{"report_id":"96096e5a-4269-4052-afea-2523a3caff67","version":6,"status":"done","tags":[],"date":"2026-03-30T20:45:31Z","url":{"schema":"http","addr":"dewa555.net/","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"dewa555.net/","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"title":"DEWA555 » Link Official Dengan Sistem Keamanan Server Terupdate","dom":{"size":132009,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6883)","md5":"2823a2d738fe1c653c043b74b79f70d9","sha1":"821fc750e1f01adc9346ab6a3c720af0df017efe","sha256":"af57b58b0ae2e6ed8a9cb0c9c066c1279c26837742cfc0eccdc5c7b77b7f7933","sha512":"6c207aee079a3c9a602eea798ac69bf6bfbed151193d92993588d8581db7ce0ffc29e7b271976b96b4813e4095602a0cb3a0671d8a87f1fe7eeb2ed251d57f0a","ssdeep":"1536:TZ5F4g5A4WR2vE7V8J766ZkdLNf/HhXYVVIKC9KlGypcymKFo4fUx:M6ZkdnYVWKC9KoypctV","tlshash":"15d3c507d5a2204d180391246be6ab6b3b78d443ca17dd2cbedd67c4cf86a81ad7378d","dom_hash":"domhashdb37e8810d0227c6833e6e957cc0a7ea","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dewa555.net/","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-04T20:45:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dewa555.net","ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":62,"request_count":31,"received_data":1711214,"sent_data":14182,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":4,"received_data":34784,"sent_data":2136,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.ampproject.org","ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2015-08-31","domain_rank":3289,"first_seen":"2015-10-09T04:27:01Z","last_seen":"2026-03-30T09:48:23.713174Z","alert_count":0,"request_count":6,"received_data":411557,"sent_data":2627,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-29T22:20:07.848058Z","alert_count":0,"request_count":1,"received_data":11479,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-carousel-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"10e43af6290b9d3de97cd9896aed3d20","sha1":"ea15a74cadd40b83e8d70eab83aadeeeb02a01a1","sha256":"82df4a9f31c71adbf7a703488666a05fa07d6f2f20c58287776ec246ecd62c80","sha512":"38fc0aca11ccf52ea958b9fdf9b9419c9b054b8c96c32c6b11dce73b0bdfa91451b119035a0d851626535493a668148ad1fc97edaf4d8df2e41f1c3fcd0f6514","ssdeep":"768:IuCdWBuHV4qVy2STUJIQ7bFq8JN8n0HZJnMb+0:I2unY30Dbv3o1","tlshash":"d703d8d8b241b07546a7b1b4406f510ee23eb919640a552cb0abdecafdbc95e2137f3c","size":38737,"data":"","first_seen":"2026-03-17T22:20:00.41071Z","last_seen":"2026-04-05T09:19:37.19409Z","times_seen":150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"866019e32d667974068ee8ca1e6f51fc","sha1":"567d8a4ecda8c096d4ef18fdb59a70615f209dc6","sha256":"151fc4ecdbb674696a6f400b7054958640209ee719f2b0caa3117ad7d960a79c","sha512":"54af614595bf2095350a159c6a31ddfdb9262d600f5d32ecd12a6f1411aee1be62fb347597e0bffe70774aceabf0d88206bd1d773b988197876f0fb9341cd7f2","ssdeep":"384:oCXUpS23P0LAu/6jKdxXsHfdajJJj8JTAZl0oFpxRPKGOtH+8JoeWl4LyYO9Irde:oCXUVP5W1d0QzRtq+8JoPuLyYO6rdK15","tlshash":"48c2a4ddf282b47542a7e0b5502f670ba23b6054644a882cb42de9d66db8d4f3177f3c","size":26664,"data":"","first_seen":"2026-03-19T00:45:26.98443Z","last_seen":"2026-04-05T09:19:37.195615Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012603032146000/v0/amp-loader-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"89838914470dd0e624818145d0da20b0","sha1":"08e50aecb72cf5a2ee881dcd9f851f9060d7fecd","sha256":"f50872bb1f4ad2d9d9d9413b7f6a6fe28a824d82cd90a4d3865c9c9441a3ba76","sha512":"6a475a043519513c83d0c40d8fece777861225d8da5a845852d59652a87a6cc5e3a091d96fc489563c9109d53810c25604fda9d2ff2ff45cdc4ee7a61d390f0e","ssdeep":"192:9fQHMOgzKBbnnRrVGRoP0YWrO2tH1a9HzMb5F4g5A4WR2vN:p0g2BbnnHYaBzMb5F4g5A4WR2vN","tlshash":"2442a464b54ba2ac530352b484fab906757ecd4fb8504035f0018edecf99e48bd7ba6e","size":12715,"data":"","first_seen":"2026-03-17T22:15:38.807202Z","last_seen":"2026-04-05T09:19:37.192702Z","times_seen":641,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012603032146000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfd43df9e3425f6077d3bd69d5928cfd","sha1":"d5b1138d94904e2ab07092a86614976e1c2f543c","sha256":"94922d1f912dea5b7dd68a1a62d746f58d44a0c8305607aca116d6f08ba46708","sha512":"1f42867fd9dce4ae9a17c2a13be535196920068b4ca5b52b256baa92c48150b0f725a5f977ac59bafe6187e06e25aa2ff2787c37e23485bb943cd05fd126b6f5","ssdeep":"96:jKoAosPGpV3yMDc0jGAM+G0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:jKqswV3yv0jGAFCPX/tqKyWp4M0rDTI","tlshash":"d7f196dc7ac2b83a5757b4b780af414fa63ba94624ad9120d120f0d83cb995ed633e5c","size":7798,"data":"","first_seen":"2026-03-17T22:15:38.806244Z","last_seen":"2026-04-05T09:19:37.197118Z","times_seen":826,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c54252d732bff78217cfbeff950b3476","sha1":"960deb0b579fba259aa9865d3b1deadff0538bff","sha256":"852bb88969e8e21c5f7403b97cdb69b072a54f60214690cee9f1dad4db2d6740","sha512":"e75fc0cc5405ac64ddce8e210062fda91bf50d668d8cbef548f54b22b311082da8d3830d9092375ab69a6d8def15d9889f195f03269ecc9f570ba7afbf77f7e2","ssdeep":"6144:ixUXfTWCOu6qiieuIbno1uzRePNS+7HYo:yqftp/0RENS+74o","tlshash":"e754949db286b0724793b075803f150aa33ba859244a812cf56de9d67cbcd89b137f7c","size":284617,"data":"","first_seen":"2026-03-17T22:15:38.805176Z","last_seen":"2026-04-05T09:19:37.195154Z","times_seen":857,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-sidebar-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b694f7ac7a2d25f27e3a5170934f767f","sha1":"25695ed09263529c3669752ca1c3165bf0bd5522","sha256":"a8233411b529c7deb0122e2adfc259fd12bcd1ca27551d064cdd900668b122fa","sha512":"5521f93daf0bf6a1e4c6559089dabb7529336e45b2fc984e2e0ab60126d7b26c6bc43b97d838ac114730847bf3c02f5f35c30c06dd16a209cc8ea1be37eee272","ssdeep":"384:QnXCVRcBmElj6eU6nWnxXsHfdujPJqSQybcmE0X3b6IZPLyEu5M8JSY7:QXC0lj6J4yI0b6IxLyEcMDY7","tlshash":"efe2c79cf292b0714693a4b580af550ea23b6555240b882cb06decc66d7ce8fb137f78","size":31363,"data":"","first_seen":"2026-03-18T14:43:08.917752Z","last_seen":"2026-04-05T09:19:37.196092Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"dewa555.net/assets/images/games/jackpot/Zeus-Deluxe.jpg","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/games/jackpot/Zeus-Deluxe.jpg HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30183\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30183,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"6fc35c59cc22ece2e511258564968a12","sha1":"c931ec3725ed16123c4b61a94873899bde749799","sha256":"fe354d3e1ce7936032725030d54f2faabd5ff9a031476c240d9e78c3bfef82c6","sha512":"9dc8e3057b73dbdd6d4cebc586e160eff8da7fe9469734ee6a68379098d0249eb8d927ada33e446ae87b01e72cc1ec5d19f2934071789583bd3e5b51fc1c9452","ssdeep":"768:K0KvxagARV645wpFuSUkawppxhXqN/Pg4Sje:KJ0g2scSTaqPhXqN/Pg2","tlshash":"6ed2f108f4d3e2e49f1f88b394d43455de8688f6dc678477b8839e01ad172db8f29a52","first_seen":"2026-03-03T17:02:19.694292Z","last_seen":"2026-03-30T20:45:37.235905Z","times_seen":3,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/games/populer/Loony-Blox.jpg","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/games/populer/Loony-Blox.jpg HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 34161\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34161,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Macintosh), datetime=2021:10:21 18:44:48], baseline, precision 8, 200x200, components 3","md5":"8c52c78c81803f1f49eb0d3672e2d171","sha1":"08ec95c99d833f30871513b689196823749e22cf","sha256":"7d6487579028ddfdf05e1387b7759dab7acd18fafca49c1391f01e710971dc7d","sha512":"7e64a4df537eeb52f739f93938a3319039db4c46b84e1c0cca19fcfaf1aab7d6807d787a41f02ef099727a008edb5532f510bbd31ccacf4d2fc02012c2bbaf62","ssdeep":"768:BYy1R4gHCC73BjXlGjqENgHv3KzC6158Gu2/:BxR4giC73/N0uv3OH/u8","tlshash":"f2e2e1247f109d51f7e1f638a8c6d5f9ea67aa40c3822737b0dd4611b7b0af28c5ca06","first_seen":"2026-03-03T17:02:19.680266Z","last_seen":"2026-03-30T20:45:37.237484Z","times_seen":3,"resource_available":false,"data":null}},"time_used":793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/games/populer/Songkran-Splash.jpg","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/games/populer/Songkran-Splash.jpg HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16250\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":16250,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"15eb0b1294b056e89b7a0293463a56c5","sha1":"56a7c00092796e72a4571088dab0a0a0b0e9f7f1","sha256":"12fa686e41a8d2b91325de030c1e0e23476dbed19f8de1f568d25df59a036c79","sha512":"2c7f599e036f2dcbf65d8488bcb6b31b9d65079e6ac12015be56e14f41f0463b314aab2296c7d09a752db300491c9dcab6d7d1384dd114bf4a95a3931fee9067","ssdeep":"384:WaZYnvtQKSicHaxVwONIA+c9aw9Z/qTtMBqGCRcad6:WOSvtQKdRxV3+ZcgI/qTapvw6","tlshash":"5272bf113f122da9f7460124e0b2581616408f228da2fef195b0ef6d4a9cdba1bf2726","first_seen":"2026-03-03T17:02:19.709943Z","last_seen":"2026-03-30T20:45:37.238949Z","times_seen":3,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":620,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/icon/news.png","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/icon/news.png HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 336\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":336,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 23, 8-bit/color RGBA, non-interlaced","md5":"a19ecddf9a2433247df17487b78cde70","sha1":"06aa60570d2098b88c82019afe8faa9106a8d457","sha256":"2178139d950466efdddf2e72fdb03f3b8b508d2468dd227813142dd0955f9a9f","sha512":"1f040f0027c49e3bd6c8a5c15e0ef7d2ef6115aa00107ac1fa4df9ba6dce3599dfb82b5e5b96b11467fb0791b521676e65a3cf5369b8619a4b1041a436bb8719","ssdeep":"","tlshash":"6ae028e4d71e85d4d51e0f67de95f11decf5411459ab3545064cd57b0bc00c4c4c8300","first_seen":"2023-08-15T16:00:28Z","last_seen":"2026-03-30T20:45:37.24019Z","times_seen":6,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":589,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/jackpot.gif","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/jackpot.gif HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/gif\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 37277\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":37277,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 944 x 152","md5":"801ebd7ed031548f48f506e552e743c6","sha1":"378790bd03e6f672bcbff1c383cedd1a371d9f9f","sha256":"a0cc886955b7e0a2c72c812e217875b60199a05e8585e852a203acdcbab66057","sha512":"ce036c5d3546d13f54d72348818e593033a2add75be7e1e4a8a134921d6f8b04877a8c4ef6eff04268663c3c7ef8a0487ff0ed3f82da636615bf93cca75e971c","ssdeep":"768:xTaytegN+nGf4ZP5aYdyre0Yld9P9d2nb+JSKaNQtGYGCpyTJ0xn:xe8eq+nE4ZP5agce0o7Va+HzGCpaM","tlshash":"aff2d10bcee535c18e22f0682159d6e61e0c6c9497befc7380e56187362703e9ed97a3","first_seen":"2026-03-03T17:02:19.676868Z","last_seen":"2026-03-30T20:45:37.241301Z","times_seen":3,"resource_available":false,"data":null}},"time_used":751,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-30T20:45:03.