{"report_id":"73ac8521-0520-4e9e-a795-c66d535140bb","version":6,"status":"done","tags":[],"date":"2026-01-18T20:46:03Z","url":{"schema":"http","addr":"agam168.com","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":0,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"final":{"url":{"schema":"https","addr":"agam168.com/","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"title":"AGAM168 : AGAM 168 PUBG Mobile Terbaru Mudah Menang","dom":{"size":188370,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (42345)","md5":"8ecc53026b9bf7e11048363d71ecd22c","sha1":"aef5412cb7d97937604ca3839756d0a8607455f7","sha256":"0e610192a55908ca24e735747bd8f4c9f594bd838cefb5cd2c53b1bb2e5af5de","sha512":"82a8173102bf5a9e1bafd85046a7011a850f950e451c16b2c8a64b611b912595b59414da120115aba14103553f251f0f54716183386f95355a2bb7902978ddf9","ssdeep":"768:+hdWk5F4g5A4WR2vEE1HtyQG6zhi2VMnUYvtRhFU5JI+3uC7L5ZFUh4gbFxEX91Y:MZ5F4g5A4WR2vEJ6EBbwUEX1Li","tlshash":"ab04a663784d016f6617c741b1e8f5bb9e95c90bc9314a85f8aeabccc741f42763a22c","dom_hash":"domhash5b43780a20fc74cf6a332b1952c64090","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"agam168.com","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":0,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-22T20:46:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"agam168.com","ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"domain_registered":"2025-01-11","domain_rank":0,"first_seen":"2026-01-18T13:42:59.93751Z","last_seen":"2026-01-18T13:42:59.93751Z","alert_count":291,"request_count":97,"received_data":2544714,"sent_data":46388,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.ampproject.org","ip":{"addr":"142.250.74.129","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2015-08-31","domain_rank":3289,"first_seen":"2015-10-09T04:27:01Z","last_seen":"2026-01-12T05:08:52.494019Z","alert_count":0,"request_count":5,"received_data":340738,"sent_data":2262,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-anim-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.129","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a59e185ac3c9716b396b16139b3b670e","sha1":"2c9c6b01aa48938ec54e29537007e67f9f184053","sha256":"4c389a4a24409b9adf11fe52f730c64e41acc34b0bb89e1b732476334763aa4c","sha512":"e31af03811a7dbfe9c599ea9392b166eec72e28b5479b3bc6dfa78272c09cb8d5efd6f3c4b6c76d65751310fba7f59655366559aa1f3767b873bfc0fa303ffe5","ssdeep":"","tlshash":"5571b7bd3285b5735b963ce1446b5405fa3d64263407c868f268decf2a3ac5624b6e3c","size":3802,"data":"","first_seen":"2026-01-13T08:08:20.852495Z","last_seen":"2026-01-27T15:22:38.510001Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.129","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1eae85b80471b7dcd6fbfa177c023405","sha1":"8a0adf96e5aeb4445cfe4850bdcf61b293c1205d","sha256":"1db7a299d3ca4347b7540205a83320a6acb9172aaab43da164f0c99111aa913a","sha512":"5935ecd5ddb2d4202a68a9585c43a1ce199644ebd6e06f1783378d50891fb314b11cc9f42ea65147ce132b0e63d7126c95dfdec25cd255ddc8c68c5cf127e068","ssdeep":"3072:xHlwUahpbFl6/LFWdfsAsafywqk1gWx3AtsYg3:/wUahpbFlsLFWd0afywqkqWx3AtM","tlshash":"ae24d6a63286b03247e558f5d4774002f3296998340b806cf96ceecb7c69d86b1b6f7d","size":228272,"data":"","first_seen":"2026-01-13T08:08:20.878105Z","last_seen":"2026-01-27T15:22:38.516884Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-bind-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.129","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cea34041e2b44a6557c013cbea145bdd","sha1":"77ee814b29dde88ca3177ae0fbb084a2238eedfe","sha256":"33c42fd0bea3b72af139a795146d763ca6a9c95139acbc1db25821aabbec9ad2","sha512":"e7f38164bdfb3429dea0222f70ffa45c6eed599a8cd62446f0eb4537dc2e5ae26f07f14bd74a7f480748676c8de53bf244ab6ddacf5360599c73015b4dd9ab4b","ssdeep":"768:LXCdqZrAK6LtckY9WxJXT9TfenUuGAjc5Ql0p43fHLX+37/dR4l4LK9iwhJ0ZBsP:+qYdzL+UVkcw3zvEEJpopkqU","tlshash":"0113fab53282a43747d648e690377012e32d2956300bc8e8f1aceecb7c77955b4b9e39","size":41956,"data":"","first_seen":"2026-01-13T08:08:20.869933Z","last_seen":"2026-01-27T15:22:38.522829Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012512221826001/v0/amp-loader-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.129","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd4d7ddb5e8b0c4073b83eecfc27adf9","sha1":"190f41c73da1274020c58d8bfd96f599ee171375","sha256":"af2604256c2d9555ace107d339658439df510143cd493d5b4ad07c84311ce66d","sha512":"4f45cc86fe81a880151086a970c92caaf0f8e54325703c89dde221edc784821ce823c5e0b7b74fb60732292559c5310eb8f77fd226d7a74875133235002ba8ff","ssdeep":"384:Zo39KdedznnHjuxJOulqaa5F4g5A4WR2vCk:K39KMdTDu7OulDa5F4g5A4WR2vCk","tlshash":"e842a360a50ba2ac530342f488f5b856757ccd4fb8214079f0504ededf8ae54bdbb96e","size":12361,"data":"","first_seen":"2026-01-13T08:08:20.871269Z","last_seen":"2026-01-27T15:22:38.525252Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/bank/gopay.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/gopay.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"a06-696abe73-6f647;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2566\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2566,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"b8771de54536e9d754dc58a51d9da827","sha1":"5740b8950fb4137da7040b6e929fef6a371504d1","sha256":"450c5693b4a594e025753ada485c95646f6f9b95434887a2b9be52776aad1397","sha512":"6388ef540f6228b2423372814408aaa0bdc01ea66dc9dcaee162c9b0813677177fadac544b34ac7f6b3b472bfd186b9f1d6a86921e3f5794a6b2fa9fa8a06f9b","ssdeep":"","tlshash":"fd511a1dfd04bc43315de2671ce15526ca04acc0cde1da2bb65fc417aa746d04aaa9ef","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-06-06T03:48:30.029031Z","times_seen":1523,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-18T20:45:37.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlink: \u003chttps://agam168.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://agam168.com/wp-json/wp/v2/pages/18\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://agam168.com/\u003e; rel=shortlink\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"356.6\",amp_style_sanitizer;dur=\"233.3\",amp_tag_and_attribute_sanitizer;dur=\"108.9\",amp_optimizer;dur=\"28.8\"\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: gzip\r\ncontent-length: 16721\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":165006,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (42298)","md5":"264f265922bec777a625d4be0f08eb3e","sha1":"5b2facec352bff62e2263e55a9caea2af4dfb2a1","sha256":"6436663000cc103d51e75e31fc3613527ed75c481768e5d2aee25e5f009d438c","sha512":"a288d4e5cf7577432806d1f0ea74bd1d493e3708586baa716f26dbcddc3862cc715f589bacaf9d5c2b2ea18daa1854b22870f91763ff404559516ff6a83efad2","ssdeep":"768:khdW4d/UXyCG6zhi2VMnUYvtRhFU5JI+3uC7L5ZFUh43F3EXdycYWeauWSo8GFVz:avX6EBbwFEXTLz","tlshash":"73f3b563794d006f7517c74171f8f5abae85c81bca224685f8aeabc8c741f52763a32c","first_seen":"2026-01-18T13:43:06.037901Z","last_seen":"2026-01-18T20:46:07.387744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1738,"timings":{"blocked":725,"dns":424,"connect":143,"send":0,"wait":145,"receive":143,"ssl":155},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Hot%20Games/Aztech%20Smash.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Hot%20Games/Aztech%20Smash.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"335e-696abe73-6f664;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13150\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13150,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a795af1730f4eceef3a7cdc66f0ae7e","sha1":"f3c2f6f241eec85b70d3ab9b3e6e13bcb567806c","sha256":"f806a9aafe796c47b04cd59e6a0f7d0413bb035184907000b10ce8b24922dfe9","sha512":"c4e6d2b8a0b2813c1a505923a044eec3bdceeddae5feba28afed5fea72cdc4a8b5b6f47d059c88c9789658cdf3e5c80090a462ec159f6f30d61c12225ffe4bd9","ssdeep":"192:pfwvdF01Trl+x+cGOn9Ai48bixXS8bmu8dIEBmtivSxn6Q93G/lBqxcF/epmB0:pfwvdF0qvGOn94xi8boBOi6nVY/lPUm+","tlshash":"a942d034afe56326ea3f927eb223477de7323257c3581286d0f94e309149bc870b9422","first_seen":"2026-01-18T13:43:06.028836Z","last_seen":"2026-06-05T23:57:58.141964Z","times_seen":19,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/icon/icon-populer.svg","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-populer.svg HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"dff0-696abe73-6f673;br\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 43237\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57328,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f8f5f25769046146ae42b17a41c0a16a","sha1":"80e7bba523210c58296f8de4a6fa6a22e913382f","sha256":"dafd7d97d8675bb8ea10eede4680abba88a04c54242a3333a291d66dc91c6e27","sha512":"fbc4ffe351d868e0bc7742724578a558932d9f17c423039657c3150f3adae2e0c5f2dcc3559e94e5d4349e24e8cab31e708cfd982b5ee5419455db9802ad9b87","ssdeep":"1536:JWAHKFFqtSQd1JZjfknvKi05k1QnwqR1FmRQv+qP:JWAyYtS21JVfWXLi1IQvNP","tlshash":"e743f1423f407f7c4976d289916cd15fec26a88f6580ab5f7ef38895b27e6080ca50ad","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-06-06T03:48:30.019187Z","times_seen":1682,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/bank/permata.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/permata.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"a3f-696abe73-6f64e;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2623\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"806f1354ac8e117d1752f9b2e317c551","sha1":"a989006a1c24fd9c5c5cc8eaf48be64a9eabcffe","sha256":"71eb5481c8ca4c22d6723f161b36d8a333ff30bdd2c90018b2b3cd2f5a5ce315","sha512":"b7633840558abf2a4145b874c4c00e4b57c3f9eb3043a0ec2d5b4b94b4ea426c8a6bb661808c86565090f03185aae964fc0584059d54beb12eead460f1a8766d","ssdeep":"","tlshash":"61512b01f9044c01e489ae8134e38569d83b5582e7f5f036b19ae8672b645ba4e7e9c7","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-06-06T03:48:30.011379Z","times_seen":1493,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/bank/axis.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/axis.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"775-696abe73-6f63f;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 1909\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1909,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"8a33ceba37cba67565691bad0b376d11","sha1":"524d0127ba8fb90930c258d1f6dccc2e021596d4","sha256":"da7d51e54f2ec453b76dde1951be25a7e76d2cbd19ceb53b07bca4a09d950c94","sha512":"a3ecb95fc952a21271163c09059df357a3b3b0e94dfdd98f676b5edd4fcc20456e26f384b796acf63f6fe925919c8056b479a95833b1bd6962881993f1298d82","ssdeep":"","tlshash":"6641f9cbc0c3ac01f5aa951028f711229d1249449fd1e46ab9dfd81625b45f59d28dd7","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-06-06T03:48:30.037554Z","times_seen":1510,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/webfonts/fa-regular-400.eot#iefix","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /webfonts/fa-regular-400.eot HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://agam168.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\naccess-control-allow-origin: https://agam168.com\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://agam168.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"9728.8\",amp_style_sanitizer;dur=\"6432.3\",amp_tag_and_attribute_sanitizer;dur=\"2897.9\",amp_optimizer;dur=\"796.3\"\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: gzip\r\ncontent-length: 15814\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":162059,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40982)","md5":"ab9dfd79934b29d73645c0965998f57a","sha1":"70b1b06b1d784be970d2b379298428d813b19d8a","sha256":"c1fae25a2e5ae124d7ab87cfeda2445d382cd06c84f6f7fb2d69d5062533b994","sha512":"4fb20a2de151eeef3c8ed67b22bf1ac77ccfe8ac560126dc31d46af54cbb528e7f9203587437d6b86fe590fd5778d5ae0c7e0c75259d5d645530c20c97fd593e","ssdeep":"768:khdWF/UXyCG6lTzVMnUYvtRhFU5JU+3uC7L5ZFUnbF3EXWycYWeauWSo8GFV7zHU:aG6RqLw2EXUL0","tlshash":"b4f3b563794d106f7517c74171f8f5bbae85c81bca224649f8aeabc8c741e42763a32c","first_seen":"2026-01-18T20:46:07.390732Z","last_seen":"2026-01-18T20:46:07.390732Z","times_seen":1,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":470,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Best%20Games/Lucky%20Wild%20Pub.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Best%20Games/Lucky%20Wild%20Pub.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"138e-696abe73-6f65b;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5006\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5006,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2a6c723d51a5afbb740d78d9e25c78eb","sha1":"e5337ec3ec4073526090e2bb13d16fb84cfda4ee","sha256":"3b5d9b30bf40e0f29d856a178f276636d349b2021d8d5200073cde0a67fa4cb7","sha512":"79f103b4ca60d024e67eb18294bb41b522150ed238ed9cb540f4a42f8f297d59e494c08f783761c43246182fb6f7d3074fbeef6134e54c75bffeded2a93c2997","ssdeep":"96:Z6Elbw+iEEtutiYAF/mHzsi8yL3oY8NNVIa8vuRawL2VHZ27vw1LRd3S:ZfwwnIMH3d3oY8NdCu49VqkL73S","tlshash":"dea17d7a0f551701db3ad67d241037c2e3683f16c79bebada25509282f2a5e21bcc682","first_seen":"2026-01-18T13:43:06.070205Z","last_seen":"2026-06-05T23:57:58.155958Z","times_seen":19,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Hot%20Games/Lucky%20Neko.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Hot%20Games/Lucky%20Neko.