style.css","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 26 Mar 2026 00:21:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4451\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29954,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (561)","md5":"b5a69ef7b53221a75b7ae17087a78ae0","sha1":"b4a2d828952298fb4cbcaf0404a6940aabff8481","sha256":"3d012ed33b2f283931a1b22ce9fd83cf66cd2ccbb0f1cc064a6809e139f7e464","sha512":"05deeeece293e98e20d9cda0040d71ce93f56058ff9136ab36f424b0c124aea262ec8a16d9056315413a237843bf86bacec9bd009f257d310d65a3752d5ced1d","ssdeep":"768:MKSJjkQXQt8jtQt8jQQt8jgQtK31bwiuQeiVO7bL3GcFCFyFaQtiVTUp:MKEQQXQt8jtQt8jQQt8jgQtK3puQeiVk","tlshash":"a3d27266a9e33501b017847977be371433264493991aca7e36bfb648cf850f492a73ce","first_seen":"2025-12-03T09:43:26.670863Z","last_seen":"2026-06-09T02:30:06.634822Z","times_seen":6,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/img/green.png","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /img/green.png HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 26 Mar 2026 00:21:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3140\r\ndate: Thu, 19 Mar 2026 00:21:16 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3140,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 15 x 14, 8-bit/color RGBA, non-interlaced","md5":"67aa277bf2d0a3841fe2896ae8bd2d60","sha1":"beea5101bc214f66600d485fff6447d1cd80099b","sha256":"7366cdb0817b07ae7869e0f645a197eafdccb82a7cf55bc7f99fffe35840cb22","sha512":"085293e3fae7028a3e5f18a188cb4e5df71cd785d85aab6eababc5d31a9aced0e953b1ad5feb2d9c5b7a257ba4675dc70348be566f3afb9bfbbfee072e31804a","ssdeep":"","tlshash":"b0515d9bcd60608fbced7d410acd1182d77512aca992376c51d365df1056d03bfa50e9","first_seen":"2023-08-16T23:26:15Z","last_seen":"2026-06-09T02:30:06.579894Z","times_seen":10,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/bootstrap.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9007\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35431,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (35431), with no line terminators","md5":"2fb3a932747299f7829de9f6d26ceef4","sha1":"26ca6658a64de26cb93ca6ceec20cdec138e25fa","sha256":"bd6c4ad9b6e567c960121b915947e74adc2befe428dbbf86df1751c2f252941c","sha512":"cec3c3b3a1199d06ab5775b3db869e3f514cebb7d0f74ae60117b546578185666757619c9c439d1f87dc5970ddea0b11f16598e59f17a5257554464d482f868e","ssdeep":"768:p1+7/uRE672wlNrDMlbGqXYu+jS1s8ep0s1QfrXf8X8GfpZOWQ:/FRx7zYyS1WOv8vpZDQ","tlshash":"a1f28546b230316107efb1e5515f020e72396a6ee90690bc78a5daf63db9c48317bf39","first_seen":"2023-03-07T12:04:51Z","last_seen":"2026-06-09T02:30:06.59137Z","times_seen":200,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/outdatedbrowser/outdatedbrowser.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /outdatedbrowser/outdatedbrowser.min.js HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 977\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2902,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2902), with no line terminators","md5":"156c6e0f3311c5d0595bba8049da2143","sha1":"541a49dc8e556636f9061fc6ce7b882220bcf685","sha256":"299fe0b3ae446ae8b7b893dd5de69edc88b63cf307ea6b4e4d820fafd4312acf","sha512":"e2cfe9ba4dcab57d2666025658776d21e2d3e535d358550b57a26ddc075f0ee4af01d1a35c40060ee8797621b9fe7cf62dddf18b64ec1709df8448596c982fd9","ssdeep":"","tlshash":"5c5122c67093a411af07455da0adbe08b41b1d0d5a8266e8732fb6b3655d848e07fab8","first_seen":"2023-03-12T18:36:36Z","last_seen":"2026-06-09T02:30:06.596013Z","times_seen":14,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/dynatexer.dev.