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Sun, 29 Mar 2026 05:06:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13504\r\ndate: Mon, 30 Mar 2026 20:45:04 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":110367,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"dc45a96480aeedbebd88808e45314f18","sha1":"460041e8987abf64388f4552b4230484846d0a60","sha256":"1f4b71531de2d1ae6dbba535a897df228391d4a7ac0c9f41aef85673eaaffa53","sha512":"2deb3607598bdedcbe88ff6a4d3dda26ea4e6ba29ad3628ba5ddf003922a1232b106fd7139e6c6e7b2cfa98ae336e873493469533ccc73aabcc0f5dad4a36e6f","ssdeep":"768:hrvrJr07VzA/gJXGz+JPkS4YDhf/SuVUAIpvswIFCkUwRbnr0lA9rxKk:pTR02gIz+VVUAovswIFCkUwRbrddxKk","tlshash":"32b36216d542204a18339369dfb29b4eff965153c702c56d7efd62828fb2940c9a3f8d","first_seen":"2026-03-30T20:45:37.242457Z","last_seen":"2026-03-30T20:45:37.242457Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1863,"timings":{"blocked":749,"dns":130,"connect":179,"send":0,"wait":365,"receive":0,"ssl":437},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dewa555.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 02:00:40 GMT\r\nexpires: Sun, 28 Mar 2027 02:00:40 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nage: 240265\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-04-05T09:47:45.833563Z","times_seen":204030,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":63,"dns":9,"connect":23,"send":0,"wait":8,"receive":1,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012603032146000/v0/amp-loader-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:44 GMT","end":"Mon, 01 Jun 2026 08:36:43 GMT"},"fingerprint":{"sha1":"67:A7:60:5D:C5:C4:DB:ED:0D:A1:70:F2:6C:0F:18:61:29:4A:D2:49","sha256":"8E:A9:A8:B3:90:65:71:66:2C:CD:33:92:74:7F:99:EC:5F:57:13:49:15:9F:6E:54:59:ED:22:72:3A:41:00:F0"}}},"request":{"raw":"GET /rtv/012603032146000/v0/amp-loader-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dewa555.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 3926\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Mar 2026 13:50:16 GMT\r\nexpires: Wed, 24 Mar 2027 13:50:16 GMT\r\ncache-control: public, max-age=31536000\r\netag: \"9422bdcfef37a42c\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 543289\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12715,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12600)","md5":"89838914470dd0e624818145d0da20b0","sha1":"08e50aecb72cf5a2ee881dcd9f851f9060d7fecd","sha256":"f50872bb1f4ad2d9d9d9413b7f6a6fe28a824d82cd90a4d3865c9c9441a3ba76","sha512":"6a475a043519513c83d0c40d8fece777861225d8da5a845852d59652a87a6cc5e3a091d96fc489563c9109d53810c25604fda9d2ff2ff45cdc4ee7a61d390f0e","ssdeep":"192:9fQHMOgzKBbnnRrVGRoP0YWrO2tH1a9HzMb5F4g5A4WR2vN:p0g2BbnnHYaBzMb5F4g5A4WR2vN","tlshash":"2442a464b54ba2ac530352b484fab906757ecd4fb8504035f0018edecf99e48bd7ba6e","first_seen":"2026-03-17T22:15:38.807202Z","last_seen":"2026-04-05T09:19:37.192702Z","times_seen":641,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":46,"dns":0,"connect":21,"send":0,"wait":23,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/games/maxwin/Party-Night.jpg","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/games/maxwin/Party-Night.jpg HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24960\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":24960,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"8720f05a76f17b2503b2eb27a2629305","sha1":"dbcfa9388dd88c1f5dd21c38c4dfb051b719d926","sha256":"098bfa26f69a763d2e49d09e5484944a94990938fc7c30855ed6648621dce5ed","sha512":"a140926b172310b696c3f871056983978074b49671ee7706528d3e000e529ba9b4824fac83acd9d5aaa77392e4882a75e225c5c0f9547560130fbe7bd79d576e","ssdeep":"768:YbhLZ6aPdZq66FbGSiewqluiSO559IRTnnD6l/:YbhL8aDq/DiklS8gTnuN","tlshash":"a2b2e15cf671a343ccecd07a98b164419871b9cbf104a41bb8bf882f2d6e0c256292ed","first_seen":"2026-03-03T17:02:19.728601Z","last_seen":"2026-03-30T20:45:37.246242Z","times_seen":3,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/games/maxwin/Koi-Gate.jpg","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/games/maxwin/Koi-Gate.jpg HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 38430\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":38430,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.7 (Windows), datetime=2024:01:29 15:29:49], baseline, precision 8, 200x200, components 3","md5":"dc4dd4c7ae33b00af28bab4bd66cd28d","sha1":"5d80a4f2063e0f6bc9ad0b8a2e7dd933e04ed6b6","sha256":"958ade902f34c7a7355c08df249cad3fd48192f21b812599a5dc59124de06131","sha512":"b7cf504e8940e99f288b81ad3ffb2f19c4a85377be342c181eb23e512c09bbf98f3e9744a07148b319fd8eade2a26c59bb084d1be959e2ab88b3fd6733f5868a","ssdeep":"768:BYyv9vxM2KrxDsteUDsFbKKjfMpI0ChvXij3BYMk25eyo/e5:BUpx8eUIFbN27eCiMkqS8","tlshash":"cb03e0249f77df20f2e03574b9b8ea3ab7d7198c024524ebb9dd49023b20eb294051d9","first_seen":"2025-10-10T18:42:13.601925Z","last_seen":"2026-03-30T20:45:37.247131Z","times_seen":8,"resource_available":false,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":625,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:44 GMT","end":"Mon, 01 Jun 2026 08:36:43 GMT"},"fingerprint":{"sha1":"67:A7:60:5D:C5:C4:DB:ED:0D:A1:70:F2:6C:0F:18:61:29:4A:D2:49","sha256":"8E:A9:A8:B3:90:65:71:66:2C:CD:33:92:74:7F:99:EC:5F:57:13:49:15:9F:6E:54:59:ED:22:72:3A:41:00:F0"}}},"request":{"raw":"GET /v0.