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"1bfe-696abe73-6f667;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7166\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7166,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"123c5f756758394af2ff71dc4052a0f2","sha1":"60e3fdabb4f0fcbeb0f30eb6635b76dc99188abc","sha256":"47bc2f768e313f0b25dcb7679d6db72c1eeaff76647b33cbca29aac2da79a3a8","sha512":"3a040317fdaaa22329d8dced0c858e3fb41432f45b92297574013719b1d982bcaaf0046358c7298081a46fb54ef3c8193fa2ea8b97bd1e2f74c78920c9fa453e","ssdeep":"192:BfwVAktMDoEJ2Wr1WndNA2wOV4lhWzeE62WB5i3sMWX/:BfwVAktcJ2WrQndNfsczex2vu","tlshash":"e5e1af325b180fc5f598477dde940b76c6b68cb8a60bb692c04d15195fe88ce2e1602b","first_seen":"2025-10-07T21:21:01.727173Z","last_seen":"2026-06-05T23:57:58.12506Z","times_seen":80,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/icon/icon-beranda.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-beranda.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"64c-696abe73-6f66b;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 1612\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 129 x 129, 8-bit/color RGBA, non-interlaced","md5":"d755bf297a8c52c28c4e5a3d6ab84475","sha1":"8d28408bf5a648aa044ec4c542312541ecda1609","sha256":"c596b1928c98b8c0cea80f446a26c8e3be38198e6e3bd5036860d0eda67354ed","sha512":"727fb6ae02ffa28e67d3804740fe5b7813d8939fb2b944eb95e116ee563abf7d90876878234636be8b6e1baa32a9d85cf7c94509a57ea36ecbcbac0b638aa38a","ssdeep":"","tlshash":"5331eab19a2ec44e5d516cb0c6380570f96278d5ce06c007fa109bf583cbd55e57f669","first_seen":"2024-05-25T09:50:17Z","last_seen":"2026-06-05T23:57:58.125876Z","times_seen":217,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/icon/icon-casino.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-casino.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"1fab-696abe73-6f66c;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 8107\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8107,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 129, 8-bit/color RGBA, non-interlaced","md5":"ca715bf20e0b22df3cae126be3efd562","sha1":"3f38b8aab3d494b41b6bda73fdecf0da3879ea93","sha256":"bc583cd8a0881183c667cdd633a982aba3ec1118f13809ecaf230c13392ab742","sha512":"bcc8b86db71c260d4eb79de3d0cbc71dab3033c1a218a19ede9d4bd78a8f68f5f7f6a0cdb34da833450ace87328089ba515d9e8a97740233eaedaf9613c70c25","ssdeep":"192:8knHimo4IBsSTm8sVK7EY/JDUvrBV5L1U6q04n:Pn4fK87L/JD0r1L1UM4n","tlshash":"25f19049f933384a0541f71ebee8836276721b8503d3a763eeed0e6359201d8e6ca192","first_seen":"2024-05-25T09:50:17Z","last_seen":"2026-06-05T23:57:58.169881Z","times_seen":216,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":235,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/icon/icon-fishing.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-fishing.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"15bd-696abe73-6f66d;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 5565\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5565,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 129 x 129, 8-bit/color RGBA, non-interlaced","md5":"5174daadce70788f7e5e790de6704ced","sha1":"2403940fce4ced39c935bd52ad6059853ef7c6fb","sha256":"80f7d6a1a12e67ad9cf1c0b4375724db47ec24ccb45fa892555224a8ec87f595","sha512":"4a852407300378ca72207b5ea0ac89a0d75fc6ab77c86d196fbedd84056fda147169527a5de24e4e05766a83e828b18964d5452723044c6f497a446bfa99b786","ssdeep":"96:iZNYjQWqgJKm4eKHYdI0FFc3ztLM9PM1CpwdLkmY0EsOGcfEkKNtKjMVQqG7CKW1:uNGjJt4eVO03mINM1CWdLk10VnQlKnKg","tlshash":"a0b17ccaa31784a3ad43fd3649b787a951d2c8071503ea379ce2312b20054a8fe776b4","first_seen":"2024-05-25T09:50:17Z","last_seen":"2026-06-05T23:57:58.148579Z","times_seen":216,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/provider/sexygaming.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/sexygaming.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"14c1-696abe73-6f68a;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 5313\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5313,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"c5aee88302f1236b8cc069d281a05905","sha1":"048d3123ca73c3f9f4e432378ea4cfcf467de417","sha256":"ab8a18edde422524883a5beb8842c4008f032de7f45601c2b37d7e40be19ac98","sha512":"7a18e0b8691f451f47dd0cd7a91052abddc353e332a9a19fd00dd2e01ea45a2565bf23eb170fd940e989f12adfb78a18cc8cb9ce9d8c136665eebf3e7611fa7a","ssdeep":"96:aqQqwG/92LyPMnYMuvdjEnGg4aD4Hn468sZTbZCzN6idRw:aqNrwyUYTdjCg468vdO","tlshash":"22b17d99eb1b58817e6aeca23cdb0bc385069082a415768b3ff784af1ca5155074f9ca","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-06-06T03:48:29.958522Z","times_seen":1631,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/bank/qris.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/qris.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"435-696abe73-6f64f;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 1077\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1077,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"a5402aac2919da889b89c1bb180be275","sha1":"d1d33e49d5ee686fdaafe10f3c4ed3004f735d5e","sha256":"e0ac73284c243235481a42c4bd86c0c3b356d4bf88a5376539ddf6cf0c26bc50","sha512":"5061e94a12ad3b3d0a0a8a5e416c725ee836dccbe50c2b4d4c1542f096ca4fca566d41ae30eb4f3d476786a1e509845852bd78a2dc2f7f50303127ac424b0430","ssdeep":"","tlshash":"ff1189d3a59615168b9d2d048164bcaab562ecb9cb320f0e0c707791cf1ebc52573398","first_seen":"2026-01-14T07:24:55.943308Z","last_seen":"2026-06-05T23:57:58.144256Z","times_seen":104,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Best%20Games/Le%20Pharaoh.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Best%20Games/Le%20Pharaoh.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"394e-696abe73-6f65a;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14670\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14670,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9b6993f8630ed645637f0ab7b551b605","sha1":"6e6bdd8b455cbeb6ced7d9cd1f9b538057a47d36","sha256":"28db4437904a6273bd764ea4848c12af17e3c82c6faafa6c34d81dceeeb3364b","sha512":"e1a33009783d0ee5794ec55ad8a6c891e5523ca9d3c67b7c4079b7a76d7db582f9623929e8f28b0cd6556e793dd058a5bb7de4f57539b6544c5e0d9c55fb2ea7","ssdeep":"384:dsCZ8S6XXM235Kq4BpViAUqBRJFnQma3RoEBnT8uQE:J3q8niGRJemahoESub","tlshash":"4362d000d932f9d6db3ae22a0dde63e960ac8997d10d92ac6d48958def34653a107353","first_seen":"2025-09-06T23:59:48.465512Z","last_seen":"2026-06-05T23:57:58.150201Z","times_seen":167,"resource_available":false,"data":null}},"time_used":637,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":389,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/bank/ovo.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/ovo.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"90b-696abe73-6f64c;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2315\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2315,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"c651afdf017b6e14b8ccf644fffb90e3","sha1":"cdefc9ffd4d0a101dd34fa8d0d72f31e20c203be","sha256":"860d314b9b8e36b5b22a81e02ea6d13290d85203ecb2e0ee3803ff5115ded872","sha512":"fc639ac833e9f4f15c6238d0c39ca5753acf20769db0a0a204a1554cfaf5fdb6bdcd75ad8f4fbb3643e9b11a9979548f9d4d6794eab648a875a202e86a293c59","ssdeep":"","tlshash":"d0412b46e6929d06079cfa9164e702bad6610f90e4f0e82b749ed40d0fe42fc6a6d5d3","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-06-06T03:48:29.998435Z","times_seen":1522,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/uploads/2026/01/Mabar-Favicon-300x300.jpg","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:40.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Mabar-Favicon-300x300.jpg HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:40 GMT\r\netag: \"3180-696aa80e-2f88a;;;\"\r\nlast-modified: Fri, 16 Jan 2026 21:05:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12672\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:40 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12672,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3","md5":"bc9febeabd5ddadf64f658640e90ce4f","sha1":"8d9ee3082617ecd6981baa52486b3a30c0ae0705","sha256":"295643b4426108d0f15588a5a611ea836631c2eb61ef953dab029f0b2d4b91ec","sha512":"9050f39cc54cf09d82592d41226babe3235baa97215825233968beed9635d0c81043e57031d7852777fa78783872c4ce54a5b4e03bded936961925efc360b157","ssdeep":"384:ONet2WnU49YoyhWOQLbXAZwlhihg3dDVfGJRyC5NX:4U2WU4SbwO4bXOEsW3f/CbX","tlshash":"1042bf7787677101d2b48f7e292f27163646cad2341afea8b031c43697c1acbc42ea24","first_seen":"2024-12-08T04:52:23.851192Z","last_seen":"2026-06-05T13:13:35.896523Z","times_seen":70,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Best%20Games/Bigger%20Bass%20Bonanza.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Best%20Games/Bigger%20Bass%20Bonanza.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"191e-696abe73-6f658;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6430\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6430,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bedcfef208e80f7468931f5825462052","sha1":"7c92a9693332c35439ad1a020a2bae32f5e5cc9c","sha256":"8df97c539561e218c2045c08dc0798b2d38aa450c4ad52593e925d7bea83ac12","sha512":"17d2dcf9de6a68cfe343a7fe89d82f836e5359cf593844827c07ad207b41fdd6dd726f8b08ccf31ac4bb877f59aa5f8aafa65c757325e3657fd200c978220bf3","ssdeep":"192:7fwee28zWpXHFlefyzV8wqaEnLeRTXsOvyVbr2hOxn:7fwee2qWp3LbzV86Ey5/qx5","tlshash":"0dd17eea3b355a1cd5130b36a8d32a8a5a9ce759cee6090e99805d6012b7dc17cee0c7","first_seen":"2026-01-18T13:43:06.015751Z","last_seen":"2026-06-05T23:57:58.126984Z","times_seen":19,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":280,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012512221826001/v0/amp-loader-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.129","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /rtv/012512221826001/v0/amp-loader-0.1.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://agam168.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 3918\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 13 Jan 2026 07:06:55 GMT\r\nexpires: Wed, 13 Jan 2027 07:06:55 GMT\r\ncache-control: public, max-age=31536000\r\netag: \"ad0aff3ac005e52f\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 481124\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12361,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12245)","md5":"dd4d7ddb5e8b0c4073b83eecfc27adf9","sha1":"190f41c73da1274020c58d8bfd96f599ee171375","sha256":"af2604256c2d9555ace107d339658439df510143cd493d5b4ad07c84311ce66d","sha512":"4f45cc86fe81a880151086a970c92caaf0f8e54325703c89dde221edc784821ce823c5e0b7b74fb60732292559c5310eb8f77fd226d7a74875133235002ba8ff","ssdeep":"384:Zo39KdedznnHjuxJOulqaa5F4g5A4WR2vCk:K39KMdTDu7OulDa5F4g5A4WR2vCk","tlshash":"e842a360a50ba2ac530342f488f5b856757ccd4fb8214079f0504ededf8ae54bdbb96e","first_seen":"2026-01-13T08:08:20.871269Z","last_seen":"2026-01-27T15:22:38.525252Z","times_seen":102,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Best%20Games/Bigger%20Bass%20Bonanza.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Best%20Games/Bigger%20Bass%20Bonanza.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"191e-696abe73-6f658;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6430\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6430,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bedcfef208e80f7468931f5825462052","sha1":"7c92a9693332c35439ad1a020a2bae32f5e5cc9c","sha256":"8df97c539561e218c2045c08dc0798b2d38aa450c4ad52593e925d7bea83ac12","sha512":"17d2dcf9de6a68cfe343a7fe89d82f836e5359cf593844827c07ad207b41fdd6dd726f8b08ccf31ac4bb877f59aa5f8aafa65c757325e3657fd200c978220bf3","ssdeep":"192:7fwee28zWpXHFlefyzV8wqaEnLeRTXsOvyVbr2hOxn:7fwee2qWp3LbzV86Ey5/qx5","tlshash":"0dd17eea3b355a1cd5130b36a8d32a8a5a9ce759cee6090e99805d6012b7dc17cee0c7","first_seen":"2026-01-18T13:43:06.015751Z","last_seen":"2026-06-05T23:57:58.126984Z","times_seen":19,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Best%20Games/Anaconda%20Gold.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Best%20Games/Anaconda%20Gold.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"2308-696abe73-6f657;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8968\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8968,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e374a66d9cf00e5440005373445ccf58","sha1":"4498bcb0d283df5dda904989efaa77a259277127","sha256":"1fb20cd7e51341dca97851e86e713760cae5b1dc9613b44df507aa85d287bb54","sha512":"3e2e2e7f8f37873ec0ed1bc49d509cd16ac02f2e60fe44479488b97a5d4143ef925e0959a0383a9bcb352c897cd3d213e010f42ee3a0c0c08ca0c7a4aa33ca2d","ssdeep":"192:zfwTZKH9c0H9QBesg/l4wQ3vaEllAzE/Depu:zfwdGHeBesg/l4wQ3vagAzE/DeM","tlshash":"6302cf092f22090bc15fabfcd61c1fd9af7296035364758cda446d24298ccee5878d2a","first_seen":"2026-01-18T13:43:06.093182Z","last_seen":"2026-06-05T23:57:58.139676Z","times_seen":19,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Daily%20Wins/Moleionaire.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Daily%20Wins/Moleionaire.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"28b6-696abe73-6f662;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10422\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10422,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4b5cc655f7096eb7d8bc8a6064e66046","sha1":"b7a1ec46a52bdc049942b1ff183ca9c5fea64ec7","sha256":"c465fb6dc29049cb885cdc7361311e8bcd45b9526bed52714f43b4f1a8d50ca2","sha512":"3df0c4ca2b4412577d034af10ae6854cf6dd54a81b64b53acdf71b888fffc0de7133c59a9eedefc03c4d13cea7373e53bb6356dd0db85dd19ba4dea332caac5f","ssdeep":"192:+fwIa/kRLK7qGhEQycBY8zuFvz7AzPe/NTjSJ8nz3iggP:+fw5cRLK7qzSY8Wae/NPS4+ggP","tlshash":"dc22ae2b8e95138beb5333375c820346ff20b66e8359871255ed71b6878cdcead25067","first_seen":"2026-01-18T13:43:06.067961Z","last_seen":"2026-06-05T23:57:58.120323Z","times_seen":19,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Hot%20Games/Ninja%20vs%20Samurai.