{"report_id":"68fdb1bb-7295-4280-865e-19a6c46036aa","version":6,"status":"done","tags":[],"date":"2026-03-14T02:32:16Z","url":{"schema":"http","addr":"portal69.com","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"portal69.com/","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"title":"Portal69 : Explore Game Modal Mini Jaminan Menang Cuan Maxs","dom":{"size":131647,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6883)","md5":"bc5f561d224b535c6d0b44d65f159700","sha1":"c00e741a7132cceb1eeadad3b636f0d80f046518","sha256":"e251ea32e739b646c777161d5cf4b2da04e8fac54b43ac18abe670dcb1c9b8af","sha512":"c052a9084d9e7a0713c112413201593fac21f06478df32c9fc166b46b766b9ba81187cac12f4e603f6492743614b18440b383d4d674ff61523332fe03c40f5d8","ssdeep":"1536:eZ5F4g5A4WR2vLvKCCZkdD5f/9hQYVVIKCFKebypc1mOt80LVskPe7:ACZkdCYVWKCFKEypcAR","tlshash":"18d3b607d9a2204d180391246be6bb5b3b78d443ca17dd1cbedda784cf86a81ad7378d","dom_hash":"domhashf8b435ef3c040948269abf314de22c25","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"portal69.com","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-18T02:32:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"portal69.com","ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2026-03-11","domain_rank":0,"first_seen":"2026-03-14T02:32:18.052591Z","last_seen":"2026-03-14T02:32:18.052591Z","alert_count":31,"request_count":31,"received_data":2032982,"sent_data":14260,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"cdn.ampproject.org","ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2015-08-31","domain_rank":3289,"first_seen":"2015-10-09T04:27:01Z","last_seen":"2026-03-09T07:52:40.780043Z","alert_count":0,"request_count":6,"received_data":411517,"sent_data":2635,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":4,"received_data":34784,"sent_data":2140,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":1,"received_data":11479,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"de93c62fe8d520d5f20d3a375921f388","sha1":"ecc3eb0c77b12d60831c1f456bad0302b4d5db83","sha256":"07443ee9c85233c09c22c0668278316d8d4c25b7a5af83eba6ac761f30b75dff","sha512":"ea341717b7f75186720b4a3aab7f653eebeafb92ee328fc9fb2b2eee0365e201b11353a0f1d0fd5c1c8f8c06a134626f38b4f3375513675a9d1fa78ee065c156","ssdeep":"6144:HoUwkmOu6CFmZZoS2/VdK/HWL1Uqb9W9z:IlLWdYeW5Uqb9Gz","tlshash":"6154949db296b0724793b075803f150ae33ba855240a812cf56de9d67cbcd8aa137f7c","size":284617,"data":"","first_seen":"2026-01-27T21:42:06.365435Z","last_seen":"2026-03-17T21:09:47.691036Z","times_seen":2185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012601162341000/v0/amp-loader-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a4d82a5fcbe799aa3cd604d0add90a","sha1":"5614c8c0cb0b1ea9f6252f9a1c0465d68fad49c4","sha256":"28e18a22a127994816624a5d8843978ff13ec874e7bb6c3ec57d236fa85864f8","sha512":"f5e8c8ddfd89af0765afc670f3e2e847ce78e9a1f7bf0c75288d541f4445c02246b0da7b8a8a25a6d2aba28c72d671416108d80adc3404dfd2bd9ee9a3fc4a8a","ssdeep":"192:EfQHMOgzKBbnnRrVGOoPFU6rO2tHrbLvANHzMb5F4g5A4WR2vN:u0g2BbnnHWbLvARzMb5F4g5A4WR2vN","tlshash":"4d42a364a54ba2ac530341b484fab906757ecd4fb8104035f0118edecf99f48bd7ba6e","size":12715,"data":"","first_seen":"2026-01-27T21:42:06.359185Z","last_seen":"2026-03-18T14:43:08.891553Z","times_seen":1620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012601162341000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d1e1939a681e26ad7bac3e1bc7a4698","sha1":"1b6b404001ca244b6617aab982989604eb5db41b","sha256":"32a998421e9461bc53f942def0e915f0c7100cd4db2e516221bd443494147631","sha512":"af0ab1fedb33087a7bf24b01fdf1e1d7588e518104c563e448d68d0a4fed2c7a813f98e567530ba239e574abfeafdc4886b5e99d531ff14a7e075dff61f19008","ssdeep":"96:GKoAosPGpV3yMDc0jGAM+G0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:GKqswV3yv0jGAFCPX/tqKyWp4M0rDTI","tlshash":"0af196dc7ac2b83a5757b4b780af414fa63bb94624ad9120d120f0d83cb995ed633e5c","size":7798,"data":"","first_seen":"2026-01-27T21:42:06.36181Z","last_seen":"2026-03-18T14:43:08.908491Z","times_seen":2151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-sidebar-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b44bcbd9902a6a481f2e8fccdc72e0e0","sha1":"80a00b7c5a2f6c85a8e5e35a25a7cac53884397b","sha256":"364dc811bd3548aa75b0c0474fb10051817891a60f094c64f74ba5a98323bc59","sha512":"f1054575e0664808773515df02a5e1bc9cc6a5c69bd9838ddb2734c0966fece8fae6db72d14c5ba147fbb63ff2be22b60b0b24cac1d471fbe712e18f5e868d2d","ssdeep":"384:TnXCVRcBmEljVOL6DpbaGCF7YQ+CTvhsvuNE/h9puKL5Et5MfaWrFWZuz7:TXC0ljCjTE/vRL5EfMfaWr7z7","tlshash":"2ee2c89cf292b0714697a0b180bf450aa23ba555641b842cb05decc76d78e5ab237f7c","size":31363,"data":"","first_seen":"2026-01-27T21:42:06.364387Z","last_seen":"2026-03-17T16:27:48.036454Z","times_seen":197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ff91886e860e4619d05516e8f995ac9","sha1":"56468dd46f28eede1ba8d02e853f704880f2f6af","sha256":"40f44e561cd75242d279c273a68619979a6fefc12cebd9b45852569f0f376032","sha512":"75762daad99642e3ff371277cde27363a8cea7589bfa825eed5a17ca943a1a8c67c49c574797e3ec43cb9f0b70fa2b03db8b5ebe00e01124036d9cc1455dafba","ssdeep":"384:HCXUpS23O0bbj36DTbaGCF7sQY8EvEtjWHF4w5PAyEXaE5GOLyawhrys15:HCXUVOU2vN5tmaEhLyawhrys15","tlshash":"1dc2939df282b47542a7e0b5507f860ba23ba058644e442cf42de9e27db8d4a7137f7c","size":26664,"data":"","first_seen":"2026-01-27T21:50:45.479821Z","last_seen":"2026-03-17T16:27:48.019524Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-carousel-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"518b01ada964654afbaa2627e460f254","sha1":"48632703b7c70ade62fc92de93e80f02e0e992fa","sha256":"b4a65fac9208c28aa476e2c286a628a137707461b53c0ce42d40d8b83e357e9a","sha512":"bd7b07d62237886b5e48f1ddb58df6aa7b74aabde300c44d4dbbe0738bb8083f799c6b1eb10dc81a5ae99595a5967b15a2d49195bf0763398083bbfab297f5ef","ssdeep":"768:BuCdWBuHV4qVy2STUSIQ/jkZ9PmTSnSba9La+0:B2unY3Ht/eNj01","tlshash":"3b03b5d8b382b43d4697a174406f110ee23fa919640a452cf1abddc5bebc99a2137f3d","size":38737,"data":"","first_seen":"2026-01-27T21:50:45.489197Z","last_seen":"2026-03-17T16:27:48.018269Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"portal69.com/assets/images/favicon.jpg","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:55.