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 73113\r\ndate: Mon, 30 Mar 2026 20:45:05 GMT\r\nexpires: Mon, 30 Mar 2026 20:45:05 GMT\r\ncache-control: private, max-age=3000, stale-while-revalidate=1206600\r\netag: \"5b239dc189f888b8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":284617,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64627)","md5":"c54252d732bff78217cfbeff950b3476","sha1":"960deb0b579fba259aa9865d3b1deadff0538bff","sha256":"852bb88969e8e21c5f7403b97cdb69b072a54f60214690cee9f1dad4db2d6740","sha512":"e75fc0cc5405ac64ddce8e210062fda91bf50d668d8cbef548f54b22b311082da8d3830d9092375ab69a6d8def15d9889f195f03269ecc9f570ba7afbf77f7e2","ssdeep":"6144:ixUXfTWCOu6qiieuIbno1uzRePNS+7HYo:yqftp/0RENS+74o","tlshash":"e754949db286b0724793b075803f150aa33ba859244a812cf56de9d67cbcd89b137f7c","first_seen":"2026-03-17T22:15:38.805176Z","last_seen":"2026-04-05T09:19:37.195154Z","times_seen":857,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":174,"dns":80,"connect":10,"send":0,"wait":17,"receive":15,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-carousel-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:44 GMT","end":"Mon, 01 Jun 2026 08:36:43 GMT"},"fingerprint":{"sha1":"67:A7:60:5D:C5:C4:DB:ED:0D:A1:70:F2:6C:0F:18:61:29:4A:D2:49","sha256":"8E:A9:A8:B3:90:65:71:66:2C:CD:33:92:74:7F:99:EC:5F:57:13:49:15:9F:6E:54:59:ED:22:72:3A:41:00:F0"}}},"request":{"raw":"GET /v0/amp-carousel-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11513\r\ndate: Mon, 30 Mar 2026 20:45:05 GMT\r\nexpires: Mon, 30 Mar 2026 20:45:05 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"e34f527b840d6c6a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38737,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38616)","md5":"10e43af6290b9d3de97cd9896aed3d20","sha1":"ea15a74cadd40b83e8d70eab83aadeeeb02a01a1","sha256":"82df4a9f31c71adbf7a703488666a05fa07d6f2f20c58287776ec246ecd62c80","sha512":"38fc0aca11ccf52ea958b9fdf9b9419c9b054b8c96c32c6b11dce73b0bdfa91451b119035a0d851626535493a668148ad1fc97edaf4d8df2e41f1c3fcd0f6514","ssdeep":"768:IuCdWBuHV4qVy2STUJIQ7bFq8JN8n0HZJnMb+0:I2unY30Dbv3o1","tlshash":"d703d8d8b241b07546a7b1b4406f510ee23eb919640a552cb0abdecafdbc95e2137f3c","first_seen":"2026-03-17T22:20:00.41071Z","last_seen":"2026-04-05T09:19:37.19409Z","times_seen":150,"resource_available":true,"data":null}},"time_used":955,"timings":{"blocked":460,"dns":78,"connect":7,"send":0,"wait":17,"receive":2,"ssl":388},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:44 GMT","end":"Mon, 01 Jun 2026 08:36:43 GMT"},"fingerprint":{"sha1":"67:A7:60:5D:C5:C4:DB:ED:0D:A1:70:F2:6C:0F:18:61:29:4A:D2:49","sha256":"8E:A9:A8:B3:90:65:71:66:2C:CD:33:92:74:7F:99:EC:5F:57:13:49:15:9F:6E:54:59:ED:22:72:3A:41:00:F0"}}},"request":{"raw":"GET /v0/amp-lightbox-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8537\r\ndate: Mon, 30 Mar 2026 20:45:05 GMT\r\nexpires: Mon, 30 Mar 2026 20:45:05 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"28fcb59b9c074e15\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26664,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (26547)","md5":"866019e32d667974068ee8ca1e6f51fc","sha1":"567d8a4ecda8c096d4ef18fdb59a70615f209dc6","sha256":"151fc4ecdbb674696a6f400b7054958640209ee719f2b0caa3117ad7d960a79c","sha512":"54af614595bf2095350a159c6a31ddfdb9262d600f5d32ecd12a6f1411aee1be62fb347597e0bffe70774aceabf0d88206bd1d773b988197876f0fb9341cd7f2","ssdeep":"384:oCXUpS23P0LAu/6jKdxXsHfdajJJj8JTAZl0oFpxRPKGOtH+8JoeWl4LyYO9Irde:oCXUVP5W1d0QzRtq+8JoPuLyYO6rdK15","tlshash":"48c2a4ddf282b47542a7e0b5502f670ba23b6054644a882cb42de9d66db8d4f3177f3c","first_seen":"2026-03-19T00:45:26.98443Z","last_seen":"2026-04-05T09:19:37.195615Z","times_seen":79,"resource_available":true,"data":null}},"time_used":956,"timings":{"blocked":459,"dns":78,"connect":21,"send":0,"wait":19,"receive":1,"ssl":375},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/slot-game-pecah.webp","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:06.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/slot-game-pecah.webp HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 29 Mar 2026 01:55:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 294086\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":294086,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"26408209bf23bba142c9ff3f6613d98b","sha1":"27b515245f905ffdf4f64f3255fe2b6de8acd582","sha256":"88c803ba8e59b89c82fd4e6553e0b3eae805b4c542c6c466d590fe0e6911fed4","sha512":"87970621318bbeb722125daf21e5c6684d02092d02247b96b71c07e05fef15ed3d819b3bdb5c5818271b04abcb0567a40241e92eaf453576571c9f26d9984776","ssdeep":"6144:EMiZRgnD7zDueYIOgY29Ujdry0oX2wv/T6sncHcjVY522gGfrO5orgEkq/:En7gDXDue+4Uj9ynzv/T6sc8pYFgsB/","tlshash":"4354239ac2f870ff7a3535314ec11b0790d38a97d2b75175ee7521e20188aae4f09be6","first_seen":"2026-03-30T20:45:37.251831Z","last_seen":"2026-03-30T20:45:37.251831Z","times_seen":1,"resource_available":false,"data":null}},"time_used":584,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":576,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012603032146000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:06.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:44 GMT","end":"Mon, 01 Jun 2026 08:36:43 GMT"},"fingerprint":{"sha1":"67:A7:60:5D:C5:C4:DB:ED:0D:A1:70:F2:6C:0F:18:61:29:4A:D2:49","sha256":"8E:A9:A8:B3:90:65:71:66:2C:CD:33:92:74:7F:99:EC:5F:57:13:49:15:9F:6E:54:59:ED:22:72:3A:41:00:F0"}}},"request":{"raw":"GET /rtv/012603032146000/v0/amp-auto-lightbox-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dewa555.