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Hot%20Games/Ninja%20vs%20Samurai.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"180c-696abe73-6f668;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6156\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6156,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"85fb21de184a2904d0ecab6a049a8c4f","sha1":"d10f927e7d9e7a540d841723ed9552ac8b52ad15","sha256":"4e8194cfc9e26e0f398288674c5912f0e9802ab9da14707f51db73e065df6e46","sha512":"f6d801e61d626461aab763677884b57c2631a6c951dc1bcc0e8b0595e60d970a1e2dfcac5d6533396e369d3d32685c00519a28850d6ff07b08618fb0b061e980","ssdeep":"192:AfwIYpLK9r8bc6kC7fEhO+hSSWUy8xY/Gkp:Afw7L2Ec6DEYdukp","tlshash":"adc19e1683acc7acea5b1fb5c4920ace9b52650774204b6fb3cd0aa1d6e60afc15e1d4","first_seen":"2025-09-21T14:29:32.44628Z","last_seen":"2026-06-05T23:57:58.117196Z","times_seen":87,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/provider/joker.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/joker.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"1173-696abe73-6f685;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 4467\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"d6046ada089141ed514a2c248ba348a9","sha1":"ac6af3ec4c8d0025c3498501f0b5ff169f50fdab","sha256":"a5894ebe20a0a276641ce8fe77f073ea3127a35e307937d00d46606a6d07e5e1","sha512":"9bec604475449cfffc72317d9ece25fb7ec460b1f463d288052c6a436d26848116b60832425da59d040aa1f43ed4964d575442480231030d8e797a89daa3a494","ssdeep":"96:aqQRGY0xUhfkh08d2luU5IqeesF93z/mc1MYtWum:aq+0xUS2U2lueny93z/mcyYtWum","tlshash":"fe918e58dd037e0e5d5e0a9230e85d9688bb8502deb4b81e78d7c2cb42f8166c85f6f7","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-06-06T03:48:29.971963Z","times_seen":1637,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/bank/btpn.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/btpn.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"8c3-696abe73-6f643;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2243\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2243,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"976c8fc9ca31651f1c1ac1a0bca5f8b5","sha1":"475e902161a298719789a4ef4d23c2a873c599ac","sha256":"45482f8a293b7acb55f6a149ecc4854bb2eec381edf7ea5e470a2d8941cf1afc","sha512":"8538e4af5b9d5df88cdae37c2ce17d76091b11697e908eb4ac3da485ba8805f0dc66fc49f29cf9736ec14758000e383734b7827cfb03c17108b28c5a14b0bcf6","ssdeep":"","tlshash":"6a41f788da018d0253cfc96b3ce544464d22a940c6e4e6b7538a80890dbe0fdaf6edcb","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-06-06T03:48:30.012233Z","times_seen":1491,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/slider/slider.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/slider/slider.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"2364a-696abe73-6f68d;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 144970\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":144970,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6494862fd9d00b984e1a2dfa9a9cb57c","sha1":"e1879446b15ed9edd4053e81ff4274845179cc2f","sha256":"27d6e641d4b716e5a7be7bc9b33a7d0f75058b82a7d5dc185835bc1875377fa0","sha512":"e035151aab33ddd158766adaf60e83af25494fe2449ced3acd479a56d32ab65bfc9b3e05add79a04c7ec304ab256c6751643b85870bc504faf9c77abcb7458c5","ssdeep":"3072:ZTcuQpgcVzyRfxP0pPWb7SfN+dzlKktgGBID3KY8RjoqGNqLL3xpVgg:ZLe2PdRDPyrZKJGNqLtd","tlshash":"73e312c1933cb7a9c3cfe634927f521b4d19b9d56f1eb8880902140bfbf81ba49c4991","first_seen":"2026-01-18T13:43:06.106761Z","last_seen":"2026-05-26T04:37:54.062174Z","times_seen":10,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":486,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Best%20Games/Le%20Pharaoh.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Best%20Games/Le%20Pharaoh.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"394e-696abe73-6f65a;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14670\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14670,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9b6993f8630ed645637f0ab7b551b605","sha1":"6e6bdd8b455cbeb6ced7d9cd1f9b538057a47d36","sha256":"28db4437904a6273bd764ea4848c12af17e3c82c6faafa6c34d81dceeeb3364b","sha512":"e1a33009783d0ee5794ec55ad8a6c891e5523ca9d3c67b7c4079b7a76d7db582f9623929e8f28b0cd6556e793dd058a5bb7de4f57539b6544c5e0d9c55fb2ea7","ssdeep":"384:dsCZ8S6XXM235Kq4BpViAUqBRJFnQma3RoEBnT8uQE:J3q8niGRJemahoESub","tlshash":"4362d000d932f9d6db3ae22a0dde63e960ac8997d10d92ac6d48958def34653a107353","first_seen":"2025-09-06T23:59:48.465512Z","last_seen":"2026-06-05T23:57:58.150201Z","times_seen":167,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Daily%20Wins/Jungle%20Delight.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Daily%20Wins/Jungle%20Delight.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"32bc-696abe73-6f661;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12988\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12988,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd1f94125ea0bc2bdd8686e6f014cc99","sha1":"1baf966a5b5e40b6a84b54e4c2d455bad808e1d9","sha256":"9053b3044d9d4838dbb7bf84899f51b5ada451dc5b6bdd510b77727cb6509727","sha512":"1d3e758ff767067506af53e593bc3f812ce817ca9f04e1d4742b8744841c05fb30087b67464aa906d22122f14dac66d54af6727efae7cf0b1f1134e659fd5de6","ssdeep":"384:SfwJvVZ+M7yGV5qElTlebVQbFrq4jVTJvSqLOJqOylI:S4JsGV5xlTGQhrq4jVTJvTOJqOEI","tlshash":"1c42bf1ca2116216f352aff1321d6cc6bf903cb78779f3d21a4ea2984a98e8c24549c9","first_seen":"2026-01-18T13:43:06.018456Z","last_seen":"2026-06-05T23:57:58.172868Z","times_seen":19,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/provider/cq9.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/cq9.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"ede-696abe73-6f681;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 3806\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3806,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"bf1d52938982261ddcc79fb95c2a67f4","sha1":"f51ff53053d641f7cf4bde754fc958e48d682656","sha256":"c919e7e1680f99113b1a2d673dd57218002ba9ca1b020c51d5aa035778038ff7","sha512":"0d5e74d3d48092626a8c2cee6fea119b29efab3fdf5aebcfa3a61c26dc02cd7ccdbf9e7655cfef3b9effa0fb9497338516bd8e03a85680f100bc286aab7eae7f","ssdeep":"","tlshash":"85716b68e6422841968cf5d6a4a81c637d2f00400b90e930c4dfc46a3eb6ab14b9d6cf","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-06-06T03:48:29.967205Z","times_seen":1652,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/bank/tri.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/tri.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"844-696abe73-6f652;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2116\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2116,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"a9332787c6c2381c0a4a5d6211e61883","sha1":"8b7837da9a9f5ac5a05479d256620f6c106e8235","sha256":"86a466018abf53f7175f4909de0826d5a8d405082ac2355b55d7d196fd47d2dd","sha512":"b7493b3a7b53cca8e2f63e5d6788d26b3b8c5af4adedc51d9db25fdfcff9a84d44af024762596b98e0ebd79278bf1d653cfa1e70b5eee6cf2c2ac3b1622b8f1b","ssdeep":"","tlshash":"2941e998d5631c41578ae98b28e14b278a0249c0d5b0c55771bbc04f87341fda8ae4db","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-06-06T03:48:30.027246Z","times_seen":1495,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/bank/shopeepay.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/shopeepay.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"a19-696abe73-6f650;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2585\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"410210f0e9a527ac10a6edce706a3e52","sha1":"41ac0fbaf4e303490de0da44bbcc2ddf0957d93a","sha256":"b546d30527e6237059995da8fa60d0ee5b99a8a1beaf0d9ca885323926d9dbf2","sha512":"7e6134ee07e54cd0800c5302d78a289b304b13641649ca46f4faad5df1966a49aa0202390cc06398a7c7a740fc84bf41b17b26a098d11b2d19424412241703e6","ssdeep":"","tlshash":"a3513acef606a90263dfed0834d79413c9036ec4d3f6e072d58ad44614a82f9a9e99d3","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-06-06T03:48:30.038973Z","times_seen":1512,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/jackpot.avif","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/jackpot.avif HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"2cf0e-696abe73-6f67e;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/avif\r\ncontent-length: 184078\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":184078,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image Sequence","md5":"0826c1b4cb2241222d20f121d87ac9fc","sha1":"1db8a8f434f57414ce03850574c890df582adada","sha256":"c609676a5af49ad813f6caad06d8aed44bbe88b835d4f06509a18b3d26b16ff1","sha512":"5382e99780ddb4dcf91965976e48e77b41bd3b25529467c6356f1c870e7fbde801a18495be521a3614f2563c1e66fc8530f08360254025a9b313406b0fea28f3","ssdeep":"3072:+PhAxfoF/jwc0NlXnzwqcLOYpcqEOhgsuSa8dXU0Wj8STas93dYNg/u5:+GSNw5NlXnzwqvYfWXSaL6STaQdf/0","tlshash":"b5041266f745a997c6fc9432ec94b30af8a0e1324646f82b714d80e78fb5347d4c29c2","first_seen":"2026-01-18T13:43:06.056898Z","last_seen":"2026-06-05T23:57:58.157696Z","times_seen":19,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/webfonts/fa-solid-900.eot#iefix","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /webfonts/fa-solid-900.eot HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://agam168.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\naccess-control-allow-origin: https://agam168.com\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://agam168.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"11078.2\",amp_style_sanitizer;dur=\"6595.7\",amp_tag_and_attribute_sanitizer;dur=\"3901.6\",amp_optimizer;dur=\"821.3\"\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: gzip\r\ncontent-length: 15876\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}],"data":{"size":162057,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40982)","md5":"78daacc33c7a1b8348b0f6989d9bcd42","sha1":"2ab162de25b05b54239da285becfd0ad6fbfbc86","sha256":"84f8b261c76341a44412a0253aa15dbe0d4e61546db276b2df217723fd986765","sha512":"af048b84f269958a0fabe83efc7d9ef1aaeb5516b7cc821d3c90c8213389cfee7f932509cb9e461f3c97fb764e679b6958005520fbaafc94ee20e1a267e078be","ssdeep":"768:khdWF/UXyCG6lTzVMnUYvtRhFU5JU+3uC7L5ZFUnrF3EXWycYWeauWSo8GFV7zHH:aG6RqLwOEXULn","tlshash":"6cf3b563794d106f7517c74171f8f5bbae85c81bca224649f8aeabc8c741e42763a32c","first_seen":"2026-01-18T20:46:07.404893Z","last_seen":"2026-01-18T20:46:07.404893Z","times_seen":1,"resource_available":false,"data":null}},"time_used":636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":466,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-bind-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.129","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /v0/amp-bind-0.1.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://agam168.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13874\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nexpires: Sun, 18 Jan 2026 20:45:38 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"6b2ea00655e787ca\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41962,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41834)","md5":"cea34041e2b44a6557c013cbea145bdd","sha1":"77ee814b29dde88ca3177ae0fbb084a2238eedfe","sha256":"33c42fd0bea3b72af139a795146d763ca6a9c95139acbc1db25821aabbec9ad2","sha512":"e7f38164bdfb3429dea0222f70ffa45c6eed599a8cd62446f0eb4537dc2e5ae26f07f14bd74a7f480748676c8de53bf244ab6ddacf5360599c73015b4dd9ab4b","ssdeep":"768:LXCdqZrAK6LtckY9WxJXT9TfenUuGAjc5Ql0p43fHLX+37/dR4l4LK9iwhJ0ZBsP:+qYdzL+UVkcw3zvEEJpopkqU","tlshash":"0113fab53282a43747d648e690377012e32d2956300bc8e8f1aceecb7c77955b4b9e39","first_seen":"2026-01-13T08:08:20.869933Z","last_seen":"2026-01-27T15:22:38.522829Z","times_seen":68,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":146,"dns":64,"connect":21,"send":0,"wait":17,"receive":1,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Daily%20Wins/Empty%20the%20Bank.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Daily%20Wins/Empty%20the%20Bank.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"15fc-696abe73-6f65e;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5628\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5628,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f174a9a5db2794121826edfd046dbe2","sha1":"7e8ab6547e0ba1ecad41cb027dbe77e41559c96e","sha256":"92ac260717ab9713e8cdbed37e040364b345403bec8e30f9f2208085131edf8b","sha512":"d43d6f942c67a6355db9095c2fc5346cbd98b503aa576d408b1073a28b481acecc35fe2d12ca14ce64caa5d58a4e57f8e680e3dddcf740805e3841bec2e9a4f9","ssdeep":"96:x6Elbw+izw+uEFJfBC3pFJlXLKRv80dA+BLGR+ozYKHkwTKk0dfH9rx:xfwzuoWpFJlZ0aI1QYKEAKkKRx","tlshash":"5dc17e14f21a436cd4feaeb575911359b969f43ca6323b93f148272b0b0ab07d794486","first_seen":"2025-09-21T14:29:32.407495Z","last_seen":"2026-06-05T23:57:58.17695Z","times_seen":87,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":266,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Daily%20Wins/John%20Hunter.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Daily%20Wins/John%20Hunter.