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/favicon.jpg HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28541\r\ndate: Sat, 14 Mar 2026 02:31:55 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":28541,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 192x192, components 3","md5":"6dd7c9955f8a7220b8cb55a4e4b997a2","sha1":"d97056ce700d848912245675e5608f8df9537a77","sha256":"d91d8071c4583efc4085faa4b2bfd810ad2e00efecbefde1a94f7a1234f907b1","sha512":"2941c8a3af5f21265e59a0797c1874e5d7b14efc8a2ffbba5641f4b46d630258a3ae4f62f7a3047f48ebf8902629935b70ce4a95af68aa816b0ad16862b5f582","ssdeep":"768:oYylJmi6Q1wl5eu82dtJhbuIHZE7QgVOfvtAika:obmT6Vu8EtJR5ExVOfKVa","tlshash":"23d2f1fb93467f62de85e0312892cb343961fd60057ffed1c1916258b606aa1bf6c213","first_seen":"2026-03-14T02:32:22.20266Z","last_seen":"2026-03-16T06:21:15.904701Z","times_seen":2,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/games/viral/Laughing-Buddha-Nexus.webp","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/games/viral/Laughing-Buddha-Nexus.webp HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:55 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30744\r\ndate: Sat, 14 Mar 2026 02:31:55 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30744,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"366bcda231e269c6e78076286bc89404","sha1":"fd968eccf5d11174f34238dbcd1afe1a6a2d77de","sha256":"9181bfef5791ffcdbdec303a821e4a0df1594e3ef869dda4731eb85cf5c4b251","sha512":"840da22099affbbdc5b09a1d36a148668d89ec3a575105f883676729d67ccf835f93e0ba8a3180c21a082c9ed25a250db4f3d8602a49271f2d15c9656c7d8d53","ssdeep":"768:8FYyu0dEzWmZ2vm6f/mXwymCDMVzIC5hLWF84BKxn:Mqw82vmiYwZCDMFLWC4In","tlshash":"7bd2f157af16b371f8f2f33830af2f7250894ea056011fb628e06b3248642476ade255","first_seen":"2025-11-11T10:54:01.40101Z","last_seen":"2026-04-07T02:20:13.259009Z","times_seen":103,"resource_available":false,"data":null}},"time_used":840,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":682,"receive":158,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-carousel-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:53.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:37:14 GMT","end":"Mon, 27 Apr 2026 08:37:13 GMT"},"fingerprint":{"sha1":"1F:80:E1:44:12:8A:FC:40:29:3F:66:7D:B2:CD:6B:37:58:78:5F:62","sha256":"EF:BD:CB:97:0F:61:30:70:B3:64:A7:8B:27:68:D2:CE:8E:07:02:66:F9:1E:4F:FA:32:0C:8A:22:AD:45:CB:67"}}},"request":{"raw":"GET /v0/amp-carousel-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11489\r\ndate: Sat, 14 Mar 2026 02:31:54 GMT\r\nexpires: Sat, 14 Mar 2026 02:31:54 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"c283e3610ded7deb\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38737,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38616)","md5":"518b01ada964654afbaa2627e460f254","sha1":"48632703b7c70ade62fc92de93e80f02e0e992fa","sha256":"b4a65fac9208c28aa476e2c286a628a137707461b53c0ce42d40d8b83e357e9a","sha512":"bd7b07d62237886b5e48f1ddb58df6aa7b74aabde300c44d4dbbe0738bb8083f799c6b1eb10dc81a5ae99595a5967b15a2d49195bf0763398083bbfab297f5ef","ssdeep":"768:BuCdWBuHV4qVy2STUSIQ/jkZ9PmTSnSba9La+0:B2unY3Ht/eNj01","tlshash":"3b03b5d8b382b43d4697a174406f110ee23fa919640a452cf1abddc5bebc99a2137f3d","first_seen":"2026-01-27T21:50:45.489197Z","last_seen":"2026-03-17T16:27:48.018269Z","times_seen":221,"resource_available":true,"data":null}},"time_used":411,"timings":{"blocked":178,"dns":48,"connect":15,"send":0,"wait":31,"receive":3,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/home-slider.jpg","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /home-slider.jpg HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html\r\ncontent-length: 771\r\ndate: Sat, 14 Mar 2026 02:31:54 GMT\r\nserver: LiteSpeed\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nlocation: https://portal69.com/\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":110010,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T11:11:49.065596Z","times_seen":13459284,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://portal69.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Mar 2026 00:03:49 GMT\r\nexpires: Thu, 11 Mar 2027 00:03:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 268085\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-07T11:15:33.583798Z","times_seen":205770,"resource_available":false,"data":null}},"time_used":1421,"timings":{"blocked":710,"dns":0,"connect":0,"send":0,"wait":15,"receive":7,"ssl":689},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/games/jackpot/jungle-bang-bang.webp","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/games/jackpot/jungle-bang-bang.webp HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:54 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 71984\r\ndate: Sat, 14 Mar 2026 02:31:54 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":71984,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a5ad58bddcc4e9bbf1d43ac8a706b37","sha1":"8b459f750e133fa0825a8b9f317daa2cb63b06a6","sha256":"5594fe56baa2972910c8bb549ecf909b1fa3c8c9a1831e5862d0e9a87407b416","sha512":"bb4680b173bd1e9a5de1533000545d109568901e22f5560f8c6e4907b19c6a81a788200d79833dd93a6162525656385f19cea37e8101e807bafd7192abdaa8fd","ssdeep":"1536:lv5wmzNS/Ia1VSbF9tLXofY/9WlCf6hmmD/kHQbPkWg:HwwNSlVhfYlWQf6hdD8wIt","tlshash":"a26302cee2e82c4595f00899da2938f760234ffd25fee6c5c5095924ac8fcb65d0ca97","first_seen":"2026-01-10T10:25:03.067716Z","last_seen":"2026-04-05T20:06:36.228836Z","times_seen":35,"resource_available":false,"data":null}},"time_used":678,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/siam-engine-active.webp","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:53.