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 2972\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 21:22:01 GMT\r\nexpires: Fri, 26 Mar 2027 21:22:01 GMT\r\ncache-control: public, max-age=31536000\r\netag: \"74a8e6f749d364bb\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 343385\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7798,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7676)","md5":"dfd43df9e3425f6077d3bd69d5928cfd","sha1":"d5b1138d94904e2ab07092a86614976e1c2f543c","sha256":"94922d1f912dea5b7dd68a1a62d746f58d44a0c8305607aca116d6f08ba46708","sha512":"1f42867fd9dce4ae9a17c2a13be535196920068b4ca5b52b256baa92c48150b0f725a5f977ac59bafe6187e06e25aa2ff2787c37e23485bb943cd05fd126b6f5","ssdeep":"96:jKoAosPGpV3yMDc0jGAM+G0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:jKqswV3yv0jGAFCPX/tqKyWp4M0rDTI","tlshash":"d7f196dc7ac2b83a5757b4b780af414fa63ba94624ad9120d120f0d83cb995ed633e5c","first_seen":"2026-03-17T22:15:38.806244Z","last_seen":"2026-04-05T09:19:37.197118Z","times_seen":826,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 30 Mar 2026 20:45:05 GMT\r\ndate: Mon, 30 Mar 2026 20:45:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10793,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"80df91dcfc8560910aca9bdd91a1e7d0","sha1":"2949de02fc38469258987e9b847a70a9cff1a21c","sha256":"0552ee50f635535685ba2713af81fa081791d7705baa9cdb3c5d1f463aa0a228","sha512":"65cbf1a5ff0d2e099211a39ed5128c8a95587b42dc854f30ffec1fc82e658911808709e5300319b495ec69bed73670e5c91404feb94fda4e7315b9b79ec62402","ssdeep":"192:+pspOlpXHaedhHdPgKQcXr3lVwa3RzJ/apsqiazk:+mkX","tlshash":"aa22add1087be114ab835cc123ce7d36ee1e9255b850e5786bfd0c98adabc254372b2d","first_seen":"2025-09-17T11:27:36.910597Z","last_seen":"2026-04-05T08:35:46.193338Z","times_seen":4635,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":166,"dns":0,"connect":21,"send":0,"wait":33,"receive":0,"ssl":154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dewa555.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 18:54:17 GMT\r\nexpires: Sat, 27 Mar 2027 18:54:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nage: 265848\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-05T09:46:45.980758Z","times_seen":193264,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":143,"dns":4,"connect":7,"send":0,"wait":8,"receive":1,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/games/jackpot/The-Great-Icescape.jpg","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/games/jackpot/The-Great-Icescape.jpg HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 32920\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32920,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Macintosh), datetime=2021:10:21 18:51:01], baseline, precision 8, 200x200, components 3","md5":"1f5d27883f8b8cb3711dbee3ef439aa8","sha1":"59e03707a60b662e179140c1916cf9c4137a9db8","sha256":"4bd5cb55e6fc2fead0ee2c34352da3206bec8336b11d4f958d9937d835c21525","sha512":"57c528ed27b89fb0deebfe5ccd0374e5104bd0b966d88c9563e33a51509fa62e8899802f650ee3984410c7d3000f71c2f28dd25b7349f65c9717b896a80f8882","ssdeep":"768:BYyyPONj4jjy4cgn3MjT4fm7zzyH3pVd5rSpVWYmVB:BISW+1gn8jT4O3zyH3rdhMVWlVB","tlshash":"0ae2d15eeb02ec41eff0e97d25be9397a1529711c27329d778dc822673516b5cc8d081","first_seen":"2023-08-28T19:14:53Z","last_seen":"2026-03-30T20:45:37.255814Z","times_seen":11,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/games/populer/Mahjong-Wins-2.jpg","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/games/populer/Mahjong-Wins-2.jpg HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33266\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33266,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2024:10:09 14:02:28], baseline, precision 8, 200x200, components 3","md5":"02238139fd1b40ae6bf29c55713ed1a9","sha1":"eb3681c9a8084a5eaea83d0855d07179b50d7832","sha256":"f0cd479240a6d323c2bd347c4391f29ceffcd8d44f6c624e2511b637ab7e5191","sha512":"311eed51679bbdc4774ba63f1c949902a3e1ab25a8401c321f65d37aef769bcf2685a695df706ab91f54e5043a9281bc2bb3305016095c5e87cf3ccd211af759","ssdeep":"768:BYybo4W17rtlx5hBUxbPdWn5iGkZCkxD84Vd:Boh17rtlNBcbc5iUkDd","tlshash":"9ee2d095f21b9e24ffd1a6305ea9bf54a6e2e6416f46126e34ef57197b20cb0cc09013","first_seen":"2025-04-16T23:04:51.850194Z","last_seen":"2026-03-30T20:45:37.256554Z","times_seen":57,"resource_available":false,"data":null}},"time_used":793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/games/populer/Moo-Moo-Cow.jpg","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/games/populer/Moo-Moo-Cow.jpg HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 63101\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":63101,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2024:05:06 20:15:12], progressive, precision 8, 200x200, components 3","md5":"e75d3fa4ca99d4cb02cc910e6af7f0af","sha1":"cc0ac8943105ad3fc071fd32ed69875a6548fdc7","sha256":"4d7c02dde0bcdc00c5ba862a14d846a75cb972eb3b9653026b6607c5bb1e2fc3","sha512":"c1c1d7b24e6f694f413560262db2aa82f852ae760c52ca3e38238d406046fd6e495fe149ed4eaea8e4732d6b1e2784fdf88f99ecb62340fa584772951f50d078","ssdeep":"1536:XvsAotHvsAotKbg5d1CLA69SrA7li6UHh:fs5ts5D5drka","tlshash":"5953e1b39f34ef14e2e4a530fce7d5ca5221250567b352267a9c79057378ed24f6820a","first_seen":"2026-03-03T17:02:19.688776Z","last_seen":"2026-03-30T20:45:37.257341Z","times_seen":3,"resource_available":false,"data":null}},"time_used":794,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":621,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:06.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dewa555.