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /js/dynatexer.dev.js HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2110\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9492,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"d57464b7dabfa5fcb1cd918b5f2de245","sha1":"3d44696abb5e2fab174956620c1f3b36bc0891cb","sha256":"93620b642732d18a1ba19b384e217c7268495fbc1cb14f9b6d43bcdc54750dde","sha512":"beeae1640ca10124549d6b4ce1b87092335f1f2ddd5a0513401873ba05a2e6fb441c68647ad6c590cbe778f0346bbdc9f0a2c0e9e4bb8a1dd29150119dfa1d09","ssdeep":"96:Lpfa1rqI7Kym7IXbuHiWZtuNWZt8b+S8i+QkqpiX8fRh29FMDeuGVLWjv7Xwuwb9:9faKr8C8CBhqcX4w9FC3GVLQUfh","tlshash":"9112ed9cf78d2497832872258c1f14cd553ef5b3e8868c6f7c58209cb8e096da276e75","first_seen":"2023-03-14T03:56:32Z","last_seen":"2026-06-09T02:30:06.598057Z","times_seen":9,"resource_available":true,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/css/bootstrap.min.css","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 26 Mar 2026 00:21:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18281\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":122309,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (63526)","md5":"d6c4cb022a0911b1f8bdb86b73a7fe54","sha1":"44e7769d4891eebc44fb813c4447900472ae9e58","sha256":"19c368567b125af771faaefd764dc9200d0f508616ff3627bfab2e854a4388b0","sha512":"0d16cacf92f97f46ffe068e24eb1ae18c646b24f65617348b82b8842b585a95c9af7e5ee1ac3b49dfb436314aa4da38eebc560c0a17723b10d1601f4eeabe598","ssdeep":"768:+zGxw/jc/QWlJxtQnIuiHlncmzI4I8OAduFKbv2ctm2ByhJP8eckOvS1Fs:vw/o1qIuiHlncm28lDbzIPgx","tlshash":"ccc3c7a0f11031ea7323c55a71d0ed872259a153e56a4eb7f22f25d88f886ca1773f1a","first_seen":"2025-12-03T09:43:26.68475Z","last_seen":"2026-06-09T02:30:06.587034Z","times_seen":6,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/css/sweet-alert.css","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /css/sweet-alert.css HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 26 Mar 2026 00:21:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1762\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9771,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9771), with no line terminators","md5":"030586be393a38006fb2bec8b05310db","sha1":"b1184c4ea0bde0087d129319074259e68eb67e18","sha256":"ae1e7a199f7c4091299ba0123a7ef23e10d47e5cf3283dced51a1a4f9e995299","sha512":"a600251c774f7fbf0118b4991b548a35e960fbf2983a4a4154c2f49040a9044f5ccbfa6a2fb635963b25f38aa8e315409460a73f3133a79a1351c144bb5349bc","ssdeep":"192:UShsuGVqXSiOgGqC2bUfZPz1g2q7PQPpuShFCFjRqAJ6JBjMjz:UxqX5GoGGypuSh0bqs","tlshash":"d912c2971d4526cde623cf1791cc5da42a188267a9230eee73c174a9c7c2ac872fd35b","first_seen":"2025-09-25T16:48:26.129492Z","last_seen":"2026-06-09T02:30:06.633877Z","times_seen":9,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/img/red.png","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /img/red.png HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 26 Mar 2026 00:21:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3149\r\ndate: Thu, 19 Mar 2026 00:21:16 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3149,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 15 x 14, 8-bit/color RGBA, non-interlaced","md5":"41f931e19ef4319bc230d0f42c1a7e02","sha1":"e8a1a13c733420afeaed9f1e3c82b460373d1736","sha256":"c8b130c253b9ee74aae1e1026e45c26fccb063fae60a91baddd96dc456f08fdd","sha512":"912b677b0e58cfec74e0a1cc83c59bd5520ed1faa0e02e3a3612a0acea94d8b08d0bd7ecdca6f4bb3a992bdbc2d09ad037259ba78fc6ad0f5e46e453522579c7","ssdeep":"","tlshash":"c1518e7b98b0908dfdcd7a210cde5202d324237c9576373ca5d1a2ce4440e475b590b9","first_seen":"2023-08-16T23:26:15Z","last_seen":"2026-06-09T02:30:06.5783Z","times_seen":10,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/faker.