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/siam-engine-active.webp HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:53 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2638\r\ndate: Sat, 14 Mar 2026 02:31:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2638,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"50ecd649e5d2884f78d3c707b4c2d4e2","sha1":"8f10fde7bd67196a381f2817ab2380020ea11561","sha256":"f5b298ff90bec28afe818f980eed433c9e2bcaa499ffd0b9ae23adb38a4171bb","sha512":"b78120e7fccdaf4848c11cbc0376b814cb4fd7fdb4dd8697be785eca4da9345dc5f23896860add1c7a364d5ceb3d26fb7656c5d4ecbb3a15a62c538c4af47f6a","ssdeep":"","tlshash":"d5513b83a14e60173d5bda0f1c7c411d5ed7011c47c2f82062afacaa4eb902a6de7d9f","first_seen":"2026-03-14T02:32:22.206389Z","last_seen":"2026-03-16T06:21:15.869785Z","times_seen":2,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/games/jackpot/mahjong-magic.webp","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/games/jackpot/mahjong-magic.webp HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:54 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 67046\r\ndate: Sat, 14 Mar 2026 02:31:54 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":67046,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ba81fa66974c944ed2bad9433d40109","sha1":"91eaea0a7e3e2f7e74a46e5528ea3954c816edea","sha256":"8b6827e88529e36f25484c237aa2dc2c8f2b71c6af94a9732bfb8e0174118961","sha512":"a2fc564c959dc62ed010f9e5ac94ba2ae0521ec30473491a3284395b788a553875a592c44bedc503db81a2d86399af17a30bed7441f888e49b08d72e2ec5615b","ssdeep":"1536:sG5YB2j6Pktmysm+HRdFYCONyhsqBbejcAoO6To+3Kt+:F48+xdTRBpejJovToqKA","tlshash":"416312791e1ee47e1c03512559afda27d8ec45e73bfa8801c78b16f22b061da60770ee","first_seen":"2026-02-01T15:05:23.43523Z","last_seen":"2026-04-05T05:12:25.275551Z","times_seen":14,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/games/favorit/King-Of-Spears.jpg","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/games/favorit/King-Of-Spears.jpg HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24078\r\ndate: Sat, 14 Mar 2026 02:31:55 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24078,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"49bf597398876d37690dd1130924b66b","sha1":"6042d5f7b77bfee65cb7c45c37deb1e10bae6099","sha256":"f2a7c8afbd906296bd62a29496fcba784e8eca10158e376e570fbffd6445d93b","sha512":"9e04d1023b20edc911fff88f5e5dc643436e9b5a91dcb5770c7e8900ba1bff3c9710ebb29ff9f3bfa4c028842abc545f3990399a15b68835598caf6511d0247a","ssdeep":"384:BYNg72Fpl1JJCmNA+25y9R0WEgDvAXwr7ozW4q3eb4KWRZrXsby3ocID/XZz0cDB:BYyyFpl1X8lETDEgDvmwrZ4TUds+L4XL","tlshash":"d9b2e0296fbb67d3f9e1ce3450aa7dca53dbb025f380218d23d4ca6850815c0ca631be","first_seen":"2026-03-14T02:32:22.20793Z","last_seen":"2026-03-16T17:02:59.612769Z","times_seen":3,"resource_available":false,"data":null}},"time_used":683,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":680,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/games/favorit/Diner-Delights.jpg","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/games/favorit/Diner-Delights.jpg HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12601\r\ndate: Sat, 14 Mar 2026 02:31:55 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":12601,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"86547b15c551b20b8a88180dd9526f7f","sha1":"cb1c8e12503975584e89cfc647a6a2cde078f317","sha256":"6bb517d16eed5e0e07d9fef0cda7a690104ed102f585e045e0c3873337878b01","sha512":"eb549499eb1c0723974bac222d18828ff937d344e552b2d7016cd08666b536d60ca3ba74e031470b59fb55be179bcbb05c98fd00b009568c674fbc0ca61ba4dc","ssdeep":"384:WHgae4fjPqfzu8n2aQx/uqb2spGvW0Sqvnd+dbpZwc:WHgd4fjPPKu/nbbGvWEQZwc","tlshash":"0542c0c6f9e168c4bfa26c9178839570454aec22cfd193fe60c5e8454e71fb18b1e2b1","first_seen":"2026-03-14T02:32:22.208938Z","last_seen":"2026-03-16T06:21:15.91165Z","times_seen":2,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":674,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/jackpot.gif","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/jackpot.gif HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:55 GMT\r\ncontent-type: image/gif\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 419803\r\ndate: Sat, 14 Mar 2026 02:31:55 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":419803,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 700 x 102","md5":"dd20d4ce62410a9463c37d4586ab2a13","sha1":"36673ddbbb27a5638f026ebf7a55d39d4bdae821","sha256":"7997d7170df421a6cb0d205a34b7ab521ce2bd1131f3fcdd257a01989a072736","sha512":"ab86fc5a7cef2a4307f6894a9a4730113a0ba4af005f61fff168c7510d3017cfb72dda9760fa60039147904798ef3e6f32c4a2f73e0540f94c835ab2b1a66cf5","ssdeep":"6144:zIaRCUQYXsa16SR2GRJWSoyZRBUmBC8VXQnEsTzFdsIndEotUXbGltUrGNWz9yiA:MlJar2qJ2yZRVBZQnE0SoqrG4rkWEG/W","tlshash":"ab94239f58a8cb13b83fbed04f4724157d8e4de9c91359b6746aba4c7a0906d12f2f08","first_seen":"2025-07-19T10:48:28.810134Z","last_seen":"2026-04-05T23:29:35.463698Z","times_seen":4,"resource_available":false,"data":null}},"time_used":730,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012601162341000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:55.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:37:14 GMT","end":"Mon, 27 Apr 2026 08:37:13 GMT"},"fingerprint":{"sha1":"1F:80:E1:44:12:8A:FC:40:29:3F:66:7D:B2:CD:6B:37:58:78:5F:62","sha256":"EF:BD:CB:97:0F:61:30:70:B3:64:A7:8B:27:68:D2:CE:8E:07:02:66:F9:1E:4F:FA:32:0C:8A:22:AD:45:CB:67"}}},"request":{"raw":"GET /rtv/012601162341000/v0/amp-auto-lightbox-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://portal69.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 2965\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 10 Mar 2026 19:24:38 GMT\r\nexpires: Wed, 10 Mar 2027 19:24:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 284837\r\netag: \"bcfe0d3a461d36bf\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7798,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7676)","md5":"8d1e1939a681e26ad7bac3e1bc7a4698","sha1":"1b6b404001ca244b6617aab982989604eb5db41b","sha256":"32a998421e9461bc53f942def0e915f0c7100cd4db2e516221bd443494147631","sha512":"af0ab1fedb33087a7bf24b01fdf1e1d7588e518104c563e448d68d0a4fed2c7a813f98e567530ba239e574abfeafdc4886b5e99d531ff14a7e075dff61f19008","ssdeep":"96:GKoAosPGpV3yMDc0jGAM+G0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:GKqswV3yv0jGAFCPX/tqKyWp4M0rDTI","tlshash":"0af196dc7ac2b83a5757b4b780af414fa63bb94624ad9120d120f0d83cb995ed633e5c","first_seen":"2026-01-27T21:42:06.36181Z","last_seen":"2026-03-18T14:43:08.908491Z","times_seen":2151,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:53.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Mar 2026 02:31:54 GMT\r\ndate: Sat, 14 Mar 2026 02:31:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10793,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"80df91dcfc8560910aca9bdd91a1e7d0","sha1":"2949de02fc38469258987e9b847a70a9cff1a21c","sha256":"0552ee50f635535685ba2713af81fa081791d7705baa9cdb3c5d1f463aa0a228","sha512":"65cbf1a5ff0d2e099211a39ed5128c8a95587b42dc854f30ffec1fc82e658911808709e5300319b495ec69bed73670e5c91404feb94fda4e7315b9b79ec62402","ssdeep":"192:+pspOlpXHaedhHdPgKQcXr3lVwa3RzJ/apsqiazk:+mkX","tlshash":"aa22add1087be114ab835cc123ce7d36ee1e9255b850e5786bfd0c98adabc254372b2d","first_seen":"2025-09-17T11:27:36.910597Z","last_seen":"2026-04-07T08:32:31.821392Z","times_seen":4700,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":117,"dns":1,"connect":8,"send":0,"wait":20,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-sidebar-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:53.