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Sun, 29 Mar 2026 05:06:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13504\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":110367,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"dc45a96480aeedbebd88808e45314f18","sha1":"460041e8987abf64388f4552b4230484846d0a60","sha256":"1f4b71531de2d1ae6dbba535a897df228391d4a7ac0c9f41aef85673eaaffa53","sha512":"2deb3607598bdedcbe88ff6a4d3dda26ea4e6ba29ad3628ba5ddf003922a1232b106fd7139e6c6e7b2cfa98ae336e873493469533ccc73aabcc0f5dad4a36e6f","ssdeep":"768:hrvrJr07VzA/gJXGz+JPkS4YDhf/SuVUAIpvswIFCkUwRbnr0lA9rxKk:pTR02gIz+VVUAovswIFCkUwRbrddxKk","tlshash":"32b36216d542204a18339369dfb29b4eff965153c702c56d7efd62828fb2940c9a3f8d","first_seen":"2026-03-30T20:45:37.242457Z","last_seen":"2026-03-30T20:45:37.242457Z","times_seen":1,"resource_available":true,"data":null}},"time_used":636,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":636,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/icon/icon-populer.svg","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/icon/icon-populer.svg HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:05 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 43234\r\ndate: Mon, 30 Mar 2026 20:45:05 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":57328,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f8f5f25769046146ae42b17a41c0a16a","sha1":"80e7bba523210c58296f8de4a6fa6a22e913382f","sha256":"dafd7d97d8675bb8ea10eede4680abba88a04c54242a3333a291d66dc91c6e27","sha512":"fbc4ffe351d868e0bc7742724578a558932d9f17c423039657c3150f3adae2e0c5f2dcc3559e94e5d4349e24e8cab31e708cfd982b5ee5419455db9802ad9b87","ssdeep":"1536:JWAHKFFqtSQd1JZjfknvKi05k1QnwqR1FmRQv+qP:JWAyYtS21JVfWXLi1IQvNP","tlshash":"e743f1423f407f7c4976d289916cd15fec26a88f6580ab5f7ef38895b27e6080ca50ad","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-04-05T07:23:33.629275Z","times_seen":1155,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/games/maxwin/Sweet-Bonanza-1000.jpg","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/games/maxwin/Sweet-Bonanza-1000.jpg HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20692\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":20692,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3","md5":"186365dac839c2816aaea64fe7f61b95","sha1":"e52cf3b913929fdd6723564fb158b59cad9a230c","sha256":"a837d19f9271cf937b730acfe4d396b4f8326ceb215757c3a059efdcdcb633a8","sha512":"898ff80f48fe766608c9d8c7d538febed00f3fe818eb6d82d45dd5db8ed09f2c9737671c311af17547757c151baa1055a5f833bc63c5da7fd53f22b0f55da3ea","ssdeep":"384:BYNg7/SX3AzLBI5Cin1K6w5QHMlsVunk1S4D86dutzINz5VTvIMzM:BYyTwwzVqd1NpHSj0Smdutzkz5VjxzM","tlshash":"2292cfd36681c336f8bfdb3099d043a68696c32f735b8ada5c14866b9356490f24f34e","first_seen":"2025-08-04T10:50:33.59964Z","last_seen":"2026-03-30T20:45:37.259414Z","times_seen":10,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/games/maxwin/Mahjong-Wins-3.jpg","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/games/maxwin/Mahjong-Wins-3.jpg HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 34766\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":34766,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2024:11:03 17:11:32], baseline, precision 8, 200x200, components 3","md5":"8def7654af9703986801bfd2b1716229","sha1":"8f54678976a34057bcf2f999dc6019b3271ad6da","sha256":"02146a961d69126be2e946347a6658eec633196871d82bc654d37cc61b5c7f8c","sha512":"fff6a0af00072fb0a1fadf0fe66f56e9baa130e077a04159ea53d1f7800304eb2fc0c4f901715c0ae71c440c2482a3c316cf0e65804ee8e855593fa17df5c77b","ssdeep":"768:BYyubj+3oLC/QwcRKw8wBOGPRbKA7BtTiIKKgbnnq:BH4e/NcQw/BOCRbn1pKKSq","tlshash":"8af2e065eb738c48db3057b0a997e3d76ab1832cd243d4a5390d83187bb06f09e5f18a","first_seen":"2025-06-02T11:17:32.696613Z","last_seen":"2026-04-04T03:19:10.425816Z","times_seen":102,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/DEWA555.png","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/DEWA555.png HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 29 Mar 2026 03:52:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20733\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20733,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 96, 8-bit/color RGBA, non-interlaced","md5":"f40715e753961746687edd10753aff1e","sha1":"dab4796502e2df949253d2e57da995cd4bc9d44f","sha256":"9490744d063f568fa4f2fcd3a30aea37f66d18c0c84abc3fc651e6fde03f7f77","sha512":"dce347186816c44097a9320a4432f3cd90e27552939aefc1721f17044398cc68b9764301d6c082c937b23b5746d500a357973098a826dca554b9a2b4f6d6e18f","ssdeep":"384:y5VJfqNC/jnTu82Hd0Mjzg99cA5fb77w10M+Cuo80itMktWUC:aiuEHd0HJ01Xujzt8N","tlshash":"8d92d0efb9f1e133daf85934b6531454f7adb18d10b0aec4798252a40d0819eedb107b","first_seen":"2026-03-30T20:45:37.260504Z","last_seen":"2026-03-30T20:45:37.260504Z","times_seen":1,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":590,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/favicon.png","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:06.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/favicon.png HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 172326\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":172326,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"16f2eee544299bec8a59a5a10e128da9","sha1":"c6a654c69c06215ca2153790dd0483f250718f5f","sha256":"d3af5f0e9e3a446160e097e69c3dd1c8d4c861d99bd7bfdb9c90011b060544c0","sha512":"17e0c1a683fbfe62d55105034c511aef7e12160891e2aa469a5dd0875dc617c47e53620281705b56a5623d2cb59bdfac306c6155eb1ed97fbff30f17945b0808","ssdeep":"3072:FpasZRFEL6cT/KUVpC7QJ4yk5jn4IADD92oNfiIISdvA68UqnmRz:PasZTBcTH8UKyGjn4IADpNaINo68at","tlshash":"b4f3133beb3e7baf20ab0b536dd57a7714b622e1278d29194c04c100fb6ea51d1705ba","first_seen":"2026-03-30T20:45:37.262042Z","last_seen":"2026-03-30T20:45:37.262042Z","times_seen":1,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/games/jackpot/Fonzo's-Feline-Fortune.jpg","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/games/jackpot/Fonzo's-Feline-Fortune.jpg HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 32782\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":32782,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2025:01:06 11:11:28], baseline, precision 8, 200x200, components 3","md5":"2258c02a5b12fdfcd4faa2824363a994","sha1":"2d938d4a3c1de917c8e85628ae7b9bd08ef22035","sha256":"7e1607df193c8e8720bb67412350ad9c0b711f0021e626066863ce74e2f5662b","sha512":"c8ae617adf334130064eb0da4b2d9f0c6b6cf45d87f99c87a5574563e1f0e8b602e4a30422f79ff85ebccd7ddb96455a13c6e6895802c872fa9b2ff40d97351d","ssdeep":"768:BYywdYH2148RKuCO9w2h7mbEaU/fCevsVuj:B518RKqkbbWC+sw","tlshash":"d2e2e029af342d43dfeef67498fdf362e5526398870208a1346d958a3f65fb4ac0b141","first_seen":"2026-03-03T17:02:19.674034Z","last_seen":"2026-03-30T20:45:37.26341Z","times_seen":3,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/games/maxwin/Jackpot-Joker.jpg","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/games/maxwin/Jackpot-Joker.jpg HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 38424\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":38424,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2024:04:15 14:01:48], baseline, precision 8, 200x200, components 3","md5":"b8ff49eaf375f239414b1b7536ce9ec2","sha1":"563a54fa0f345a95aa755d503a58c1f18f6cdaa2","sha256":"9b61cfbd88f15320bb83e70d9fb1bee3891c9474dba3f0135cd67350a32e4cee","sha512":"072795a76b48cb9854cd1f7f8671af3ba4b6db8fa369fb1006377a6eba3aff89869613e0ce7b7037030c239a7b14559d5c0ed1431fb263a92bf565251199abe7","ssdeep":"768:BYydoysuiYDruy2MCTtepQvzbugozBa7uUCmcxJu12:BuDmruJLbkBa7u3m512","tlshash":"8b03df06564f9d02cff4857094f1eb5967b2ea9040863b7938ec85237b32af5dc1ea48","first_seen":"2026-03-03T17:02:19.716337Z","last_seen":"2026-03-30T20:45:37.264084Z","times_seen":3,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dewa555.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 22:14:21 GMT\r\nexpires: Sun, 28 Mar 2027 22:14:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nage: 167444\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-04-05T09:47:45.899309Z","times_seen":296111,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":66,"dns":1,"connect":7,"send":0,"wait":8,"receive":1,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-sidebar-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:44 GMT","end":"Mon, 01 Jun 2026 08:36:43 GMT"},"fingerprint":{"sha1":"67:A7:60:5D:C5:C4:DB:ED:0D:A1:70:F2:6C:0F:18:61:29:4A:D2:49","sha256":"8E:A9:A8:B3:90:65:71:66:2C:CD:33:92:74:7F:99:EC:5F:57:13:49:15:9F:6E:54:59:ED:22:72:3A:41:00:F0"}}},"request":{"raw":"GET /v0/amp-sidebar-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9647\r\ndate: Mon, 30 Mar 2026 20:45:05 GMT\r\nexpires: Mon, 30 Mar 2026 20:45:05 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"0756320ec9148a95\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31363,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31247)","md5":"b694f7ac7a2d25f27e3a5170934f767f","sha1":"25695ed09263529c3669752ca1c3165bf0bd5522","sha256":"a8233411b529c7deb0122e2adfc259fd12bcd1ca27551d064cdd900668b122fa","sha512":"5521f93daf0bf6a1e4c6559089dabb7529336e45b2fc984e2e0ab60126d7b26c6bc43b97d838ac114730847bf3c02f5f35c30c06dd16a209cc8ea1be37eee272","ssdeep":"384:QnXCVRcBmElj6eU6nWnxXsHfdujPJqSQybcmE0X3b6IZPLyEu5M8JSY7:QXC0lj6J4yI0b6IxLyEcMDY7","tlshash":"efe2c79cf292b0714693a4b580af550ea23b6555240b882cb06decc66d7ce8fb137f78","first_seen":"2026-03-18T14:43:08.917752Z","last_seen":"2026-04-05T09:19:37.196092Z","times_seen":123,"resource_available":true,"data":null}},"time_used":962,"timings":{"blocked":462,"dns":79,"connect":23,"send":0,"wait":21,"receive":1,"ssl":373},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/amb-engine-active.webp","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/amb-engine-active.webp HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:05 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3012\r\ndate: Mon, 30 Mar 2026 20:45:05 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3012,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fd88069e4c1f4bade57cab2d2b1309b4","sha1":"d2054729f778702387a814483b80c0c1c62a082b","sha256":"7e72ceec80924d1c4add7d0420a5a0d4977afd8d7d11ecb14f71902965901c4e","sha512":"df4e48b0471e47942b45dae065fe4fa036181017bfa1b7cccf033a0b371d2ca3c24ac6ec0fbbb8bfbc6595bdf1653860dbb84f2aae122bab87575ba19c47c6fc","ssdeep":"","tlshash":"af514ca904743e769010715451e9a322a2b87d41d5fa1c8fe5c4b99e311c0e717df627","first_seen":"2024-12-27T11:40:10.959827Z","last_seen":"2026-03-30T20:45:37.266163Z","times_seen":4,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/icon/icon-jackpot.svg","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/icon/icon-jackpot.svg HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:05 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 23783\r\ndate: Mon, 30 Mar 2026 20:45:05 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31905,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"524d091d4759569c313dd81aab7d521d","sha1":"95b068a7e8847a60803b33fd7b051292be42303a","sha256":"4609cea657d57c84eb55546dd797d3098185421efb86ef0cf25e3e8d1447655a","sha512":"3172c7104d69254d1c7b6e7c5ba7c82c6ae2a18312bc9531b8b0ee8756e3a554c94184f7a44bbb8cffb76795c2447111ae27500d426f0758d9bbee8355bfeca9","ssdeep":"768:1SiFxD6THNhWHpmolBwPP0KB2j75lcTrwyl/K:siD6TtheBGPpw7QA","tlshash":"f6e2e01fce8ea7ac8516426c303bfdea0dcc6e4d80487aedb9c1b5ab15a655140b2715","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-04-05T07:23:33.673021Z","times_seen":1401,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/home-slider.jpg","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /home-slider.jpg HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html\r\ncontent-length: 771\r\ndate: Mon, 30 Mar 2026 20:45:05 GMT\r\nserver: LiteSpeed\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nlocation: https://dewa555.net/\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":110367,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T09:47:05.247441Z","times_seen":13369813,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dewa555.