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"17e2-696abe73-6f660;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6114\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6114,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dd4f46e04b9b7e52da359f11362065d5","sha1":"42917e03221bec84ffaacd43477ea1f0677c9b47","sha256":"fb73a6c08f43c4857b480eca4c8192d0b0044b4d98f400186bf29478ccb6bd6d","sha512":"4c3a56dc07a23bae64523324178274353dd4861dd472571a8f5f12f30a548b801a8a5a38583b4979eda6c9cad39fbe3531275e32da6013aba7bb31367bd0eea3","ssdeep":"96:h6Elbw+iM1sVImgI9w3dODJVFpOzDo5iLnxYdDw6cd4o3xmyFsppcRNA5fyAd1eI:hfwQ29u3dsVFpqYdDpcd4o3niwRCqA3t","tlshash":"13c17d80bba69bbdec6d81b90cf51305e316af2ed729cf575b025b0256084f329e54e3","first_seen":"2026-01-18T13:43:06.06004Z","last_seen":"2026-06-05T23:57:58.131913Z","times_seen":19,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Hot%20Games/Caishen%20luck%20Spread.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Hot%20Games/Caishen%20luck%20Spread.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"179a-696abe73-6f665;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6042\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6042,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c5758b938b4a534c1087a517abc6af37","sha1":"a74713803cb9e0d16bf359e907784343ba05accc","sha256":"e52850c139de246807724a28d625550cbb608244d0481c10fb695d3935595d6d","sha512":"86c75c0aded73c03c213d0d0b50082ab3390e1b45ec39875086c9d38d1da99f1bb391ddd2397774b140e2af39f4a3e645c46ac6fc31a05d15f26539e6a9b2195","ssdeep":"96:Z6Elbw+iTFxDlVaiA+Aq6QYCZ5uW5xgwrnXXwmJjxTL5JUxVi+K4gRmMJWnajxbW:ZfwPtVa1rQYCZ5L/5XXfJfe24gRmV6x6","tlshash":"6dc18fc6636378cdc10a9f30985a5381916c3963cd50b5dc5368aa72ab20fea7d9c5c7","first_seen":"2025-09-21T14:29:32.466589Z","last_seen":"2026-06-05T23:57:58.134957Z","times_seen":87,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/icon/icon-whatsapp.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-whatsapp.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"6dca-696abe73-6f67b;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28106\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28106,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ccd9c66f38d45db01cb273e5fe33bbc2","sha1":"8d3df38db3efd8f7679424e57ac92138fcb11b3c","sha256":"b615ef8ed8e2af93681c5270ca992318a5bf242925d5355be17f8e4c1a411004","sha512":"408b24ce45fbba5f5834a05d012057c8ce4009e06c129b4cd01b7d514e345acc45288c38a5c725d8973f3932b629aeddbd983ed0140650f326d25314deed211c","ssdeep":"768:n+VooPN9HKOc/DF+5Gz6QKWgyCNWX93BUWbq:wJPN1Q+I+xyCOBY","tlshash":"f0c2d01cdf63d681d78ae5b3e3ea064216674c9685d08026f7efbe84643cca3f46950a","first_seen":"2026-01-18T13:43:06.098328Z","last_seen":"2026-06-05T23:57:58.1551Z","times_seen":19,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":303,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/provider/habanero.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/habanero.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"b6c-696abe73-6f682;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2924\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2924,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"6fdcf2c4077e1a01c1387becb47eab76","sha1":"9e644b73bbfbd059798cb3f38a50afbb6d51c947","sha256":"063b0b0af325dd011bb3cd4f69e62c3ebb3e2a8033a9f255552a1ee6a47cc842","sha512":"0519f574e77eeb96f2b534b554d6e52300fdaa50c27711e3674e8b22400534ddf89a3a2e2d029b3e455f98423d4a1433964cfc05abb7ba29d32425256e1fa9b1","ssdeep":"","tlshash":"8c513e4cbb83da0ca18c7b521cf65106a71385869c81b8b4ed4fe40f4c70aeb5d5c9cb","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-06-06T03:48:29.967884Z","times_seen":1654,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/webfonts/fa-brands-400.eot#iefix","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /webfonts/fa-brands-400.eot HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://agam168.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://agam168.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"6565.2\",amp_style_sanitizer;dur=\"4356.1\",amp_tag_and_attribute_sanitizer;dur=\"1857.3\",amp_optimizer;dur=\"486.5\"\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: gzip\r\ncontent-length: 15878\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":162058,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40982)","md5":"4f3f4445c80b91f1f6acded0bc624d06","sha1":"b63fc1cc82bcdd8021d42dbc9a45d38bc061a207","sha256":"1bce80d287b8780921fb01f0515226035a6dba376d84fcb419b0fa5122489ca6","sha512":"f942d8af6d8c274581bfa845bf83d47300b37049559a1266f4081fbadac06a83e5ff058cf156e63b4b94db9d9f121f7eb2fc59a43853e390c9e090c35d8e65b5","ssdeep":"768:khdWF/UXyCG6lTzVMnUYvtRhFU5JU+3uC7L5ZFUntF3EXWycYWeauWSo8GFV7zHu:aG6RqLwuEXULO","tlshash":"bcf3b563794d106f7517c74171f8f5bbae85c81bca224649f8aeabc8c741e42763a32c","first_seen":"2026-01-18T20:46:07.409598Z","last_seen":"2026-01-18T20:46:07.409598Z","times_seen":1,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/webfonts/digital_sans_ef_medium.woff","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /webfonts/digital_sans_ef_medium.woff HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\naccess-control-allow-origin: https://agam168.com\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://agam168.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"1314.4\",amp_style_sanitizer;dur=\"729.2\",amp_tag_and_attribute_sanitizer;dur=\"514.4\",amp_optimizer;dur=\"132.8\"\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-litespeed-cache: hit\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":162068,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40982)","md5":"ff6eda348999ade59b0880a3761dde69","sha1":"eb3e8f34115f43f8eeff14f44b92db6a173fb149","sha256":"bc02a796d203fdb6b07ae2a50780527801112bdabec4c9003da7a40315f50027","sha512":"f76e8ffafbf47efb4fa5c3a17be2553cd7beb352477b15f68329a95c6fb9dfe8df04546a41ddced3d46171696bb32d9ed0e90b9d3ff1c06d5cca9f6f418b6e9d","ssdeep":"768:khdWF/UXyCG6lTzVMnUYvtRhFU5JU+3uC7L5ZFUniF3EXWycYWeauWSo8GFV7zHv:aG6RqLwFEXULP","tlshash":"cef3b563794d106f7517c74171f8f5bbae85c81bca224649f8aeabc8c741e42763a32c","first_seen":"2026-01-18T20:46:07.410631Z","last_seen":"2026-01-18T20:46:07.410631Z","times_seen":1,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Best%20Games/Lucky%20Wild%20Pub.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Best%20Games/Lucky%20Wild%20Pub.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"138e-696abe73-6f65b;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5006\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5006,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2a6c723d51a5afbb740d78d9e25c78eb","sha1":"e5337ec3ec4073526090e2bb13d16fb84cfda4ee","sha256":"3b5d9b30bf40e0f29d856a178f276636d349b2021d8d5200073cde0a67fa4cb7","sha512":"79f103b4ca60d024e67eb18294bb41b522150ed238ed9cb540f4a42f8f297d59e494c08f783761c43246182fb6f7d3074fbeef6134e54c75bffeded2a93c2997","ssdeep":"96:Z6Elbw+iEEtutiYAF/mHzsi8yL3oY8NNVIa8vuRawL2VHZ27vw1LRd3S:ZfwwnIMH3d3oY8NdCu49VqkL73S","tlshash":"dea17d7a0f551701db3ad67d241037c2e3683f16c79bebada25509282f2a5e21bcc682","first_seen":"2026-01-18T13:43:06.070205Z","last_seen":"2026-06-05T23:57:58.155958Z","times_seen":19,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Hot%20Games/Lucky%20Neko.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Hot%20Games/Lucky%20Neko.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"1bfe-696abe73-6f667;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7166\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7166,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"123c5f756758394af2ff71dc4052a0f2","sha1":"60e3fdabb4f0fcbeb0f30eb6635b76dc99188abc","sha256":"47bc2f768e313f0b25dcb7679d6db72c1eeaff76647b33cbca29aac2da79a3a8","sha512":"3a040317fdaaa22329d8dced0c858e3fb41432f45b92297574013719b1d982bcaaf0046358c7298081a46fb54ef3c8193fa2ea8b97bd1e2f74c78920c9fa453e","ssdeep":"192:BfwVAktMDoEJ2Wr1WndNA2wOV4lhWzeE62WB5i3sMWX/:BfwVAktcJ2WrQndNfsczex2vu","tlshash":"e5e1af325b180fc5f598477dde940b76c6b68cb8a60bb692c04d15195fe88ce2e1602b","first_seen":"2025-10-07T21:21:01.727173Z","last_seen":"2026-06-05T23:57:58.12506Z","times_seen":80,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Hot%20Games/Aztech%20Smash.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Hot%20Games/Aztech%20Smash.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"335e-696abe73-6f664;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13150\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13150,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a795af1730f4eceef3a7cdc66f0ae7e","sha1":"f3c2f6f241eec85b70d3ab9b3e6e13bcb567806c","sha256":"f806a9aafe796c47b04cd59e6a0f7d0413bb035184907000b10ce8b24922dfe9","sha512":"c4e6d2b8a0b2813c1a505923a044eec3bdceeddae5feba28afed5fea72cdc4a8b5b6f47d059c88c9789658cdf3e5c80090a462ec159f6f30d61c12225ffe4bd9","ssdeep":"192:pfwvdF01Trl+x+cGOn9Ai48bixXS8bmu8dIEBmtivSxn6Q93G/lBqxcF/epmB0:pfwvdF0qvGOn94xi8boBOi6nVY/lPUm+","tlshash":"a942d034afe56326ea3f927eb223477de7323257c3581286d0f94e309149bc870b9422","first_seen":"2026-01-18T13:43:06.028836Z","last_seen":"2026-06-05T23:57:58.141964Z","times_seen":19,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/bank/bri.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/bri.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"a54-696abe73-6f642;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2644\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"33b1568e97e2d3eb1f0e1fc24c13844c","sha1":"e76fd8087d2b1c706db27e318e728dadbb7cd2d9","sha256":"da04be9d1425d3021cff275d345cc1528863d6f93b48068f7867145424211039","sha512":"730731d241b2dbb9b740b8a592327904f7474fc8038e11b500bca4ec2d240766ef62b97288497765c85fb605a9f70746bcae1a67ab6b75110f9071c3fc0da164","ssdeep":"","tlshash":"25512b9de5274d41a3cddc403874e165c9639dc0cbe1f4a3fb0ec58a5d226e494591d7","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-06-06T03:48:30.002829Z","times_seen":1492,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/bank/panin.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/panin.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"9d5-696abe73-6f64d;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2517\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2517,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"c73d8ac115c9d42d48b2a3184c198271","sha1":"d86449166ea1fa2d8581516a68f1d720ff16233f","sha256":"cf7cf632c75859639c5e47534b6760c9ac44013dcd5d7bfe4c045cca5414432a","sha512":"cf89a4ed50cc1a7cbdf02c6589df7e55b7c49eb3f31208d41e288fe46cee5de39379808280ccae7052fefe9a892cb1d78cbfc54576f0a2981b67e2a352a4e4fb","ssdeep":"","tlshash":"2f5109cbf842ad11a24e848624e741398f07c960a9e4fc71714ec42e1b386f6e96c9df","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-06-06T03:48:30.003656Z","times_seen":1484,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/bank/jenius.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/jenius.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"a1a-696abe73-6f648;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2586\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2586,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"a526cd682aa74c97bdb4e9062dd3bb47","sha1":"9a576b670aa5ff27c5377431444a5b6e6fad059a","sha256":"887520873e323d8af25fc9ca54158e474139b38d78f0ae1097ba0bd27c09084c","sha512":"bd14d5c0424148137d6093f709b8a22265701ebeae2345415449e022c52f28e3f01e1709c06df9becfbf8af1a28539c6d60ddb0d0b828a4d70762e408f24ba02","ssdeep":"","tlshash":"5f51e729d445af023a0ce44724fa817baa0785c0cfe2f12bd58fd5372d647d999991cb","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-06-06T03:48:30.029839Z","times_seen":1504,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/slider/slider.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/slider/slider.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"2364a-696abe73-6f68d;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 144970\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":144970,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6494862fd9d00b984e1a2dfa9a9cb57c","sha1":"e1879446b15ed9edd4053e81ff4274845179cc2f","sha256":"27d6e641d4b716e5a7be7bc9b33a7d0f75058b82a7d5dc185835bc1875377fa0","sha512":"e035151aab33ddd158766adaf60e83af25494fe2449ced3acd479a56d32ab65bfc9b3e05add79a04c7ec304ab256c6751643b85870bc504faf9c77abcb7458c5","ssdeep":"3072:ZTcuQpgcVzyRfxP0pPWb7SfN+dzlKktgGBID3KY8RjoqGNqLL3xpVgg:ZLe2PdRDPyrZKJGNqLtd","tlshash":"73e312c1933cb7a9c3cfe634927f521b4d19b9d56f1eb8880902140bfbf81ba49c4991","first_seen":"2026-01-18T13:43:06.106761Z","last_seen":"2026-05-26T04:37:54.062174Z","times_seen":10,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/webfonts/Lato-Regular.woff2","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /webfonts/Lato-Regular.woff2 HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://agam168.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\naccess-control-allow-origin: https://agam168.com\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://agam168.