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:37:14 GMT","end":"Mon, 27 Apr 2026 08:37:13 GMT"},"fingerprint":{"sha1":"1F:80:E1:44:12:8A:FC:40:29:3F:66:7D:B2:CD:6B:37:58:78:5F:62","sha256":"EF:BD:CB:97:0F:61:30:70:B3:64:A7:8B:27:68:D2:CE:8E:07:02:66:F9:1E:4F:FA:32:0C:8A:22:AD:45:CB:67"}}},"request":{"raw":"GET /v0/amp-sidebar-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9650\r\ndate: Sat, 14 Mar 2026 02:31:54 GMT\r\nexpires: Sat, 14 Mar 2026 02:31:54 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"df45f6b0644672fd\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31363,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31247)","md5":"b44bcbd9902a6a481f2e8fccdc72e0e0","sha1":"80a00b7c5a2f6c85a8e5e35a25a7cac53884397b","sha256":"364dc811bd3548aa75b0c0474fb10051817891a60f094c64f74ba5a98323bc59","sha512":"f1054575e0664808773515df02a5e1bc9cc6a5c69bd9838ddb2734c0966fece8fae6db72d14c5ba147fbb63ff2be22b60b0b24cac1d471fbe712e18f5e868d2d","ssdeep":"384:TnXCVRcBmEljVOL6DpbaGCF7YQ+CTvhsvuNE/h9puKL5Et5MfaWrFWZuz7:TXC0ljCjTE/vRL5EfMfaWr7z7","tlshash":"2ee2c89cf292b0714697a0b180bf450aa23ba555641b842cb05decc76d78e5ab237f7c","first_seen":"2026-01-27T21:42:06.364387Z","last_seen":"2026-03-17T16:27:48.036454Z","times_seen":197,"resource_available":true,"data":null}},"time_used":414,"timings":{"blocked":181,"dns":51,"connect":31,"send":0,"wait":26,"receive":3,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/icon/icon-jackpot.svg","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:53.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/icon/icon-jackpot.svg HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 23783\r\ndate: Sat, 14 Mar 2026 02:31:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31905,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"524d091d4759569c313dd81aab7d521d","sha1":"95b068a7e8847a60803b33fd7b051292be42303a","sha256":"4609cea657d57c84eb55546dd797d3098185421efb86ef0cf25e3e8d1447655a","sha512":"3172c7104d69254d1c7b6e7c5ba7c82c6ae2a18312bc9531b8b0ee8756e3a554c94184f7a44bbb8cffb76795c2447111ae27500d426f0758d9bbee8355bfeca9","ssdeep":"768:1SiFxD6THNhWHpmolBwPP0KB2j75lcTrwyl/K:siD6TtheBGPpw7QA","tlshash":"f6e2e01fce8ea7ac8516426c303bfdea0dcc6e4d80487aedb9c1b5ab15a655140b2715","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-04-06T23:09:25.725604Z","times_seen":1413,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/games/favorit/Slot88-Rush.jpg","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/games/favorit/Slot88-Rush.jpg HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 104429\r\ndate: Sat, 14 Mar 2026 02:31:55 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":104429,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2025:09:02 11:05:07], progressive, precision 8, 200x200, components 3","md5":"3bc29bcd0863ede121e1fd5595aa2766","sha1":"3bf5795705e52a6293856b6b397e9d6f32f77232","sha256":"e218a70757b74be02f12d6624e4500825a24f84bca9e4df5899f2c11b49014a8","sha512":"cfa0535f604517f4243cb9dc7d75a7ef221eb01f7c1c6992968f34558173e4d5ed3de0e8d3c3c67823e2f2bbc7ac94e553b098a59c0b4107c2ad6ccfeeccc3ae","ssdeep":"1536:1vKv9s4uJsyU+fG+ut04ERaTKh0dvs++mU2zl6YotdFODQ3MIRai:zsyU+f2t04vbXU6lZW7OD+PIi","tlshash":"2fa3017daabb6f51f9e0b13164e48506a720fbe28a53a391b44dfc0177742828fbd413","first_seen":"2026-03-14T02:32:22.212792Z","last_seen":"2026-03-16T06:21:15.889071Z","times_seen":2,"resource_available":false,"data":null}},"time_used":836,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":676,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/icon/news.png","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/icon/news.png HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 336\r\ndate: Sat, 14 Mar 2026 02:31:55 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":336,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 23, 8-bit/color RGBA, non-interlaced","md5":"a19ecddf9a2433247df17487b78cde70","sha1":"06aa60570d2098b88c82019afe8faa9106a8d457","sha256":"2178139d950466efdddf2e72fdb03f3b8b508d2468dd227813142dd0955f9a9f","sha512":"1f040f0027c49e3bd6c8a5c15e0ef7d2ef6115aa00107ac1fa4df9ba6dce3599dfb82b5e5b96b11467fb0791b521676e65a3cf5369b8619a4b1041a436bb8719","ssdeep":"","tlshash":"6ae028e4d71e85d4d51e0f67de95f11decf5411459ab3545064cd57b0bc00c4c4c8300","first_seen":"2023-08-15T16:00:28Z","last_seen":"2026-03-30T20:45:37.24019Z","times_seen":6,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/icon/icon-gacor.svg","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:53.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/icon/icon-gacor.svg HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5154\r\ndate: Sat, 14 Mar 2026 02:31:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7663,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b9ac3698353188323aca1e72b0b415da","sha1":"c28c2c237808f3f960aa78f35880123679e14084","sha256":"f80d635418113fa7972b15027e670b2706ee2820163b62b2f27145f9073ac0b0","sha512":"7aa2bf1158e6546e9e8dd9784f7f67f95cab57d65d918b0598d781f26b5f973776929af9976112d7cf0d0bdb187dad6ea59bd15d126f0d7b2718dfe4802c8cc8","ssdeep":"192:1opYUslj6GuF9Tf9kLkAPEj18y2Ysi4My8O+:1oSlmNF9Tf99AEJaY348l","tlshash":"10f16c19a178ec2fdbf4817270a740546f1a5093f3b357c44ea203b38a0da55049aefc","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-04-06T23:09:25.752675Z","times_seen":1161,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://portal69.