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /js/faker.min.js HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 177825\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":649883,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65244), with no line terminators","md5":"fdaa9df371fd201ff7e8154e18e9a180","sha1":"0a5305fc049b1e21d2a9cdfd248f5f953f9c4a28","sha256":"7b67d1e0d47a273b76b65adcc15e00978d664d8b09c1f6b6fd86a37861f499ef","sha512":"9c48d9c25c4fc4c50eec67556a576ea3e1207f9a21e9a297225f303cc59463a3ff50fdef81c9d27f52aab1cc0e5dc097779fd9ab52c6169c1f4706dafb92da7e","ssdeep":"6144:kGA4hMMPwBZaXhsXdae7rZrwsMtoF3WibLDJwJve:O4voyhSaYlNM8hLge","tlshash":"06d409d298532b3657bc13c860f7f48c61adc17b74c6bd47a9b6c946320ad1360bbad8","first_seen":"2023-03-17T10:32:19Z","last_seen":"2026-06-09T02:30:06.593182Z","times_seen":9,"resource_available":true,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/jquery.magnific-popup.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7291\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21014,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (21014), with no line terminators","md5":"df874db9336e363a9bdb35daa382e683","sha1":"18722154001e87b0626bc0de9345779320361d77","sha256":"ab7725780dc0bd1bf9517d99c5c3610ebe9393f67d750f045631880fe253c4c9","sha512":"d80b337b77ba4d53192380b60d61a1ae509d7e9d845f3831530b346b6287b19fec1fb443d7358d7d374105ab24d5574e3e9b80dd5ff0751de588e69f57518ca5","ssdeep":"384:iPhVIFQ2G2XGtqVxRQ1giFCdLtA4Tn5h5/w6l8aZwHwztLCpz3sp:iPCgC1zn5h5o1qkOLCZsp","tlshash":"c5921854f2b2b26393a335b8646f600939729953ed06c855b55e88d87efcec89027f3c","first_seen":"2023-03-07T12:21:51Z","last_seen":"2026-06-13T10:14:00.243799Z","times_seen":304,"resource_available":true,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/main.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4521\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33844,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2448)","md5":"605eed086c1e92710f14b0c2d174301e","sha1":"af608be9bf4643cef056c882515cfb1da0ae7372","sha256":"1af560c52c94edff115258db00d8703199cfcdc2adb0805ab194e12845a5f78f","sha512":"336ed81addbd3fe9f515abd8034f1553c3a75bafc43f388da32de2fe315d1aff0c6e9f81461a5e936b53b84b0aa933f88dc12fe381620d9120bbca45566d0e7f","ssdeep":"384:eZIjlwmKCtuEusjOh/C8xtuEusjOh/+8EeqBDhPt3483MBrLDmCVCv5gnAy3nG3S:ESC3BDbo4WLDmCVCv5wAy3nG3nUJpUUL","tlshash":"45e221b6b9d2042545a3f6266dbf5a122a700107dd0afd14fa9c4e6d3f1c82de2bb7d0","first_seen":"2025-12-03T09:43:26.677223Z","last_seen":"2026-06-09T02:30:06.636188Z","times_seen":6,"resource_available":true,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Chau+Philomene+One","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Chau+Philomene+One HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 19 Mar 2026 00:21:16 GMT\r\ndate: Thu, 19 Mar 2026 00:21:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":863,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9f0f9183b2cedbd165c92e0b79a0c04f","sha1":"32160436f67d101fca8f69590b4622123c18e421","sha256":"d091f24a54fe237d637de618d1250947fc3958aa7615febaa1016f5c9236340e","sha512":"e3ad7a9e2ec1c8897e51ffb564a385a9abc455e211f1125c8f4df69b49e86c02a8bc33dbefac8b69cbb63a3ac61155896f46b60be9dfa4576b60eba3880def31","ssdeep":"","tlshash":"e61112d1086b9904b3830cc612897e32ef4f62502485d835bafe08d8fcd2d95635270e","first_seen":"2025-09-26T16:23:28.208084Z","last_seen":"2026-06-09T02:30:06.617827Z","times_seen":18,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":129,"dns":0,"connect":8,"send":0,"wait":19,"receive":0,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rendozguides.com/gen/mobilelegends/img/logo.png","fqdn":"rendozguides.com","domain":"rendozguides.com","tld":"com"},"ip":{"addr":"94.23.67.154","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:16.