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"10220.9\",amp_style_sanitizer;dur=\"6437.4\",amp_tag_and_attribute_sanitizer;dur=\"3422.9\",amp_optimizer;dur=\"956.7\"\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: gzip\r\ncontent-length: 15844\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":162059,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40982)","md5":"82ced9f6ed0ddba2594fe88daebb37af","sha1":"c00b0520549ad8b43c126f558efa7e515ab422cf","sha256":"2daa43cdca993e9537914beb8f0593da630f08bc8aeb9c6eb3e6e8d94f20cd70","sha512":"7428f1368788361f2d857d57c5f493730b6a3fa70caf3a1c8784fd91248aad3465854c4abd29499dd2945eb6a6fb7e0cd10709b580a7561e9766d66d0bb664b2","ssdeep":"768:khdWF/UXyCG6lTzVMnUYvtRhFU5JU+3uC7L5ZFUnNF3EXWycYWeauWSo8GFV7zHU:aG6RqLwgEXUL0","tlshash":"61f3b563794d106f7517c74171f8f5bbae85c81bca224649f8aeabc8c741e42763a32c","first_seen":"2026-01-18T20:46:07.413546Z","last_seen":"2026-01-18T20:46:07.413546Z","times_seen":1,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":356,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.129","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /v0.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://agam168.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 63618\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nexpires: Sun, 18 Jan 2026 20:45:38 GMT\r\ncache-control: private, max-age=3000, stale-while-revalidate=1206600\r\netag: \"df9f7a4c4dbb5ca8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":228272,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64621)","md5":"1eae85b80471b7dcd6fbfa177c023405","sha1":"8a0adf96e5aeb4445cfe4850bdcf61b293c1205d","sha256":"1db7a299d3ca4347b7540205a83320a6acb9172aaab43da164f0c99111aa913a","sha512":"5935ecd5ddb2d4202a68a9585c43a1ce199644ebd6e06f1783378d50891fb314b11cc9f42ea65147ce132b0e63d7126c95dfdec25cd255ddc8c68c5cf127e068","ssdeep":"3072:xHlwUahpbFl6/LFWdfsAsafywqk1gWx3AtsYg3:/wUahpbFlsLFWd0afywqkqWx3AtM","tlshash":"ae24d6a63286b03247e558f5d4774002f3296998340b806cf96ceecb7c69d86b1b6f7d","first_seen":"2026-01-13T08:08:20.878105Z","last_seen":"2026-01-27T15:22:38.516884Z","times_seen":107,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":127,"dns":65,"connect":8,"send":0,"wait":21,"receive":13,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Daily%20Wins/John%20Hunter.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Daily%20Wins/John%20Hunter.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"17e2-696abe73-6f660;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6114\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6114,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dd4f46e04b9b7e52da359f11362065d5","sha1":"42917e03221bec84ffaacd43477ea1f0677c9b47","sha256":"fb73a6c08f43c4857b480eca4c8192d0b0044b4d98f400186bf29478ccb6bd6d","sha512":"4c3a56dc07a23bae64523324178274353dd4861dd472571a8f5f12f30a548b801a8a5a38583b4979eda6c9cad39fbe3531275e32da6013aba7bb31367bd0eea3","ssdeep":"96:h6Elbw+iM1sVImgI9w3dODJVFpOzDo5iLnxYdDw6cd4o3xmyFsppcRNA5fyAd1eI:hfwQ29u3dsVFpqYdDpcd4o3niwRCqA3t","tlshash":"13c17d80bba69bbdec6d81b90cf51305e316af2ed729cf575b025b0256084f329e54e3","first_seen":"2026-01-18T13:43:06.06004Z","last_seen":"2026-06-05T23:57:58.131913Z","times_seen":19,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/icon/icon-slots.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-slots.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"8ea-696abe73-6f674;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2282\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2282,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 129 x 129, 8-bit/color RGBA, non-interlaced","md5":"9ab98be1631f70d0769bd520f863220e","sha1":"2830c9597d707b8f00f0412844305730c5da0f80","sha256":"4898b883fc2dde9f979439de5a32aace0c8a31199e7959339292e03bce604e84","sha512":"0b3abe4fa8f3c31ce7279cae91b31353cbbdd2b26063c0b09883e943cfa898a2d93755a40a2a9f8e5d69b7d0b034c9ef3e8ca7e7db30b64ae8fcc403893be84d","ssdeep":"","tlshash":"8c415c54c63196475334593a0dc4406eeea0adcf0327c89d34d5f413083f2e15b1a2df","first_seen":"2024-05-25T09:50:17Z","last_seen":"2026-06-05T23:57:58.11839Z","times_seen":217,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/icon/poker.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/poker.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"d04-696abe73-6f67d;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 3332\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3332,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 129 x 129, 8-bit/color RGBA, non-interlaced","md5":"eca48e2ad6043a3361008e4ad9690c1d","sha1":"6e10583291bf968fa7687d7d34e0c7dca8fb980b","sha256":"5e0218c7d1a3d299cedaa841256a903f308b5dede8c058608cf11539daae1747","sha512":"193f65accf945a2084fa4e9c0ed551c1f022b554295b240c225236f9e792e1448272939b0112c5f3769b2e47d1e0ee97dbcf9259e847508d071da832c5ff53cf","ssdeep":"","tlshash":"e0615bd723fc8609ff0f9af09fe818d4639bd085f10111a0f1ebd824eaf062a6162c58","first_seen":"2024-05-25T09:50:17Z","last_seen":"2026-06-05T23:57:58.149378Z","times_seen":216,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/provider/ttg.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/ttg.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"c56-696abe73-6f68c;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 3158\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3158,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"f177a8c24f7d00627f779b1544f26d7b","sha1":"1f88ae42b70427e917294beb790bda84321cd08c","sha256":"2c7aa701640a5b7503e3ace14124357537d5698ad832c1217a7c3290ccb64372","sha512":"dc8232386fc9dc22e3cebe562d6c708aa078294ea16f30b4d0d8bf1349e0fe743d9a8b3a7f287732f46e8eae0a60e2f2b4674298bcbf78b7fbbe20d4eb5d02b2","ssdeep":"","tlshash":"66511b52f65a6c4255eda08478f294338a3305120a54f0a5d67b484b8d8b3ea77cdaee","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-06-06T03:48:29.992491Z","times_seen":1645,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/provider/ioncasino.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/ioncasino.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"c94-696abe73-6f684;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 3220\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3220,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"f52b79a28e4fe23c2d7034200ec49243","sha1":"9e7090b05b1e04a59609aaa74023d254829c9b86","sha256":"2f413a04bfddefa9057a4a1c09ffebb389b048bff9a62717f64a292f2257d288","sha512":"a869da32caf575eed45a705779742b96901ea431bc4722131c930c0909359141abaf346ae6d43bf29a67235d8f8ff3f4c2d8a6eb86932aa52671175129dfa8fa","ssdeep":"","tlshash":"1b611a5e9e119c0d785ad94138f8a09bc632c144a870e905bad29d2bbd342fb9495cff","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-06-06T03:48:29.95398Z","times_seen":1630,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-anim-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.129","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /v0/amp-anim-0.1.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://agam168.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 1674\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nexpires: Sun, 18 Jan 2026 20:45:38 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"d40bc46fc3892868\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3802,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3688)","md5":"a59e185ac3c9716b396b16139b3b670e","sha1":"2c9c6b01aa48938ec54e29537007e67f9f184053","sha256":"4c389a4a24409b9adf11fe52f730c64e41acc34b0bb89e1b732476334763aa4c","sha512":"e31af03811a7dbfe9c599ea9392b166eec72e28b5479b3bc6dfa78272c09cb8d5efd6f3c4b6c76d65751310fba7f59655366559aa1f3767b873bfc0fa303ffe5","ssdeep":"","tlshash":"5571b7bd3285b5735b963ce1446b5405fa3d64263407c868f268decf2a3ac5624b6e3c","first_seen":"2026-01-13T08:08:20.852495Z","last_seen":"2026-01-27T15:22:38.510001Z","times_seen":75,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":152,"dns":64,"connect":20,"send":0,"wait":17,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Hot%20Games/Ninja%20vs%20Samurai.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Hot%20Games/Ninja%20vs%20Samurai.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"180c-696abe73-6f668;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6156\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6156,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"85fb21de184a2904d0ecab6a049a8c4f","sha1":"d10f927e7d9e7a540d841723ed9552ac8b52ad15","sha256":"4e8194cfc9e26e0f398288674c5912f0e9802ab9da14707f51db73e065df6e46","sha512":"f6d801e61d626461aab763677884b57c2631a6c951dc1bcc0e8b0595e60d970a1e2dfcac5d6533396e369d3d32685c00519a28850d6ff07b08618fb0b061e980","ssdeep":"192:AfwIYpLK9r8bc6kC7fEhO+hSSWUy8xY/Gkp:Afw7L2Ec6DEYdukp","tlshash":"adc19e1683acc7acea5b1fb5c4920ace9b52650774204b6fb3cd0aa1d6e60afc15e1d4","first_seen":"2025-09-21T14:29:32.44628Z","last_seen":"2026-06-05T23:57:58.117196Z","times_seen":87,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/provider/pgsoft.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/pgsoft.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"11d5-696abe73-6f687;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 4565\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4565,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"07fdf68f6b80703be8dff396a5a89029","sha1":"20f259c2d1d5d61f611079cf2a0b9d15166208b4","sha256":"9c318ff5d70915d892c4f289c1e2e8c7008341feca61bb191df37cbfcb43a28d","sha512":"1e3dd3c89973d138ea3706b02b76f9e8c1450b01b01a9c6e51b055b445cfdcd154be5080004028b53a6ac3d7e629aa54ee74e12191081d287620e89cda2c96e1","ssdeep":"96:aqQ5GZ6y9rpNUfJRttoj7YA9IF9s/IPqeW+ygQdnvW:aq3p7YkkAqF9QIPi+y/e","tlshash":"1d915c4df002842536c6ea93c4d3f026a8d34dc1a5d5e72602ab881aaeb71a75d5dbe3","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-06-06T03:48:29.995611Z","times_seen":1653,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/provider/microgaming.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/microgaming.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"2315-696abe73-6f686;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 8981\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8981,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 600, 4-bit colormap, non-interlaced","md5":"35024fae2032dd7b3dc0b010485f7a0f","sha1":"dc34e370159f57dd72a3dba7651fd32830b06134","sha256":"a378192e0e408800f48c068c8b2b88841fe8dff5214c81f0f5bca386ab155794","sha512":"ba24370710fc7075072300b1c47bf4cca12de32e0dd24272b6961c19319d8b1701f8e1ccde37822f9e1d062e8d756319f14a49485f3722d1e7c705c363ea69ae","ssdeep":"192:M1eSS3IF+3ASIJ4vcwEZ2y9Y4eEcBXRhv9uY12RD2xUR5ZBe:y+3IF+144vcwAXm4MR9scULPe","tlshash":"4902bfd7bd432528d002f4f15aaf417a9dcd62436fc0664f400db9d07acaf9981bb182","first_seen":"2024-12-22T07:43:19.401885Z","last_seen":"2026-06-06T01:06:05.380687Z","times_seen":814,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/bank/mandiri.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/mandiri.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"98a-696abe73-6f64a;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2442\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2442,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"e81bd4992f0fe10cad81a83263d92ef7","sha1":"08b015eb1504581d3b9c858fd6770047b3698f70","sha256":"6b00a56d5961243a4cf2e0c59cfae414a8b3b528c7778eb3fae99e52a64913f9","sha512":"f9654ae9fb05790b84233d161227d0838eddb5225e3ea730dbdf67f15c1b2762cd06217e51faafb769c3f1fc38dbced9cb982f015cd6f5fb7a8037cfc4e329b8","ssdeep":"","tlshash":"b4510b8bc1d78d4147e5ca9131f2505f0d5246a0d7f5d029f98fd051a6f82f92a148d7","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-06-06T03:48:30.036041Z","times_seen":1490,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/bank/xl.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/xl.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"99a-696abe73-6f653;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2458\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2458,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"84094baf12f6cd3d4d8cf7557478370f","sha1":"6adfff2597d1986ca93211709d92364b7f31994f","sha256":"d64a7c2b38bd2b08c842b2f714e402f0ee9ed9884171a6e1e95f57cd57ccf748","sha512":"dc262d4198e9b38b9cac4987ac803b9ec8e2466510793608869213a56110a44f696935d767fa4ddebd00873886715bb784ff039fe24fae0c166530cb14e90849","ssdeep":"","tlshash":"9751f80da68218158beb99c106ea40224f064f44ce84e0e7b44ed4665ab42ec6dad9d7","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-06-06T03:48:29.973406Z","times_seen":1516,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/bank/linkaja.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/linkaja.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"9a3-696abe73-6f649;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2467\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"aa19546f0fa57ec054f592623dde7e62","sha1":"19fa186480ac2121f2647bfa6446c6a9a88f3fdd","sha256":"800b3f95f81e845bc3bc92ecf7880f2c7f57a15e0dc3f855bfd3e591b783c7ec","sha512":"13c85136e6887167c1be424dc4b18b1f4773a67c4495e3f83884c6bc1fb143d02c9b0609940661a6e1f26f953f581e1fa128437b0a314bc00533fd9549065af7","ssdeep":"","tlshash":"7b512b14fd116c42829ceca544dbd2a289175b44dad8e47bb4ffd01209f12b98b311c7","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-06-06T03:48:30.028137Z","times_seen":1514,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/webfonts/advanced_dot_digital7.eot","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /webfonts/advanced_dot_digital7.eot HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://agam168.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\naccess-control-allow-origin: https://agam168.com\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://agam168.