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Mar 2026 00:03:09 GMT\r\nexpires: Thu, 11 Mar 2027 00:03:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 268125\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-04-07T11:14:56.548365Z","times_seen":297693,"resource_available":false,"data":null}},"time_used":1452,"timings":{"blocked":720,"dns":2,"connect":14,"send":0,"wait":16,"receive":1,"ssl":696},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/games/jackpot/fortune-of-olympus.webp","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/games/jackpot/fortune-of-olympus.webp HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:54 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 77864\r\ndate: Sat, 14 Mar 2026 02:31:54 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":77864,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4f7609a17957c32e9da0ff2a3ab0d38a","sha1":"9d7eeca4945a46c4d78de8557f4f71162ac2417b","sha256":"3c23e0f9ebb2963a0439d40b5020c0215e655cc2904dfba14482bddfdde16734","sha512":"80938c7c20695596fa6010efad8f33891b57240b7f6bf81119fdae06cf60cb34042e22f863d800bd209bcafecd6b290c97a98d82643699bb6350a3643581c5aa","ssdeep":"1536:mStQ7TqiFfDutlTGwk02FK0BMH1r/RB2JBdAjrrXBFd33:m7Tqy0r0SH92ujrDB733","tlshash":"6573029601311abec97a180dc567c3a1b28fefc20ebed42f715961f0fc61b086969b4d","first_seen":"2026-01-10T10:25:03.113151Z","last_seen":"2026-04-05T08:20:54.926812Z","times_seen":12,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/promosi-slot-games.jpg","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:55.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/promosi-slot-games.jpg HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 12 Mar 2026 03:16:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 282564\r\ndate: Sat, 14 Mar 2026 02:31:55 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":282564,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x613, components 3","md5":"416bf2919633ed7bae90be0f4c394114","sha1":"9e42f0b454c039468b769915e31854a9103cbd72","sha256":"151f42b64dda07b9203bc2cd725ed09ed050f2ac72393c262061711a2ce0dd9b","sha512":"625f4fff2bc1bab66ab35bd6a38e04afe71d344f393ea90299c471d1a09b8b1dbfb7dea0ddbda5d44f65bc183cd97d8ad9d20e93ba2b9888f5c14991c9528cb3","ssdeep":"6144:wWBr9PfbcR2Q2VCwjkdn2hUR8SiQhSGZWPM9WsTPJmq9r9eg/k:br93bccQ2VCwjkdnrR8SiQhSsWPVsTje","tlshash":"115423fd61c2e58bc9af426c7b6c05b583fd01dea72880d7d1d0416994b62f9a0e788e","first_seen":"2026-03-14T02:32:22.216368Z","last_seen":"2026-03-14T02:32:22.216368Z","times_seen":1,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":454,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/games/viral/Lucky-Twins-Nexus.webp","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/games/viral/Lucky-Twins-Nexus.webp HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:54 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13100\r\ndate: Sat, 14 Mar 2026 02:31:54 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13100,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"39e01a11cecf194bfd0dd88539e61350","sha1":"62e5107fd7253f2e0c1c31bea6baa79f18d52cc0","sha256":"de815985cca45ef8e93e564749333bbf84be1a054961f86a06b038ef56464fed","sha512":"91be7f79f1de7726c40701324c0474c56fbc3e7659b08406b7bbdc2097e92e7f7bc2ba834d0c1cc3370c43d91b12e585956cf6fe28055f11d2954eccb72e92ad","ssdeep":"384:EXJHsBeNgdXLlO6ToF5egjwWrPJ0EQPMhMCVZg6/:YHsBeNXhF5egvDgWMCV7","tlshash":"1842c052bc432e66ec0f7f2b8354837163e81ad4e0d4cb434ade1277d60289d6dd1ea2","first_seen":"2025-09-30T11:15:33.678272Z","last_seen":"2026-04-07T02:20:13.179355Z","times_seen":307,"resource_available":false,"data":null}},"time_used":680,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":679,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/games/viral/Mahjong-Ways.webp","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/games/viral/Mahjong-Ways.webp HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:54 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28688\r\ndate: Sat, 14 Mar 2026 02:31:54 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":28688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"af1d53a0e673ee9b8247ab093ebd6152","sha1":"7ecb269959c1efc583f9351691b6ea6ea4d548ca","sha256":"a6cb36e0f9dd285032e9e19b2eebbcd66369743313562a4c72233ba70227780b","sha512":"585e6046c0811e726f347b546c29f106b10e6d462dfc2bd12dc0d94d9a5bbba142a8e59d255ea8b69343e59c4b13bbadaffc74925eb019767d2779454af4b55a","ssdeep":"768:wmj5ehJdU2lNpqKshQ8JUnmcxygwuujBt:wOmnU2fpqKqQ8enTxuFBt","tlshash":"8ed2e1361ff59fc833b5b45dedd4b1b80ad6e4324461a067df76141ab4d28e3bc99044","first_seen":"2023-11-06T12:43:48Z","last_seen":"2026-04-07T02:20:13.176521Z","times_seen":334,"resource_available":false,"data":null}},"time_used":678,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":676,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://portal69.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Mar 2026 00:06:04 GMT\r\nexpires: Thu, 11 Mar 2027 00:06:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 267950\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-04-07T11:15:33.619655Z","times_seen":205266,"resource_available":false,"data":null}},"time_used":1419,"timings":{"blocked":708,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":694},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:53.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:37:14 GMT","end":"Mon, 27 Apr 2026 08:37:13 GMT"},"fingerprint":{"sha1":"1F:80:E1:44:12:8A:FC:40:29:3F:66:7D:B2:CD:6B:37:58:78:5F:62","sha256":"EF:BD:CB:97:0F:61:30:70:B3:64:A7:8B:27:68:D2:CE:8E:07:02:66:F9:1E:4F:FA:32:0C:8A:22:AD:45:CB:67"}}},"request":{"raw":"GET /v0/amp-lightbox-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8540\r\ndate: Sat, 14 Mar 2026 02:31:54 GMT\r\nexpires: Sat, 14 Mar 2026 02:31:54 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"5dd7131a95c6cb40\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26664,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (26547)","md5":"5ff91886e860e4619d05516e8f995ac9","sha1":"56468dd46f28eede1ba8d02e853f704880f2f6af","sha256":"40f44e561cd75242d279c273a68619979a6fefc12cebd9b45852569f0f376032","sha512":"75762daad99642e3ff371277cde27363a8cea7589bfa825eed5a17ca943a1a8c67c49c574797e3ec43cb9f0b70fa2b03db8b5ebe00e01124036d9cc1455dafba","ssdeep":"384:HCXUpS23O0bbj36DTbaGCF7sQY8EvEtjWHF4w5PAyEXaE5GOLyawhrys15:HCXUVOU2vN5tmaEhLyawhrys15","tlshash":"1dc2939df282b47542a7e0b5507f860ba23ba058644e442cf42de9e27db8d4a7137f7c","first_seen":"2026-01-27T21:50:45.479821Z","last_seen":"2026-03-17T16:27:48.019524Z","times_seen":81,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":177,"dns":46,"connect":18,"send":0,"wait":33,"receive":9,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/icon/icon-populer.svg","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:53.