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rendozguides.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 14:56:22 GMT","end":"Fri, 22 May 2026 14:56:21 GMT"},"fingerprint":{"sha1":"06:45:F2:96:35:0C:96:B0:87:E1:49:82:96:BC:4E:72:0A:C1:90:81","sha256":"8D:D2:CB:FF:D9:03:D7:08:EC:45:44:30:2A:27:C8:40:DE:16:A0:BF:D7:E8:03:7D:48:3B:51:26:20:B2:50:07"}}},"request":{"raw":"GET /gen/mobilelegends/img/logo.png HTTP/1.1\r\nHost: rendozguides.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://rendozguides.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 15094\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 19 Mar 2026 00:21:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T20:33:39.75785Z","times_seen":16395013,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/css/jquery-labelauty.css","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /css/jquery-labelauty.css HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-13T19:33:02.139729Z","times_seen":133538,"resource_available":true,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/sweet-alert.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /js/sweet-alert.min.js HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3474\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10423,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10423), with no line terminators","md5":"0aa07fba93dfb99b0f3779f21cbf7e6c","sha1":"cb19a7af3bafa8a5eca41bf2647b50c95a7e40d3","sha256":"ce3d3481cf65d3f3dde8454f7e67ee233cb619a671f43f63dd982ed08fdfd4c5","sha512":"0bed00083e888beea272bb096712c7b01e25ef5050e243ffe09db4ac2cc3988e92a5121a252f08b555be8578a002c30b318062b5f904d2d61074224fdbd9ef4c","ssdeep":"192:NjRjqj24LF0eVTmRiexzifuy1CyRMyoxhGyi/Jq+Muyrg3ymiLKp8HRlPoPOTGTr:NFWpLF0MTmRiex+fu2CyRMyChGyixfMU","tlshash":"9b22c599321431771ba365f1489f518370711afeee0588700a78c8f42decc896ea7b77","first_seen":"2023-03-07T12:02:55Z","last_seen":"2026-06-13T19:13:30.844453Z","times_seen":768,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/jquery.flexverticalcenter.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /js/jquery.flexverticalcenter.js HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 328\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":818,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (818), with no line terminators","md5":"2e0101529052935189cf9aaf127bf8d8","sha1":"e8ff3106288ccfa9352b33639d31d459038ea9b4","sha256":"c872b14e118bcf0a4cf689d20b9940311bb017d6fa9d5e204229d4319062999b","sha512":"49868801f67f7934bc22635774939464881d466d0e5a9286b8f4661143d26abf5c8a34697b379bfbf4b4e418de5ba9685e40425e435d4daae6e61114e7ec9ca2","ssdeep":"","tlshash":"c101bd9eb381947692ca3b3fc2bb574bb5228a2b8121f07ad33440c85d6004dab031f5","first_seen":"2023-03-14T03:56:32Z","last_seen":"2026-06-09T02:30:06.623199Z","times_seen":9,"resource_available":true,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=PT+Sans","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=PT+Sans HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 19 Mar 2026 00:21:16 GMT\r\ndate: Thu, 19 Mar 2026 