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"11874.1\",amp_style_sanitizer;dur=\"7804.2\",amp_tag_and_attribute_sanitizer;dur=\"3621.3\",amp_optimizer;dur=\"678.5\"\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: gzip\r\ncontent-length: 15874\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]}],"data":{"size":162066,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40982)","md5":"fd04c6a36a0ef1ee9460b9f618aac794","sha1":"3a200e9ba84d3efa688e6f53d7c14eb2bdf2ac94","sha256":"28d0774b594ba3d60a79b52b0a7bcbcb59ec32a4e324784833016d74d492b800","sha512":"c53d655f892b5cdda097caa316f18071d5a6e7b06439668c1d6df5e1dedc6064e692df2ed763a17522a1c9f312e55f521a1870138fae733daa48b8b922863379","ssdeep":"768:khdWF/UXyCG6lTzVMnUYvtRhFU5JU+3uC7L5ZFUn4F3EXWycYWeauWSo8GFV7zHU:aG6RqLwfEXUL0","tlshash":"53f3b563794d106f7517c74171f8f5bbae85c81bca224649f8aeabc8c741e42763a32c","first_seen":"2026-01-18T20:46:07.42039Z","last_seen":"2026-01-18T20:46:07.42039Z","times_seen":1,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Daily%20Wins/Rise%20of%20Samurai.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Daily%20Wins/Rise%20of%20Samurai.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"1196-696abe73-6f663;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4502\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4502,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8f05654457981d42ef95832cd7caedb7","sha1":"663889a2a224ba1baac44270b952224e1819f425","sha256":"1bd93c7e7796bd1ed0be63058cd39866101c98433b5bbcedd62c9374eebd024b","sha512":"0916bfdc6ecfda96761994fe9369d1d934bea8ed861978d4ae3afaeb2a189ef44a4e910c2a4e373a9c36de2c5c2b34a927d64be69a9e03fe227274683c37701d","ssdeep":"96:76Elbw+iRIFkNCuVafLMHpkSpw8z7UPEblZ+UtOMkeKw8fmJM:7fwtVNCuKM6aFzwPolRtO3eKw8fme","tlshash":"ff916c79b37d131ce9534e7e6c92b6c8325b9daa464f0eb2c19482220f9ec895b805d7","first_seen":"2025-09-21T14:29:32.424585Z","last_seen":"2026-06-05T23:57:58.137339Z","times_seen":87,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Hot%20Games/Rooster%20Rumble.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Hot%20Games/Rooster%20Rumble.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"1b60-696abe73-6f669;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7008\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7008,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b98f2d464af3a9acf1d2ef2106413bc2","sha1":"55b85bd82cf7c54429715b458adbca516df9460d","sha256":"b0226ab531a2b035a82b5dbda4046d8607cd71fe5a95278f56762b560cf81c73","sha512":"e21a9aa9800eca1aac274f37446cdd59f7783a268c415086d4bb166f19e66f66101e9228234e7435ffeba289839430af33a303324d52979b29d099a1ceabadbc","ssdeep":"192:jfwd/snBW/J+tN/XrAjv1+yJIh77hUXB5IavuCD:jfw5uWxc/bG06SFSI2ue","tlshash":"bde18eb7d6865600c48b82f490c267cbb35235aba552ef0bcfc8482a75296cdf34f941","first_seen":"2025-02-11T07:00:30.783714Z","last_seen":"2026-06-05T23:57:58.140386Z","times_seen":319,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/icon/icon-gacor.svg","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-gacor.svg HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"1def-696abe73-6f66e;br\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5154\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7663,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b9ac3698353188323aca1e72b0b415da","sha1":"c28c2c237808f3f960aa78f35880123679e14084","sha256":"f80d635418113fa7972b15027e670b2706ee2820163b62b2f27145f9073ac0b0","sha512":"7aa2bf1158e6546e9e8dd9784f7f67f95cab57d65d918b0598d781f26b5f973776929af9976112d7cf0d0bdb187dad6ea59bd15d126f0d7b2718dfe4802c8cc8","ssdeep":"192:1opYUslj6GuF9Tf9kLkAPEj18y2Ysi4My8O+:1oSlmNF9Tf99AEJaY348l","tlshash":"10f16c19a178ec2fdbf4817270a740546f1a5093f3b357c44ea203b38a0da55049aefc","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-06-06T03:48:29.994178Z","times_seen":1680,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/icon/icon-livechat-gray.svg","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-livechat-gray.svg HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"32d-696abe73-6f670;br\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 462\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":813,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c0af3bfd49ffc5ae11ba860786cda75d","sha1":"c598e7d6678d0fc928d2c6eaeff83f0b5311daff","sha256":"d1e72ffd39a829fe41c1a53795d8418fea166a070252308ea1098b0b7c2f74aa","sha512":"c65e0fcccaabf7def73e8618cfaed9eeecaf4a47698b732c3d185fc7397c9572d1375600545deddf2bd57aba69ef1049ff28142d2aeb861a3774ad0a0072f356","ssdeep":"","tlshash":"e8011ea8cb38cab0e14c1b004be8271335b10422daba9c0c43297d85e853e902005cae","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-06-06T03:48:29.966629Z","times_seen":1618,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Best%20Games/Graffiti%20Rush.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Best%20Games/Graffiti%20Rush.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"1d26-696abe73-6f659;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7462\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7462,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"288aa2d7f9ca50b57bba19db5206d29c","sha1":"5284610c5143d1b57aa318085fcb3d65da291f85","sha256":"a9218195a1bfa90b94f0f4eb8348237a4bdc27101678b76859acf9f9ea22c2b5","sha512":"ee6513326c7d17464ebae25d31d762ca6b8becff5e5ed2d8c6dc16d2887c53e6fab30216b11d78588dee2f15e4efd38346d45042b958b205ffa63e42b64c38a0","ssdeep":"192:vfwrIt+Kne8ECGln1lMCk9BfVu5dZWPBEhLlr7UUQ:vfwrYJpmc9BfVsWOhZv/Q","tlshash":"b5f18f6de7fca32ce181fa70e1173b1962ceb4f8c989c0b511ae5021a74da537d24765","first_seen":"2026-01-18T13:43:06.03505Z","last_seen":"2026-06-05T23:57:58.124067Z","times_seen":19,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Best%20Games/Mahjong%20Wins%203.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Best%20Games/Mahjong%20Wins%203.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"9716-696abe73-6f65c;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38678\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38678,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a6eb9e43d2e1af3e7e4acce60a88001a","sha1":"ce1d8562f9fce11c746a430922fe0643f105cc4e","sha256":"a882da4f9b84c5a7c6997911fa721e7d8c343aabb487877b0a5f513102d10b72","sha512":"829169862b11ba48b008627458d31ab22f9a093e9a7b5dfbf0d76072f070cf8be7d8214e4cc71b1a6b92e329d6261cda958b00121d5de79e501e0db1f7a26768","ssdeep":"768:buq6kWRFiH+h7IHv/Wak1m3C03gC0WGJa955Qw6ckjQmvuCaVRbRqfpr:h6ka4HC8HnJw+55Qw65jx2CWBYfpr","tlshash":"3503f10e226b14a1e49882fbf899201ecafef4386d905f4e019b7e9b115dcbb152177c","first_seen":"2026-01-14T07:24:55.893561Z","last_seen":"2026-06-05T23:57:58.138974Z","times_seen":72,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Daily%20Wins/Fiesta%20Fortune.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Daily%20Wins/Fiesta%20Fortune.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"2fa4-696abe73-6f65f;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12196\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12196,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"60ffbb6ec11eddaec3066ba130bfd9ee","sha1":"5b9df5e6cc2e808b8697e153c2f511902215900f","sha256":"dd4d3d257b562f1b74c1974fe394bb1a7a021e11a1e36e2a55150eef819ef40c","sha512":"6d512fc43c9ad5f45874dc825ef9a397ca3c4142243763e3cd0868476ca7c67a4227e546feaca7b4b0d3e71cae1ae84e340134b25095270f4b6ba8bb33ed1b4a","ssdeep":"192:bfwoYDk6Sw1Ta6EtZpuz7mWf6SzOTsN7wkHmsEEcX/Uqp8I89CLG0ttbjhZZCNi6:bfwoYDkK1T3EtZpues6SztykHmsU/UMu","tlshash":"c842cffbab115c67d99a1e75d09bd202afd8f8e04702655f23235c049b298dfcd2a0e3","first_seen":"2026-01-18T13:43:06.144094Z","last_seen":"2026-06-05T23:57:58.161305Z","times_seen":19,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Daily%20Wins/Fiesta%20Fortune.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Daily%20Wins/Fiesta%20Fortune.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"2fa4-696abe73-6f65f;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12196\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12196,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"60ffbb6ec11eddaec3066ba130bfd9ee","sha1":"5b9df5e6cc2e808b8697e153c2f511902215900f","sha256":"dd4d3d257b562f1b74c1974fe394bb1a7a021e11a1e36e2a55150eef819ef40c","sha512":"6d512fc43c9ad5f45874dc825ef9a397ca3c4142243763e3cd0868476ca7c67a4227e546feaca7b4b0d3e71cae1ae84e340134b25095270f4b6ba8bb33ed1b4a","ssdeep":"192:bfwoYDk6Sw1Ta6EtZpuz7mWf6SzOTsN7wkHmsEEcX/Uqp8I89CLG0ttbjhZZCNi6:bfwoYDkK1T3EtZpues6SztykHmsU/UMu","tlshash":"c842cffbab115c67d99a1e75d09bd202afd8f8e04702655f23235c049b298dfcd2a0e3","first_seen":"2026-01-18T13:43:06.144094Z","last_seen":"2026-06-05T23:57:58.161305Z","times_seen":19,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":309,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Hot%20Games/Frightening%20Frankie.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Hot%20Games/Frightening%20Frankie.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"14e4-696abe73-6f666;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5348\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5348,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1642c6db9940e83ac8abf2a409a1775e","sha1":"77c3b0a421d7a516aa1db47766d290d76c5dd42e","sha256":"6ab53a6d63d0c796cf358ec5eaced3f1434e52dc6dd1a66ee281f2b8e6f68116","sha512":"47895396a7a148d7598b2971de5e466f18ab5a99c1502bb3645aaafe412f80aff91d5dea55588edfbdacf9f5bddfe5362b600522c257d6f80dda1fbadf9df518","ssdeep":"96:s56Elbw+iEMsIQ6TCm3hfbeLQSDt4zk1SjF8BkoE+1DOaNDOyHpeXdWKzjNkKmXb:s5fwAMsIBdRuRACoF8BN7OaNDOEpeNW/","tlshash":"d1b19ee1a37fdf6ae0da3a7424e52726c33c37c98f0fc503869196907248993751ca83","first_seen":"2026-01-18T13:43:06.023221Z","last_seen":"2026-06-05T23:57:58.176053Z","times_seen":19,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/icon/icon-new.svg","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-new.svg HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"7ca1-696abe73-6f672;br\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 23782\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31905,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"524d091d4759569c313dd81aab7d521d","sha1":"95b068a7e8847a60803b33fd7b051292be42303a","sha256":"4609cea657d57c84eb55546dd797d3098185421efb86ef0cf25e3e8d1447655a","sha512":"3172c7104d69254d1c7b6e7c5ba7c82c6ae2a18312bc9531b8b0ee8756e3a554c94184f7a44bbb8cffb76795c2447111ae27500d426f0758d9bbee8355bfeca9","ssdeep":"768:1SiFxD6THNhWHpmolBwPP0KB2j75lcTrwyl/K:siD6TtheBGPpw7QA","tlshash":"f6e2e01fce8ea7ac8516426c303bfdea0dcc6e4d80487aedb9c1b5ab15a655140b2715","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-06-06T03:48:29.98448Z","times_seen":1964,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Daily%20Wins/Empty%20the%20Bank.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Daily%20Wins/Empty%20the%20Bank.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"15fc-696abe73-6f65e;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5628\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5628,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f174a9a5db2794121826edfd046dbe2","sha1":"7e8ab6547e0ba1ecad41cb027dbe77e41559c96e","sha256":"92ac260717ab9713e8cdbed37e040364b345403bec8e30f9f2208085131edf8b","sha512":"d43d6f942c67a6355db9095c2fc5346cbd98b503aa576d408b1073a28b481acecc35fe2d12ca14ce64caa5d58a4e57f8e680e3dddcf740805e3841bec2e9a4f9","ssdeep":"96:x6Elbw+izw+uEFJfBC3pFJlXLKRv80dA+BLGR+ozYKHkwTKk0dfH9rx:xfwzuoWpFJlZ0aI1QYKEAKkKRx","tlshash":"5dc17e14f21a436cd4feaeb575911359b969f43ca6323b93f148272b0b0ab07d794486","first_seen":"2025-09-21T14:29:32.407495Z","last_seen":"2026-06-05T23:57:58.17695Z","times_seen":87,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Hot%20Games/Frightening%20Frankie.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Hot%20Games/Frightening%20Frankie.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"14e4-696abe73-6f666;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5348\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5348,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1642c6db9940e83ac8abf2a409a1775e","sha1":"77c3b0a421d7a516aa1db47766d290d76c5dd42e","sha256":"6ab53a6d63d0c796cf358ec5eaced3f1434e52dc6dd1a66ee281f2b8e6f68116","sha512":"47895396a7a148d7598b2971de5e466f18ab5a99c1502bb3645aaafe412f80aff91d5dea55588edfbdacf9f5bddfe5362b600522c257d6f80dda1fbadf9df518","ssdeep":"96:s56Elbw+iEMsIQ6TCm3hfbeLQSDt4zk1SjF8BkoE+1DOaNDOyHpeXdWKzjNkKmXb:s5fwAMsIBdRuRACoF8BN7OaNDOEpeNW/","tlshash":"d1b19ee1a37fdf6ae0da3a7424e52726c33c37c98f0fc503869196907248993751ca83","first_seen":"2026-01-18T13:43:06.023221Z","last_seen":"2026-06-05T23:57:58.176053Z","times_seen":19,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/provider/pragmatic.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/pragmatic.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"f70-696abe73-6f688;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 3952\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3952,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"2b7c9803856443d10c0ec7ba404448c3","sha1":"02dd3b31dd3934519bbf7f06335e556c66d3b3b9","sha256":"63aca758fa264a3c3ef204bac37c08e30dd8d06a308bd77194884a343a086dbb","sha512":"ca1492e4fc6743741ae13ced3558bc2d4d136021ccb39d425d0ce73f42ae27fb9715960c740b98ae643c7068f022262c349c231cebda78c2991d050250a0a6ba","ssdeep":"","tlshash":"c1815c29f2c05f059194996258fd293791f25e50d5a08e3e8bebc47408282fa897ccff","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-06-06T03:48:29.991634Z","times_seen":1653,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/bank/bni.