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/icon/icon-populer.svg HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 43234\r\ndate: Sat, 14 Mar 2026 02:31:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":57328,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f8f5f25769046146ae42b17a41c0a16a","sha1":"80e7bba523210c58296f8de4a6fa6a22e913382f","sha256":"dafd7d97d8675bb8ea10eede4680abba88a04c54242a3333a291d66dc91c6e27","sha512":"fbc4ffe351d868e0bc7742724578a558932d9f17c423039657c3150f3adae2e0c5f2dcc3559e94e5d4349e24e8cab31e708cfd982b5ee5419455db9802ad9b87","ssdeep":"1536:JWAHKFFqtSQd1JZjfknvKi05k1QnwqR1FmRQv+qP:JWAyYtS21JVfWXLi1IQvNP","tlshash":"e743f1423f407f7c4976d289916cd15fec26a88f6580ab5f7ef38895b27e6080ca50ad","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-04-06T23:09:25.722111Z","times_seen":1166,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/games/jackpot/poker-win.webp","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/games/jackpot/poker-win.webp HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:54 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74470\r\ndate: Sat, 14 Mar 2026 02:31:54 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":74470,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ac6611c43619f65dbf2629b251955cec","sha1":"ab27d7efd8cd84860674952ed4dffa6c591b99f7","sha256":"abe3e7facd8c9d260aeca116430116b40d3421c77596856992dbbe2048b371a4","sha512":"71b0c26234037fb74c3d6ce03710f6fe4abed2775f1152d387fb9ba6840a2c746dabf8adc179e1961ff0be4a579e49048452fa64c6a27455221237cbb5348a8f","ssdeep":"1536:Ez6fLSqYpJDiZyETTOZ1e2CB2RhMdxxycIRZLn/dIOADq3ColPVsLTCxtLP48S:QDTyKvhM4DZrFiu3TliLTCEb","tlshash":"237302c357e9d3c56662b88ffa06e0674c9ea038ee1ddd08f1bd815a13c4c9b99c469c","first_seen":"2025-12-22T00:56:18.786478Z","last_seen":"2026-04-07T02:20:13.222763Z","times_seen":78,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/games/favorit/Lucky-Tiger-1000.jpg","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/games/favorit/Lucky-Tiger-1000.jpg HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 21817\r\ndate: Sat, 14 Mar 2026 02:31:55 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":21817,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3","md5":"20948d2a7ca14b92a97beba5c34d116b","sha1":"57c6f0e8b02192c3194e2e35594fb7388abcca3f","sha256":"99a3670701762cae4974b7449c580076504f0b3f62917fac68c06275575bb9ce","sha512":"dd3b86118f2cc18f4466a606310d52b62b9bc9a982380f3ed43856c28c6d1eb62ca57a8e4c6ad089d9295bfa383fd6edbe75f8c3ef02e028c1e3b9e198f406c2","ssdeep":"384:BYNg7FNan8t5VKItBVWh9lhJG98UuNMRFQW3ZfvXBlLZLuPmrJxh:BYyvan8/VKILVyBo9iCIWpnRuPaJb","tlshash":"67a2d071af1fe643fb1eda3c41636bba716d3335d3d41458a62cea06c3460812e8e359","first_seen":"2026-03-01T03:06:04.745457Z","last_seen":"2026-03-16T06:21:15.91076Z","times_seen":4,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":676,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/games/favorit/Asgardian-Rising.jpg","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/games/favorit/Asgardian-Rising.jpg HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14784\r\ndate: Sat, 14 Mar 2026 02:31:55 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":14784,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"1a2078c3fec19f2e94addf9f741858e2","sha1":"0bd16b2e095615cab22ae4ec1f3fa4bece675ba4","sha256":"a5b0e971506ffbfd294e2af8a515f3aaab7c1c91646924ee32437904238788c3","sha512":"7d954917b57b7a830e13aa9da001c34c5f085244ad4af2159cda8373b5376e9624f8b0aa6edeab943635d5f6900e2902ede27b927d704b882d644f839e7f7cf4","ssdeep":"384:W4X400vfqlY0/gWaw5pCXu7v5hXWDeQb/RVGyX+/RFQc2stX/CF+6qn:W4XnmilY0YJwz5ZWDXvGj/HL2uvCM6qn","tlshash":"f062c0adf02b6fd2af4ea83b54d51a02964ab021d58cb9271a4b001c317befd960d0f6","first_seen":"2026-02-10T23:12:10.600332Z","last_seen":"2026-03-26T03:10:21.537513Z","times_seen":4,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":678,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:53.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:37:14 GMT","end":"Mon, 27 Apr 2026 08:37:13 GMT"},"fingerprint":{"sha1":"1F:80:E1:44:12:8A:FC:40:29:3F:66:7D:B2:CD:6B:37:58:78:5F:62","sha256":"EF:BD:CB:97:0F:61:30:70:B3:64:A7:8B:27:68:D2:CE:8E:07:02:66:F9:1E:4F:FA:32:0C:8A:22:AD:45:CB:67"}}},"request":{"raw":"GET /v0.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 73111\r\ndate: Sat, 14 Mar 2026 02:31:54 GMT\r\nexpires: Sat, 14 Mar 2026 02:31:54 GMT\r\ncache-control: private, max-age=3000, stale-while-revalidate=1206600\r\netag: \"cbf8b0320ab789fb\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":284617,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64627)","md5":"de93c62fe8d520d5f20d3a375921f388","sha1":"ecc3eb0c77b12d60831c1f456bad0302b4d5db83","sha256":"07443ee9c85233c09c22c0668278316d8d4c25b7a5af83eba6ac761f30b75dff","sha512":"ea341717b7f75186720b4a3aab7f653eebeafb92ee328fc9fb2b2eee0365e201b11353a0f1d0fd5c1c8f8c06a134626f38b4f3375513675a9d1fa78ee065c156","ssdeep":"6144:HoUwkmOu6CFmZZoS2/VdK/HWL1Uqb9W9z:IlLWdYeW5Uqb9Gz","tlshash":"6154949db296b0724793b075803f150ae33ba855240a812cf56de9d67cbcd8aa137f7c","first_seen":"2026-01-27T21:42:06.365435Z","last_seen":"2026-03-17T21:09:47.691036Z","times_seen":2185,"resource_available":true,"data":null}},"time_used":458,"timings":{"blocked":191,"dns":52,"connect":18,"send":0,"wait":34,"receive":20,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/games/jackpot/wukong-black-scatter.webp","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/games/jackpot/wukong-black-scatter.webp HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:54 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48034\r\ndate: Sat, 14 Mar 2026 02:31:54 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":48034,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9b838cabeb7767209db1664f4751de6f","sha1":"559ce4a036951ac3f26db171019a3a62f68e70d5","sha256":"61ad8b7dd76238c118ebaff06225f30f6a25764592ed4a3f8cf98bb8dc3a3e04","sha512":"4f921ce1d310fcd07279358b6e86f7dceaa094434abb3cd20f52ba1db87684b84d36a55fec18de2c0d7d07f451cd7ca67f1f6cfef33d5be7fbb4c5efd52a651c","ssdeep":"768:M2BTzmIBpm5wq8c0+cROpO/8/WJ0apGEqus3cTN6qzexNhKxfcWKzo4NXjeq2FnL:NzmO2wq8c0cQpRqusvqq/wZc17hjBxPC","tlshash":"c023f21a4789129f5181f88fad6494390a28eafc83f942ed46a7647d6f32d206f0069f","first_seen":"2025-09-30T11:15:33.789281Z","last_seen":"2026-04-06T18:55:22.860424Z","times_seen":237,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/games/viral/Wild-Bounty-Showdown.webp","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/games/viral/Wild-Bounty-Showdown.webp HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:54 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10658\r\ndate: Sat, 14 Mar 2026 02:31:54 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10658,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7800b3dd65b012e5a998c3f4e2551649","sha1":"a8a8d9438fc391fe55aa3a878ae515f2c5076980","sha256":"1db58d5601dd8d3b42dec6c2a01eb97cc812efb938b5b6045453a2fb84d383af","sha512":"d66c8b299d8d0d5fa06742a9eff9e8c4e9f4a6c316a4a5ee81ca5e02a0f1401b87d512c090884096123667554743fbddb33a78b83c89c29cd227ce4638dde2cf","ssdeep":"192:l8M3mgHPWbCB0EWae68rC3hxS4jr7CtJ6id/xZP+bRmElxMUd4s:eaB0l6P3hxS4jCr6E/xKL+KN","tlshash":"f422d007ad40547194ae3363ce78e98757e0260962cd7fb1eab2e8b41d27212d5e60e1","first_seen":"2024-04-29T04:54:20Z","last_seen":"2026-04-07T02:20:13.218085Z","times_seen":340,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":513,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/Portal69.png","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/Portal69.png HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Mar 2026 10:10:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 110160\r\ndate: Sat, 14 Mar 2026 02:31:55 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":110160,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 745 x 238, 8-bit/color RGBA, non-interlaced","md5":"66e7dc4ac33c11eaed784dc0d1dead61","sha1":"bfc1354b67e928fd918177586385e0a9e98d10db","sha256":"c6820a0e35107e263991eb05d1811a53035dab99a837350ffcc587525aefd0a0","sha512":"9b26f0694fa14dcb32320d8fecdbbddaa6a6465411bdb68d927a87561c26069093a33b80587892935d9604836102d29e67bc4050e8d0c739552f539b384f1402","ssdeep":"3072:jJZH+dCdMDi+grc0nSgSahzPzGcp31gkPI8y:jzkuGNgB8Q1o5","tlshash":"39b3132cf7a9722cd9982493ac33ab476b681fb5b251c04f3b366ec55477c74889b318","first_seen":"2026-03-14T02:32:22.223206Z","last_seen":"2026-03-14T02:32:22.223206Z","times_seen":1,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/favicon.jpg","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:55.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/favicon.jpg HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28541\r\ndate: Sat, 14 Mar 2026 02:31:55 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":28541,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 192x192, components 3","md5":"6dd7c9955f8a7220b8cb55a4e4b997a2","sha1":"d97056ce700d848912245675e5608f8df9537a77","sha256":"d91d8071c4583efc4085faa4b2bfd810ad2e00efecbefde1a94f7a1234f907b1","sha512":"2941c8a3af5f21265e59a0797c1874e5d7b14efc8a2ffbba5641f4b46d630258a3ae4f62f7a3047f48ebf8902629935b70ce4a95af68aa816b0ad16862b5f582","ssdeep":"768:oYylJmi6Q1wl5eu82dtJhbuIHZE7QgVOfvtAika:obmT6Vu8EtJR5ExVOfKVa","tlshash":"23d2f1fb93467f62de85e0312892cb343961fd60057ffed1c1916258b606aa1bf6c213","first_seen":"2026-03-14T02:32:22.20266Z","last_seen":"2026-03-16T06:21:15.904701Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T02:31:52.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Thu, 12 Mar 2026 10:19:31 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13462\r\ndate: Sat, 14 Mar 2026 02:31:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}],"data":{"size":110010,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"bb5a40eaaab010ae45499c7371a108c9","sha1":"28a5b3f8508c435df238a8ce7a786a2292d05793","sha256":"59684452382730d290774bfccc60186997e01ead99e2d8594f7fb27bddd23549","sha512":"dc48c546f05d9f5798f296f6cb146bb9adf71c804538b3c4a71d500f34d1507bb9e4c68244c6630bac266d2c43e61bf02fce377799dd4d05654d7df060883df6","ssdeep":"768:OVzALgJXGT+JPkS4YDhf/SuvUAIpvswIFCkRsQNIQnhZQCTSgR+Lo:/gIT+VvUAovswIFCkRsQNvhZQCTv+Lo","tlshash":"25b36216d942204a18339369dfa29b4eff965153c602c55d7ffda3828fb2841c9a3f8d","first_seen":"2026-03-14T02:32:22.22427Z","last_seen":"2026-03-14T02:32:22.22427Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1245,"timings":{"blocked":455,"dns":50,"connect":166,"send":0,"wait":335,"receive":0,"ssl":235},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/games/viral/Olympus-Super-Scatter.webp","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/games/viral/Olympus-Super-Scatter.webp HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:55 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 29338\r\ndate: Sat, 14 Mar 2026 02:31:55 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29338,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2c4f3b7bcce578248aeca202ed8f1c38","sha1":"7c376307d253e2a7626fc51ccf756e6586ef437e","sha256":"ae4c722c4d93e330cd4b640f27806b779ce39251dd756ea2acd912472a3b8c6b","sha512":"c00a24c9dd68429e10bd13148b0570eee7797bba15a5f4b1cd1aef5e64268e0558bc0db8d26fbf886cceed777a754c1b78a693d3e2a27abc142951f30a18be04","ssdeep":"768:wFYyTg5a6kTGiljJ6YLRbEHrwe8J4bJbNOg:YW8TGipJ6504VbNOg","tlshash":"79d2e1e2b3d6a3a1d05485323c774ba99262d66db3003d52e573be1750601a1cbe23bf","first_seen":"2025-09-20T09:49:18.445001Z","last_seen":"2026-04-06T18:55:22.840278Z","times_seen":240,"resource_available":false,"data":null}},"time_used":683,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":680,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/games/favorit/Mahjong-Wins-2.jpg","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/games/favorit/Mahjong-Wins-2.jpg HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:55 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33266\r\ndate: Sat, 14 Mar 2026 02:31:55 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":33266,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2024:10:09 14:02:28], baseline, precision 8, 200x200, components 3","md5":"02238139fd1b40ae6bf29c55713ed1a9","sha1":"eb3681c9a8084a5eaea83d0855d07179b50d7832","sha256":"f0cd479240a6d323c2bd347c4391f29ceffcd8d44f6c624e2511b637ab7e5191","sha512":"311eed51679bbdc4774ba63f1c949902a3e1ab25a8401c321f65d37aef769bcf2685a695df706ab91f54e5043a9281bc2bb3305016095c5e87cf3ccd211af759","ssdeep":"768:BYybo4W17rtlx5hBUxbPdWn5iGkZCkxD84Vd:Boh17rtlNBcbc5iUkDd","tlshash":"9ee2d095f21b9e24ffd1a6305ea9bf54a6e2e6416f46126e34ef57197b20cb0cc09013","first_seen":"2025-04-16T23:04:51.850194Z","last_seen":"2026-03-30T20:45:37.256554Z","times_seen":57,"resource_available":false,"data":null}},"time_used":835,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":676,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012601162341000/v0/amp-loader-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:37:14 GMT","end":"Mon, 27 Apr 2026 08:37:13 GMT"},"fingerprint":{"sha1":"1F:80:E1:44:12:8A:FC:40:29:3F:66:7D:B2:CD:6B:37:58:78:5F:62","sha256":"EF:BD:CB:97:0F:61:30:70:B3:64:A7:8B:27:68:D2:CE:8E:07:02:66:F9:1E:4F:FA:32:0C:8A:22:AD:45:CB:67"}}},"request":{"raw":"GET /rtv/012601162341000/v0/amp-loader-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://portal69.