00:21:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1352,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3cc4c83d00a5daf80f4a097bb4713843","sha1":"b23212753485af4279eb336daee596c9edc32991","sha256":"9acafa1a71376fdb37a665a5bfccdbe4d06c89604bd3bd14ae8957dbbe3457c0","sha512":"a59450bd1b51b07badd349184e98861989582e218d10ffbf79facb34dce10317bfb93dd4891a4b61412a5d6d7ecf056f580c56ad5c98c6b0d3ead0d286473694","ssdeep":"","tlshash":"bf21b181052be8506b431cc923cf7d36cf1e5255704998266aff1cd8ed66e2e9370b5d","first_seen":"2025-09-05T07:29:38.631821Z","last_seen":"2026-06-13T16:39:13.269788Z","times_seen":2744,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":61,"dns":1,"connect":8,"send":0,"wait":19,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/chauphilomeneone/v16/55xxezRsPtfie1vPY49qzdgSlJiHRQFcm4Z6.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:16.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/chauphilomeneone/v16/55xxezRsPtfie1vPY49qzdgSlJiHRQFcm4Z6.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mobilelegends.gratiss.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 10612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Mar 2026 18:59:24 GMT\r\nexpires: Thu, 18 Mar 2027 18:59:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:31:40 GMT\r\ncontent-type: font/woff2\r\nage: 19312\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10612, version 1.0","md5":"b70e9e46cfba60401e3a4084a8542d24","sha1":"01d026e83dd98eba50ed183ed1e0a6dfcf7bc9a8","sha256":"d3b66a6b7b029478a3eed55ac36158f1e59dcc24cb950fa9137e5ef91f3e0902","sha512":"36e150198d88232859a398a2c5164187e04fddd0602582770c0bf739485bcd9fbb9df50c86b54e04f5c8fb762eb8919ad539be19cebd244696f46e2ca2d761d1","ssdeep":"192:etBL0VLXCmNxvCT/LKxOt339BznZXYE9FnZHMe4cvV4H6ajhVxv0LML:eAVL+T/eQLBLZb9xV4Hx10LS","tlshash":"f822afb524e46c40c4cf017568fd9df16f92eb8b1c1d652b6a48fc484ae0da74a84b98","first_seen":"2023-05-11T04:46:17Z","last_seen":"2026-06-09T02:30:06.575595Z","times_seen":41,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":87,"dns":0,"connect":20,"send":0,"wait":22,"receive":2,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/fonts/fontawesome-webfont78ce78ce78ce78ce78ce.woff?v=4.2.0","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:16.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /fonts/fontawesome-webfont78ce78ce78ce78ce78ce.woff?v=4.2.0 HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/css/font-awesome.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 26 Mar 2026 00:21:16 GMT\r\ncontent-type: font/woff\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 65452\r\ndate: Thu, 19 Mar 2026 00:21:16 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":65452,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 65452, version 1.0","md5":"d95d6f5d5ab7cfefd09651800b69bd54","sha1":"7d65e0227d0d7cdc1718119cd2a7dce0638f151c","sha256":"199411f659f41aaccb959bacb1b0de30e54f244352a48c6f9894e65ae0f8a9a1","sha512":"e96012d2fcd5df03c2f7385c9ee2a2932b3909659d59e32bf3155e102eaf9eb7b4b00c5806c892ace1b8f4bdb58630fb20868ad368c771bd8d2aad7749b7a399","ssdeep":"1536:WhdmBOT/dMBXSeRkzJBJlLsZrzhWaSU82n:WLmBs/dMduJBJl2nQan","tlshash":"4f53023b2a717a74b8f5cda4af04f33229dbfe99f8840472d52a1b5a84671185b04b19","first_seen":"2023-04-06T01:39:02Z","last_seen":"2026-06-13T18:03:17.151269Z","times_seen":13283,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rendozguides.com/gen/mobilelegends/img/rs1.png","fqdn":"rendozguides.com","domain":"rendozguides.com","tld":"com"},"ip":{"addr":"94.23.67.154","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:16.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rendozguides.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 14:56:22 GMT","end":"Fri, 22 May 2026 14:56:21 GMT"},"fingerprint":{"sha1":"06:45:F2:96:35:0C:96:B0:87:E1:49:82:96:BC:4E:72:0A:C1:90:81","sha256":"8D:D2:CB:FF:D9:03:D7:08:EC:45:44:30:2A:27:C8:40:DE:16:A0:BF:D7:E8:03:7D:48:3B:51:26:20:B2:50:07"}}},"request":{"raw":"GET /gen/mobilelegends/img/rs1.png HTTP/1.1\r\nHost: rendozguides.