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/bni.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"968-696abe73-6f641;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2408\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2408,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"f974c6e54d22a2874c8bd0a5e0dd6280","sha1":"c155e13074e0908eebceaebed81db17d3e67f366","sha256":"1c0d8f733026c0d9d8ea471bee766e2398937de1b9c02d023c015757a425cea2","sha512":"2db584e2104003fc6ade26feaf40e73661cfa04128071ce9627865e57006b7514a025ffa7265a6d206aa53d44c39e9d7ff7bb2e8345dc31b9dafd6b26a9e924e","ssdeep":"","tlshash":"df410a4cb786a480e1cda69310ea4223c9154540ced6f56b541ee80b89681f8ddee5cf","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-06-06T03:48:29.972703Z","times_seen":1492,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012512221826001/ww.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.129","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /rtv/012512221826001/ww.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://agam168.com/\r\nOrigin: https://agam168.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13063\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 13 Jan 2026 07:06:55 GMT\r\nexpires: Wed, 13 Jan 2027 07:06:55 GMT\r\ncache-control: public, max-age=31536000\r\netag: \"8e24c51d34086f31\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 481124\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46293,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46173)","md5":"96d3cddb53437fbb664edee451ef8cc4","sha1":"46203e3625dcd63298e04a02fbc3859da74ffa10","sha256":"33b1f70fcf0232deb21726236f18bd4418365476d45f27820285c16f5ea6b84a","sha512":"5df85d9e5294122787b154439102e40b1dceade25031635ea69a86962ccc8590f5a68f70e254dcbe9238343b310f9e6b9ab9e00b095358fdc6c18ee9d2089a30","ssdeep":"768:bCIFhDQdYITBK+p7rpB67Whz4LnsfUwAMjkyvPicpPcsKdN4emH+NUWGBgyb9Q:hkZ9f7dfUkZepGJgOG","tlshash":"c3230bb433a654af839284e5005a3009d67e2c6a3006d9fcf678eed73cb199795b6f34","first_seen":"2026-01-13T08:08:20.867419Z","last_seen":"2026-01-27T15:22:38.603321Z","times_seen":68,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/webfonts/digital_sans_ef_medium.woff2","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /webfonts/digital_sans_ef_medium.woff2 HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://agam168.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\naccess-control-allow-origin: https://agam168.com\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://agam168.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"9369.5\",amp_style_sanitizer;dur=\"5744.3\",amp_tag_and_attribute_sanitizer;dur=\"3078.6\",amp_optimizer;dur=\"1362.3\"\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: gzip\r\ncontent-length: 15906\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":162069,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40982)","md5":"447d196062d3c3b73ad593db4320d8ed","sha1":"2a5de8035297b6cd8f50e5968d2ebe75da0f6785","sha256":"94e7d94b8024963bebed7d77a0a56881d7390abf1464ff580e281b3a6ff546a9","sha512":"2a5fcfc4ec93dfa81dc6a2481b92632bd40de1fd36a4ac69b34e775bfe7fc1772c253c68bcdbb4f2e3d951ca05f7df13959c1b117a1e934fb67d0c49e492fe27","ssdeep":"768:khdWF/UXyCG6lTzVMnUYvtRhFU5JU+3uC7L5ZFUnkF3EXWycYWeauWSo8GFV7zHR:aG6RqLwlEXULx","tlshash":"2bf3b563794d106f7517c74171f8f5bbae85c81bca224649f8aeabc8c741e42763a32c","first_seen":"2026-01-18T20:46:07.428614Z","last_seen":"2026-01-18T20:46:07.428614Z","times_seen":1,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Best%20Games/Graffiti%20Rush.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Best%20Games/Graffiti%20Rush.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"1d26-696abe73-6f659;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7462\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7462,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"288aa2d7f9ca50b57bba19db5206d29c","sha1":"5284610c5143d1b57aa318085fcb3d65da291f85","sha256":"a9218195a1bfa90b94f0f4eb8348237a4bdc27101678b76859acf9f9ea22c2b5","sha512":"ee6513326c7d17464ebae25d31d762ca6b8becff5e5ed2d8c6dc16d2887c53e6fab30216b11d78588dee2f15e4efd38346d45042b958b205ffa63e42b64c38a0","ssdeep":"192:vfwrIt+Kne8ECGln1lMCk9BfVu5dZWPBEhLlr7UUQ:vfwrYJpmc9BfVsWOhZv/Q","tlshash":"b5f18f6de7fca32ce181fa70e1173b1962ceb4f8c989c0b511ae5021a74da537d24765","first_seen":"2026-01-18T13:43:06.03505Z","last_seen":"2026-06-05T23:57:58.124067Z","times_seen":19,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":337,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/icon/icon-livechat.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-livechat.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"4876-696abe73-6f671;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18550\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18550,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"381bc327754030ffa99fe7475b3dd94c","sha1":"c71f1344dd26bd43ce5364dab90ac81a22329854","sha256":"9913a49026da4cf3d66ba1d108933eed6aa1bfad4583559a8e693223ca793005","sha512":"cdca651e1c00e380b6e6b4898b194190d94810e85f1383a026cbee7d03e50d05de96378c3c747b9a42c6db1eb9b523dc04f86fc27c9fa8f5b6c12b6aff343e88","ssdeep":"384:f0f7PItmUiWneVIlxm1RsBIPMs7Ll10z5HNH8YxRVC5k+3pt:f0fL5UOVIjC9lJeZBDVyp3L","tlshash":"e282bf6fdb13c988e5a278bffb513501f023291695e188351257bca32925a5bff03ac6","first_seen":"2026-01-18T13:43:06.047398Z","last_seen":"2026-06-05T23:57:58.177727Z","times_seen":19,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":277,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/logo.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/logo.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"556d-696abe73-6f67f;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 21869\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 49, 8-bit/color RGBA, non-interlaced","md5":"29ee3d2b6a8abb11a6e2fcb586e43e65","sha1":"ede12ca38888adbb835eb1f26cb1d6069e07826f","sha256":"38152e5698c90dd05e35962d42e67818e367a993646aa7474a8b4e097f3e510a","sha512":"57e624d1857adc3912382b84105f9316f5bfa56a8489a86cdb904bbcb334f824e4f177109d238a5373de4a52894bbffe5ced4983b12a91a0bf34ad772c5e7da6","ssdeep":"384:clm1zhR5jaAoGHVTWhweOjX0kGSQdftFLQa8S6Uyc++Svt4e7uS7mE0qOkMc:6mxdjaABHohweOGSQn6ZUyc+1LiVRS","tlshash":"92a2e1422753fefe52036002d41b8f899ef357e79a7a613621be741e2463874428fdad","first_seen":"2026-01-18T13:43:06.049767Z","last_seen":"2026-01-18T20:46:07.430172Z","times_seen":2,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/provider/idnlive.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/idnlive.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"9ea-696abe73-6f683;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2538\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2538,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"57238310e793f343a2749339be32a3ac","sha1":"95bb671a06008427ede2e08a5463dcca1562a644","sha256":"620a982845b3e7a490990f96b64c2c594bb4d418058873c2a3691e2d86b0cb07","sha512":"233da09c46f08c7b3c28d84317b19761490a6f28aebded877ac5941638cff99a7ec7ab61dcf2de28e71904a131a3333d1f4a8eee2e1f07fc80be9b90cf5a1ef4","ssdeep":"","tlshash":"4d512cce9a129a428aa9e54724e80011862b0a414860afdcf54bdc972d7617f416b7de","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-06-06T03:48:30.026423Z","times_seen":1521,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/bank/danamon.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/danamon.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"940-696abe73-6f646;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2368\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2368,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"3838d4b8102304883356ccf668653507","sha1":"65c93b99f83f22c41e339cfee892f80d6a0c1294","sha256":"73b1a331ae0d571fdfd8fd37b2d8b61d7bc40b7d5da1cfcedc36bcde48483f75","sha512":"edd8c2d85ed9345f153ba92047cc995fb15c720a6f7e7d8caee162e70c519d021abddf5abf988c5ba54c66702fa8fcb64397b9bac1c01223f555ca8052fd5099","ssdeep":"","tlshash":"b54108acd562d801964fad4030fbc33d8a614b409de1e10ae8adc16625a40ff6c5f0c7","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-06-06T03:48:30.02013Z","times_seen":1484,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/bank/dana.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/dana.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"952-696abe73-6f645;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2386\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"0ac7748e31189f27ac5971efcd30a7eb","sha1":"dd29489b4fcd79567d7c278c3eaf6388a76c77a8","sha256":"5c92696fd590f184864bf00db29cb20da1b443dfc93f8377f14461f35b09f547","sha512":"b62c34f57eefae9fd1754964e314dfc792c7466baef2b08c7331889b47a222f0d981f8a03de2db56fa97083e90bed1d011cd9c655fffe7e5f0d84ea82057a3a6","ssdeep":"","tlshash":"2b410ac9f512bd2166587c825dcb81378531808448f1f922989ef04dbe782eabd3cde3","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-06-06T03:48:29.974113Z","times_seen":1522,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/uploads/2026/01/Mabar-Favicon-150x150.jpg","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:40.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Mabar-Favicon-150x150.jpg HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:40 GMT\r\netag: \"15c5-696aa80e-2f88b;;;\"\r\nlast-modified: Fri, 16 Jan 2026 21:05:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5573\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:40 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5573,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x150, components 3","md5":"ae7c0ac99eba7e11c2116df0bdee8bad","sha1":"cbed2d2a2273c80b6dddade9761f905e681b8b8d","sha256":"fdc6fb71b84c76ff99a26ba09d056f5539a4147777d105ffd57571d370b5782b","sha512":"95dd15555c117e8f51566b3ec5f0aa1af0eaf20675f6a451a71a93c9124caf3a2121623e88a3c895fa70dbdb052e03cc3c72ef427c57e32660752606fff616ed","ssdeep":"96:MgMP5VqT3UJJhniVfkWB8FL4L+cpc/6UJSNXqQCEcJnLL604ZzNk7:MgbsIftKFL4LY/DopqQjcBLL604ZzNi","tlshash":"69b16c23a0a9dfcef4dc5f7d468dd14ba846b06b50b3ce56b07bd58500c6aef0503599","first_seen":"2024-12-08T04:52:23.854013Z","last_seen":"2026-06-05T13:13:35.855939Z","times_seen":72,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Best%20Games/Mahjong%20Wins%203.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Best%20Games/Mahjong%20Wins%203.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"9716-696abe73-6f65c;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38678\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38678,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a6eb9e43d2e1af3e7e4acce60a88001a","sha1":"ce1d8562f9fce11c746a430922fe0643f105cc4e","sha256":"a882da4f9b84c5a7c6997911fa721e7d8c343aabb487877b0a5f513102d10b72","sha512":"829169862b11ba48b008627458d31ab22f9a093e9a7b5dfbf0d76072f070cf8be7d8214e4cc71b1a6b92e329d6261cda958b00121d5de79e501e0db1f7a26768","ssdeep":"768:buq6kWRFiH+h7IHv/Wak1m3C03gC0WGJa955Qw6ckjQmvuCaVRbRqfpr:h6ka4HC8HnJw+55Qw65jx2CWBYfpr","tlshash":"3503f10e226b14a1e49882fbf899201ecafef4386d905f4e019b7e9b115dcbb152177c","first_seen":"2026-01-14T07:24:55.893561Z","last_seen":"2026-06-05T23:57:58.138974Z","times_seen":72,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":428,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Daily%20Wins/Jungle%20Delight.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Daily%20Wins/Jungle%20Delight.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"32bc-696abe73-6f661;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12988\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12988,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd1f94125ea0bc2bdd8686e6f014cc99","sha1":"1baf966a5b5e40b6a84b54e4c2d455bad808e1d9","sha256":"9053b3044d9d4838dbb7bf84899f51b5ada451dc5b6bdd510b77727cb6509727","sha512":"1d3e758ff767067506af53e593bc3f812ce817ca9f04e1d4742b8744841c05fb30087b67464aa906d22122f14dac66d54af6727efae7cf0b1f1134e659fd5de6","ssdeep":"384:SfwJvVZ+M7yGV5qElTlebVQbFrq4jVTJvSqLOJqOylI:S4JsGV5xlTGQhrq4jVTJvTOJqOEI","tlshash":"1c42bf1ca2116216f352aff1321d6cc6bf903cb78779f3d21a4ea2984a98e8c24549c9","first_seen":"2026-01-18T13:43:06.018456Z","last_seen":"2026-06-05T23:57:58.172868Z","times_seen":19,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/icon/icon-togel.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-togel.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"a49-696abe73-6f678;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2633\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 129 x 129, 8-bit/color RGBA, non-interlaced","md5":"25bb07af75efb78ab5052236d3e18c89","sha1":"f9f2789aa0589e9c357bcaac7004907f62a4d0c3","sha256":"47dc0f1628617c208bd66d70633cd3332cd49280e7a15f98ed43cb93dc68d59d","sha512":"12bce84fc45d057b822131d9d4a01b90c301cb3b1d22e8e05c26618b4440cd4212f7f866ef7da4352e61b9087cbac79b4f0a42b6297986cca364fe88e5fd936c","ssdeep":"","tlshash":"25514cf5077900fdcb730c06610e38dede47e808a982b7070ac9ee6db5bdab169005da","first_seen":"2024-05-25T09:50:17Z","last_seen":"2026-06-05T23:57:58.178518Z","times_seen":216,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Daily%20Wins/Rise%20of%20Samurai.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Daily%20Wins/Rise%20of%20Samurai.