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 3927\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 04:58:50 GMT\r\nexpires: Mon, 08 Mar 2027 04:58:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 509585\r\netag: \"f118bd7ec62de08d\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12715,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12600)","md5":"88a4d82a5fcbe799aa3cd604d0add90a","sha1":"5614c8c0cb0b1ea9f6252f9a1c0465d68fad49c4","sha256":"28e18a22a127994816624a5d8843978ff13ec874e7bb6c3ec57d236fa85864f8","sha512":"f5e8c8ddfd89af0765afc670f3e2e847ce78e9a1f7bf0c75288d541f4445c02246b0da7b8a8a25a6d2aba28c72d671416108d80adc3404dfd2bd9ee9a3fc4a8a","ssdeep":"192:EfQHMOgzKBbnnRrVGOoPFU6rO2tHrbLvANHzMb5F4g5A4WR2vN:u0g2BbnnHWbLvARzMb5F4g5A4WR2vN","tlshash":"4d42a364a54ba2ac530341b484fab906757ecd4fb8104035f0118edecf99f48bd7ba6e","first_seen":"2026-01-27T21:42:06.359185Z","last_seen":"2026-03-18T14:43:08.891553Z","times_seen":1620,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":72,"dns":1,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://portal69.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Mar 2026 00:05:32 GMT\r\nexpires: Thu, 11 Mar 2027 00:05:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 267982\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-07T11:18:53.206929Z","times_seen":194532,"resource_available":false,"data":null}},"time_used":1467,"timings":{"blocked":729,"dns":2,"connect":28,"send":0,"wait":15,"receive":2,"ssl":688},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/games/jackpot/mochi-mania-1000.webp","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/games/jackpot/mochi-mania-1000.webp HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:54 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26894\r\ndate: Sat, 14 Mar 2026 02:31:54 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":26894,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c42fc80a564ac8b91e809abeb7789606","sha1":"34a508040ca4fd21e3997cf833ec39bada2ba5f4","sha256":"b479108aa7b849f10a80a7a1256235b5ef99cf5f0f90fe218a08338b9985c5a0","sha512":"d2e3709fc0e7bdf00f2956b0b7eeeb9dce35e9c4143bbd3913b4de07dd5a8145c536926e6d446273c33041becf061d911aab8ece2c9fd7f3fdbf01b0a7c977de","ssdeep":"384:bFYNg7T17HzRsWEWhBi/ODvh/odTaq10kGMbQFHnrqogVYh1zndZqjLeBpSfUdJ8:bFYyXxHLhw8wJi+UnzgVcRwOrSfUAH","tlshash":"4ac2e0f1ab20d734ca30d67848e9e387a2b333a8ea143c16b43cd77b9739440b61a156","first_seen":"2026-01-25T20:41:40.303404Z","last_seen":"2026-04-05T08:20:54.917009Z","times_seen":7,"resource_available":false,"data":null}},"time_used":678,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":677,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/assets/images/games/viral/Nexus-Outsourced.webp","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET /assets/images/games/viral/Nexus-Outsourced.webp HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal69.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 02:31:54 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 10 Mar 2026 07:02:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33738\r\ndate: Sat, 14 Mar 2026 02:31:54 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":33738,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"61c703cec49083fd37fc37ed63bbf6b7","sha1":"34210e4c002efdf615625f9fbc9bec3b5b669107","sha256":"03e24dd21c28ce27d3a4e527fd42ed53e56e31e4096062607b22606242ddb7be","sha512":"708fec5cd4ef6a831d6728d8e34f58cac814f9f6c4ddbb49bd08fa3f6594220046e32c131fb22e7b662f12b584271c0b2594a7344a9e8f9fe720c57faeaa522b","ssdeep":"768:1FYyy97nzPQWuuyZCTeK42lgUKU4XwtYZMz6RkTsgoVYH6ya:H0zP1u1CTCYgUKU4XY6RkTIVmHa","tlshash":"7ce2e1cca4619772e6b8b3b851f50bee6375607dd67197f62c82903223b46c286ce1d8","first_seen":"2026-01-28T07:33:51.289662Z","last_seen":"2026-03-16T06:21:15.895535Z","times_seen":4,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal69.com/","fqdn":"portal69.com","domain":"portal69.com","tld":"com"},"ip":{"addr":"66.29.148.146","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal69.com/","date":"2026-03-14T02:31:54.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portal69.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 12 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:EF:B9:32:D9:95:A3:6B:5C:68:34:5B:89:B4:2F:18:7B:C4:1A:10","sha256":"F6:66:77:2A:4A:A7:18:70:88:CF:25:AA:AE:85:AB:6A:48:13:29:EB:3D:38:E3:9A:0F:0F:48:51:AF:8A:AE:E5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: portal69.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://portal69.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Thu, 12 Mar 2026 10:19:31 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13462\r\ndate: Sat, 14 Mar 2026 02:31:55 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":110010,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"bb5a40eaaab010ae45499c7371a108c9","sha1":"28a5b3f8508c435df238a8ce7a786a2292d05793","sha256":"59684452382730d290774bfccc60186997e01ead99e2d8594f7fb27bddd23549","sha512":"dc48c546f05d9f5798f296f6cb146bb9adf71c804538b3c4a71d500f34d1507bb9e4c68244c6630bac266d2c43e61bf02fce377799dd4d05654d7df060883df6","ssdeep":"768:OVzALgJXGT+JPkS4YDhf/SuvUAIpvswIFCkRsQNIQnhZQCTSgR+Lo:/gIT+VvUAovswIFCkRsQNvhZQCTv+Lo","tlshash":"25b36216d942204a18339369dfa29b4eff965153c602c55d7ffda3828fb2841c9a3f8d","first_seen":"2026-03-14T02:32:22.22427Z","last_seen":"2026-03-14T02:32:22.22427Z","times_seen":1,"resource_available":true,"data":null}},"time_used":650,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":648,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"portal69.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}