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://rendozguides.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 15094\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 19 Mar 2026 00:21:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T20:33:39.75785Z","times_seen":16395013,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/js/jquery.countdown.min.js","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:15.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /js/jquery.countdown.min.js HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1318\r\ndate: Thu, 19 Mar 2026 00:21:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3349,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3349), with no line terminators","md5":"76267a3cccade327e4dc5c039e0195f6","sha1":"39f20727bc70c4f8dbfaa066417ba69712ecc17e","sha256":"b5e61baff7e113d5a69e890bea1778be2fdffe0194cfd1d7b616a8c0a82cb83d","sha512":"880632dcdfa453ba34086be174cf641865f63509fe7f8206bad14eb0dfc2815b2d620828d8bb2fafcfd5c225d995358b892d374cce76c1e3943117fdef9f9182","ssdeep":"","tlshash":"dc6187ceb7b361c904e882a601ae1102517be15bd4d6406cf6fcadc47669fa9302f978","first_seen":"2023-03-07T13:23:57Z","last_seen":"2026-06-09T02:30:06.600164Z","times_seen":95,"resource_available":true,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/eA276cg.jpg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:16.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /eA276cg.jpg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 17 Feb 2021 17:27:45 GMT\r\netag: \"053cc8e3bc2d8706f0b56cbc144d7f28\"\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: ftyQe9fsH0-7g5fEfz7RTtnWcdAHIYMlXJvsGf66bPtIqJlMMSgASw==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 370280\r\ndate: Thu, 19 Mar 2026 00:21:16 GMT\r\nx-served-by: cache-iad-kcgs7200089-IAD, cache-hel1410028-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 31, 0\r\nx-timer: S1773879677.505875,VS0,VE118\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 106585\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":106585,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1242x710, components 3","md5":"053cc8e3bc2d8706f0b56cbc144d7f28","sha1":"20e788f8355f8f57ee878fec8bbdab0d997d9301","sha256":"d7a20889a195cd750864bd3306165d74a1c967b9cbb72275021d2d85b8582a3d","sha512":"82bc9b4546ce361af6b37a35fc8ebf1f3a11e80fc6679df47cd079ec45b57ba596ede2700578c3efcfaa0b9824bdecb0cc30b04098f82a4634df967799a4066c","ssdeep":"3072:5FHpYo9LV6HI9itI3NRx8p5Yjjspal9YMi:5xp76o6cNRxwYjjWazO","tlshash":"a6a30293d855c28915cbc231eda3869b59a27dbbcc8d53a02399ef9cd18fc19dc0d16c","first_seen":"2026-03-19T00:21:46.534745Z","last_seen":"2026-03-19T00:21:46.534745Z","times_seen":1,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":100,"dns":12,"connect":28,"send":0,"wait":146,"receive":56,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mobilelegends.gratiss.xyz/img/status.html","fqdn":"mobilelegends.gratiss.xyz","domain":"gratiss.xyz","tld":"xyz"},"ip":{"addr":"142.11.247.237","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:16.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.fallout.gratiss.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 04:14:16 GMT","end":"Tue, 16 Jun 2026 04:14:15 GMT"},"fingerprint":{"sha1":"24:EA:67:6D:D8:94:64:29:EA:9A:60:44:AD:12:DB:82:EC:5D:3A:EE","sha256":"CD:00:1A:45:D3:08:8E:0B:E1:94:4E:63:AC:AE:03:47:45:75:26:29:20:83:E4:F0:01:72:4B:E0:9F:49:42:35"}}},"request":{"raw":"GET /img/status.html HTTP/1.1\r\nHost: mobilelegends.gratiss.