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"1196-696abe73-6f663;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4502\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4502,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8f05654457981d42ef95832cd7caedb7","sha1":"663889a2a224ba1baac44270b952224e1819f425","sha256":"1bd93c7e7796bd1ed0be63058cd39866101c98433b5bbcedd62c9374eebd024b","sha512":"0916bfdc6ecfda96761994fe9369d1d934bea8ed861978d4ae3afaeb2a189ef44a4e910c2a4e373a9c36de2c5c2b34a927d64be69a9e03fe227274683c37701d","ssdeep":"96:76Elbw+iRIFkNCuVafLMHpkSpw8z7UPEblZ+UtOMkeKw8fmJM:7fwtVNCuKM6aFzwPolRtO3eKw8fme","tlshash":"ff916c79b37d131ce9534e7e6c92b6c8325b9daa464f0eb2c19482220f9ec895b805d7","first_seen":"2025-09-21T14:29:32.424585Z","last_seen":"2026-06-05T23:57:58.137339Z","times_seen":87,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/provider/spadegaming.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/spadegaming.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"c52-696abe73-6f68b;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 3154\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3154,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"320cfbe4a80279d60708101c0b0e43f4","sha1":"944fff69fc23e6acf1abeada1854e9234805f5e4","sha256":"5737cdb9d5e20e199690ce65b1477bf50e6d76e6ff3af2ae1a3916eb52277f6b","sha512":"cd06cd28bcdbf5a094d9bd2650e182cead0348ae5e904529ade137b00e57261b3b48b4de5ec2801cf5f2ff3e820e2764b9b83d7e3e057e4b3a2ea42f13e83aef","ssdeep":"","tlshash":"99514d5ac712dd80508e8d0738e1e976e53574004b71a938bed98dde391c6e3cc68ee7","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-06-06T03:48:29.95755Z","times_seen":1652,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/bank/bca.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/bca.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"a25-696abe73-6f640;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2597\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2597,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"7218454f8ed20e47c89c49f43dc865a8","sha1":"b3fe2c42a0ef40da7db91efd05fb16be761bbc7c","sha256":"a0effe9a2c5b748a827c592cff324be42a330b94f053bd596dbe4b45f2c18152","sha512":"843f06f1b1bfaad41cb112a544753066f22c40738164e790231f0e4bc10c1f1a0e9b804a15149a538779556a00dd303098ded75d9892e7c246219aecc694104e","ssdeep":"","tlshash":"2e51198ce8525d40b61ee1a03ac2057f92128dc0cfd1e90df8adc80e13353e497288d3","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-06-06T03:48:29.997618Z","times_seen":1490,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/bank/maybank.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/maybank.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"b4f-696abe73-6f64b;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2895\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2895,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"ca7aee98071b2d3880f94ca3dc8842d4","sha1":"eee1e7f874e610c4facdd9a8e3002b31a90af582","sha256":"77173f10f7b5dad589d402a81d207260826935ab02ae7cc52f7d9298f6a38eb1","sha512":"6a4850a3964c179cb5b567ed7e616330dd83581f2da688c8345274a25f93d195607f104da1cd8f6f10e3ecf1f3b5856fc33ec05d31ae454300ce89955a2aa583","ssdeep":"","tlshash":"43512aaceb10ac44936dd54019caa63eba334ac0cae9e1da314fcc045b911fce41f2c3","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-06-06T03:48:30.021088Z","times_seen":1472,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/bank/telkomsel.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/telkomsel.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"aa8-696abe73-6f651;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2728\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2728,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"ccfef8b817b38862ea38cd51ad5eda48","sha1":"7bc6d8db79a495b725ad203aa9228e9178b8ac0b","sha256":"1efc5dce3145bdeabd5c9549aa768207802f3d94f85af872e74e936dc6c6e32d","sha512":"dcb90a21a291fb3d2bafb121ecadd54cae3dbc1972a5058f943c9e3335fe40efd0684adce586a469094a3e9bbeb73f89942c2da48a363ff6e9ea8351cf168002","ssdeep":"","tlshash":"ab510ac8f9856811b2556d9728f86037ce095880cdf0e09669d7f122687c1fdddadcf6","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-06-06T03:48:30.021784Z","times_seen":1518,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Daily%20Wins/Moleionaire.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Daily%20Wins/Moleionaire.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"28b6-696abe73-6f662;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10422\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10422,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4b5cc655f7096eb7d8bc8a6064e66046","sha1":"b7a1ec46a52bdc049942b1ff183ca9c5fea64ec7","sha256":"c465fb6dc29049cb885cdc7361311e8bcd45b9526bed52714f43b4f1a8d50ca2","sha512":"3df0c4ca2b4412577d034af10ae6854cf6dd54a81b64b53acdf71b888fffc0de7133c59a9eedefc03c4d13cea7373e53bb6356dd0db85dd19ba4dea332caac5f","ssdeep":"192:+fwIa/kRLK7qGhEQycBY8zuFvz7AzPe/NTjSJ8nz3iggP:+fw5cRLK7qzSY8Wae/NPS4+ggP","tlshash":"dc22ae2b8e95138beb5333375c820346ff20b66e8359871255ed71b6878cdcead25067","first_seen":"2026-01-18T13:43:06.067961Z","last_seen":"2026-06-05T23:57:58.120323Z","times_seen":19,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/icon/icon-telegram.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-telegram.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"be77-696abe73-6f677;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 48759\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48759,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2133 x 2133, 8-bit/color RGBA, non-interlaced","md5":"e842e22c1de9eb77437b73f8558ac71f","sha1":"e70468210bce759444d491275719626e47402036","sha256":"03a85c43f49837f98a108421f6b06a378af67cbd5577a863cee66692fa45e141","sha512":"6f34f4065d53a656fe16034bf82d05b3d44602b5201fd792bbd28f5125e43121d93037478917173d4e94b42b522fd623147eca1b9e2581ebfed048a50bcfe02d","ssdeep":"768:1M+gwJhxCG03eEwrHSuKCRcugioi6zZVnZpbyxVGw/LzWngiUNEq9AJR:1hAGGL0RcuxoiCcguXRi4hUR","tlshash":"5a23bf399cdf1b66c9cd307a64b90e83fa7653a0c48c7e1853bc85756ab52383841ea5","first_seen":"2024-05-25T09:50:17Z","last_seen":"2026-06-05T23:57:58.188134Z","times_seen":215,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":294,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Hot%20Games/Rooster%20Rumble.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Hot%20Games/Rooster%20Rumble.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"1b60-696abe73-6f669;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7008\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7008,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b98f2d464af3a9acf1d2ef2106413bc2","sha1":"55b85bd82cf7c54429715b458adbca516df9460d","sha256":"b0226ab531a2b035a82b5dbda4046d8607cd71fe5a95278f56762b560cf81c73","sha512":"e21a9aa9800eca1aac274f37446cdd59f7783a268c415086d4bb166f19e66f66101e9228234e7435ffeba289839430af33a303324d52979b29d099a1ceabadbc","ssdeep":"192:jfwd/snBW/J+tN/XrAjv1+yJIh77hUXB5IavuCD:jfw5uWxc/bG06SFSI2ue","tlshash":"bde18eb7d6865600c48b82f490c267cbb35235aba552ef0bcfc8482a75296cdf34f941","first_seen":"2025-02-11T07:00:30.783714Z","last_seen":"2026-06-05T23:57:58.140386Z","times_seen":319,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Best%20Games/Anaconda%20Gold.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Best%20Games/Anaconda%20Gold.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"2308-696abe73-6f657;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8968\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8968,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e374a66d9cf00e5440005373445ccf58","sha1":"4498bcb0d283df5dda904989efaa77a259277127","sha256":"1fb20cd7e51341dca97851e86e713760cae5b1dc9613b44df507aa85d287bb54","sha512":"3e2e2e7f8f37873ec0ed1bc49d509cd16ac02f2e60fe44479488b97a5d4143ef925e0959a0383a9bcb352c897cd3d213e010f42ee3a0c0c08ca0c7a4aa33ca2d","ssdeep":"192:zfwTZKH9c0H9QBesg/l4wQ3vaEllAzE/Depu:zfwdGHeBesg/l4wQ3vagAzE/DeM","tlshash":"6302cf092f22090bc15fabfcd61c1fd9af7296035364758cda446d24298ccee5878d2a","first_seen":"2026-01-18T13:43:06.093182Z","last_seen":"2026-06-05T23:57:58.139676Z","times_seen":19,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":266,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/icon/icon-sports.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:38.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-sports.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:38 GMT\r\netag: \"1268-696abe73-6f675;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 4712\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:38 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4712,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 129 x 129, 8-bit/color RGBA, non-interlaced","md5":"f54c4f5d863086ed502da28dc867b77f","sha1":"13ee6f843f4d922ce2ce2cf375916d5ff7e64801","sha256":"2c1714b3161b4ea258d60848d9c497bf74589f179a414374922410a852ff9d81","sha512":"e02b4d06e28319b08b45ca8baf99c0d4d2a71eb5ef2c5f93e98a05812e2c6221d78964540db51ee9b51e3566df29ec16b7947a2d58177ca667796706cebba2b0","ssdeep":"96:i6d15R0FtrPn8gwnslXCPpNfY26QijlSzMF+FN+RowKwTxDDRUG9lj7nT7No8:T5RC0gO+SRtY2vijlD+FN+NKwtDDbTT7","tlshash":"64a19e1b988095cd9a6375354239abcc254fa4d0d3b441feb9c46e47a158b4eef4f488","first_seen":"2024-05-25T09:50:17Z","last_seen":"2026-06-05T23:57:58.141109Z","times_seen":216,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/games/Hot%20Games/Caishen%20luck%20Spread.webp","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Hot%20Games/Caishen%20luck%20Spread.webp HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"179a-696abe73-6f665;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6042\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6042,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c5758b938b4a534c1087a517abc6af37","sha1":"a74713803cb9e0d16bf359e907784343ba05accc","sha256":"e52850c139de246807724a28d625550cbb608244d0481c10fb695d3935595d6d","sha512":"86c75c0aded73c03c213d0d0b50082ab3390e1b45ec39875086c9d38d1da99f1bb391ddd2397774b140e2af39f4a3e645c46ac6fc31a05d15f26539e6a9b2195","ssdeep":"96:Z6Elbw+iTFxDlVaiA+Aq6QYCZ5uW5xgwrnXXwmJjxTL5JUxVi+K4gRmMJWnajxbW:ZfwPtVa1rQYCZ5L/5XXfJfe24gRmV6x6","tlshash":"6dc18fc6636378cdc10a9f30985a5381916c3963cd50b5dc5368aa72ab20fea7d9c5c7","first_seen":"2025-09-21T14:29:32.466589Z","last_seen":"2026-06-05T23:57:58.134957Z","times_seen":87,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/provider/allbet.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/allbet.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"183a-696abe73-6f680;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 6202\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"65385a0b00807c78e9ee11e5e845f395","sha1":"856fc5558ff9ab52c6393ae0cbf830cae288d13f","sha256":"9339336ebd83063c8f03b0572ed4a5c91f3c12452145115387cb78d51980ac37","sha512":"452b8c645cbd6a457b2da98743b2de9e07b022e67f503f716946bf5bdeca3a5ab37b7ec759593679485d22ecee3747f48616324fcfec1e8ed569e7eeffc7dca7","ssdeep":"192:aq/ECTu1GWg09EuSqUrf6RxlO8not0Ww66P7g40Hv:aq/nu1GWRaORrLj9L0Hv","tlshash":"bad1af25ef83053188a9ecb095b226b7003fc7841d30d63579eadc995d319bae4fe5c9","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-06-06T03:48:30.009658Z","times_seen":1627,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agam168.com/wp-content/themes/mabar88/images/provider/sabasports.png","fqdn":"agam168.com","domain":"agam168.com","tld":"com"},"ip":{"addr":"103.26.10.123","port":443,"asn":132335,"as":"LEAPSWITCH NETWORKS PRIVATE LIMITED","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agam168.com/","date":"2026-01-18T20:45:39.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agam168.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 19:15:27 GMT","end":"Thu, 16 Apr 2026 19:15:26 GMT"},"fingerprint":{"sha1":"D5:A0:82:A4:5E:48:6C:30:40:E7:24:96:AA:25:6D:49:30:2E:07:6A","sha256":"10:33:73:14:A8:A5:32:76:F0:7D:0C:C3:51:93:CC:89:C6:38:AD:07:C5:BB:CB:BB:AF:DE:26:A9:C6:B8:91:10"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/sabasports.png HTTP/1.1\r\nHost: agam168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agam168.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 25 Jan 2026 20:45:39 GMT\r\netag: \"1269-696abe73-6f689;;;\"\r\nlast-modified: Fri, 16 Jan 2026 22:40:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 4713\r\naccept-ranges: bytes\r\ndate: Sun, 18 Jan 2026 20:45:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4713,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"1f3020b661a06afe96a458859c3c7cff","sha1":"1a2bdc2e90543265d04d42670522c53105f5acbf","sha256":"ff82fe6d37d4c0a8714b16d18ce5d08f75968e686e1b71c30a783124f7dedc59","sha512":"2da36480856b22b46cc5b39f81ce86787b0ba260b9ebece4a715075c9bb48dbb90acd45b524ed317564f3f9060071ed0ff1ed454aa86a3ca935d018e015541eb","ssdeep":"96:aqQ+8/tARsjA+dRXr2zC0kyUh/jIDuseHh46WMy8HOM9TORnAy:aqz8/OejA+bXrO3ky0/jseCZMy8HOMmh","tlshash":"c1a17d0cf75eac09354268c230f9914399500df4c86a902af504ecdb2ab83f9ca9e5ef","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-06-06T03:48:30.001966Z","times_seen":1597,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"agam168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-18","alert":"Phishing Block","trigger":"agam168.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}