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mobilelegends.gratiss.xyz/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 17 Feb 2021 19:14:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6193\r\ndate: Thu, 19 Mar 2026 00:21:16 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress:4.6.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":23861,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4754), with CRLF, LF line terminators","md5":"fa7381f6c096f904de41ea88a6df429b","sha1":"09b000052e4bdea947085b880919f903ccbf8405","sha256":"2ab37188eded5f18a4d57fe5d9c9b273e1d7fc1d334c367d690664cb63a95137","sha512":"eca955cad9ffd8a8731c3b4d9cd8c125d608c0bfc43688105f3ac44e239cd88dc8c74f1f6d0ed5c6703ea3289841c3cc577f8fea39bd1256f01f594a65bd9325","ssdeep":"384:053CLn0ve5e97dBInc5F83OOzLZUFnhQukgWRnY5Xp/tV2dojLC4Rh9QVAEAMVHH:+0025e97XDxBk9S53V2doa4RhSVMMVHH","tlshash":"36b2b6a70c5cad3701a30985e17abb05e1ae9871c74ad9a1f1f8813d5783fd1ac27acd","first_seen":"2025-12-03T09:43:26.653981Z","last_seen":"2026-06-09T02:30:06.618552Z","times_seen":6,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-19","alert":"Sinkholed","trigger":"mobilelegends.gratiss.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/russoone/v18/Z9XUDmZRWg6M1LvRYsHOz8mJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:16.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/russoone/v18/Z9XUDmZRWg6M1LvRYsHOz8mJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mobilelegends.gratiss.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Mar 2026 20:08:33 GMT\r\nexpires: Fri, 12 Mar 2027 20:08:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 533563\r\nlast-modified: Mon, 15 Sep 2025 17:01:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7344, version 1.0","md5":"07eb45e69b3a8e119606e3b26aa7e58b","sha1":"a567430130c746c7cea8395e10e97ac14a103e9e","sha256":"8a6b754cd3bc5ad2bf0d0308bbd9c1b7f6b4ecdd915982ffedf50ed18fed4a46","sha512":"23a8f0e50c7e60fc87b67a9a1fd5f600a41e942dc9c3aee4a91894479eab6608932b97bf2862fde937b320f9f7d1e67ca44907c56897e206fdee76457c6f2133","ssdeep":"192:IHIgs0r/1qaE8Q6NzMEIzBrHO8p+xqCKopDax:IHIx0/1E8Q6VMEIzJHd+kjFx","tlshash":"0fe1b095202206e7c93046304707bd9f3f112c0040b9e79ba4e6daa0493a39fe5d98fc","first_seen":"2025-06-09T00:58:05.647347Z","last_seen":"2026-06-13T14:26:36.172146Z","times_seen":795,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":91,"dns":1,"connect":7,"send":0,"wait":36,"receive":1,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rendozguides.com/gen/mobilelegends/img/rs1.png","fqdn":"www.rendozguides.com","domain":"rendozguides.com","tld":"com"},"ip":{"addr":"94.23.67.154","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mobilelegends.gratiss.xyz/","date":"2026-03-19T00:21:16.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rendozguides.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 14:56:22 GMT","end":"Fri, 22 May 2026 14:56:21 GMT"},"fingerprint":{"sha1":"06:45:F2:96:35:0C:96:B0:87:E1:49:82:96:BC:4E:72:0A:C1:90:81","sha256":"8D:D2:CB:FF:D9:03:D7:08:EC:45:44:30:2A:27:C8:40:DE:16:A0:BF:D7:E8:03:7D:48:3B:51:26:20:B2:50:07"}}},"request":{"raw":"GET /gen/mobilelegends/img/rs1.png HTTP/1.1\r\nHost: www.rendozguides.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nx-redirect-by: WordPress\r\nvary: Accept-Encoding\r\nlocation: https://rendozguides.com/gen/mobilelegends/img/rs1.png\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 19 Mar 2026 00:21:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T20:33:39.75785Z","times_seen":16395013,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}