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 02:12:26 GMT\r\nexpires: Sun, 28 Mar 2027 02:12:26 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nage: 239559\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-05T09:47:01.869043Z","times_seen":204405,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":133,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/games/jackpot/Starlight-Princess-Super.jpg","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/games/jackpot/Starlight-Princess-Super.jpg HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25575\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":25575,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"47df2f4cede54de7c212cbf31684961b","sha1":"871d4fcfc52867753ccc440b25f62427e518d2a5","sha256":"a71d3a4b4f378cf60ce60a22422bf54c8578caeb204adeda8863c30d6808c895","sha512":"a00928a7709b33d8f81484d0bda9d252c8636275da4da1b0c4df4ec832706f38552951b95ec8fd23dab4c73725d7ba6aa41ad13f8dfebbac4c315f81c362e6de","ssdeep":"384:BYNg7xOTtFnP3VIO4lTAz08cETLXnSbuIelRMGD1WCT0ND16P/u2Ohmz/GgB:BYyVOTjnPlcTQAKYuRt9M/SegB","tlshash":"e6b2e1edae47e7a5fd21c43891c02fe273e2273ae3a040c526e4ff00998c59f556e418","first_seen":"2025-12-20T05:15:42.683422Z","last_seen":"2026-04-04T19:11:33.953586Z","times_seen":8,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/icon/icon-gacor.svg","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/icon/icon-gacor.svg HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:05 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5154\r\ndate: Mon, 30 Mar 2026 20:45:05 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7663,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b9ac3698353188323aca1e72b0b415da","sha1":"c28c2c237808f3f960aa78f35880123679e14084","sha256":"f80d635418113fa7972b15027e670b2706ee2820163b62b2f27145f9073ac0b0","sha512":"7aa2bf1158e6546e9e8dd9784f7f67f95cab57d65d918b0598d781f26b5f973776929af9976112d7cf0d0bdb187dad6ea59bd15d126f0d7b2718dfe4802c8cc8","ssdeep":"192:1opYUslj6GuF9Tf9kLkAPEj18y2Ysi4My8O+:1oSlmNF9Tf99AEJaY348l","tlshash":"10f16c19a178ec2fdbf4817270a740546f1a5093f3b357c44ea203b38a0da55049aefc","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-04-05T07:23:33.671647Z","times_seen":1150,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/games/jackpot/Hot-Hot-Fruit.jpg","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/games/jackpot/Hot-Hot-Fruit.jpg HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33109\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33109,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.7 (Windows), datetime=2024:01:29 15:29:15], baseline, precision 8, 200x200, components 3","md5":"ec32ee09034917bf0ccc36d3e03295e7","sha1":"e45041b503b424f66ae18f78454cf34d05de71b7","sha256":"8fb0c6323a9da92f321cd0034ccfac934e0c878e50d360ff1ae8cd9062cc28f5","sha512":"4b181512b1b5f09d0dfe23732b41b9274a5b865ca3d7f3df067440855f038c202c3406b11b4ad9fdf91001d96229b5a7493a2e4b17af77b62faea6144cb24929","ssdeep":"768:BYyWa4vZ+VUJjITRuyNIck/2G4iaDqkZcuwuG5lMZCZEucf:ByaE+WjITRuyNIckZTaPdwnMZCZEucf","tlshash":"07e2d0221f222c88ced854bd19f3bf42eab1c391d633c6ab792d49657b40ab65e49181","first_seen":"2024-08-20T08:52:18.276631Z","last_seen":"2026-03-30T20:45:37.272701Z","times_seen":4,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/games/jackpot/Super-Golf-Drive.jpg","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/games/jackpot/Super-Golf-Drive.jpg HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15165\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":15165,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"3dd183977bbb3dc15d7b76e1f4461b7c","sha1":"b7114f1c94f1ac6e7afadfd76701bf498968536a","sha256":"b640147b99ded10662dba6dbf101470e63ff68627af6b9aae7b07a4560286dcc","sha512":"af2351c30a0723478e31d75f8ba79e3331dfbe8d937ba87541519d08ec443370fc469711785855ac0c671260b69dd28bcfe0fe9851f2981aa8c8b098fd331d66","ssdeep":"384:WOU1KFBqcJcYso3CHZnDlSodlfMS1rcP5PepVRnYvHbm:WOSKFBxKY5yH9DNdf+xe5c7m","tlshash":"8762c19fe99b1909e3c38d7b32776d60065887a7d641b9f36553cd308a50ab050dc8aa","first_seen":"2026-03-03T17:02:19.707437Z","last_seen":"2026-03-30T20:45:37.275781Z","times_seen":3,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/games/maxwin/Wukong-Black-Scatter.webp","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/games/maxwin/Wukong-Black-Scatter.webp HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48034\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":48034,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9b838cabeb7767209db1664f4751de6f","sha1":"559ce4a036951ac3f26db171019a3a62f68e70d5","sha256":"61ad8b7dd76238c118ebaff06225f30f6a25764592ed4a3f8cf98bb8dc3a3e04","sha512":"4f921ce1d310fcd07279358b6e86f7dceaa094434abb3cd20f52ba1db87684b84d36a55fec18de2c0d7d07f451cd7ca67f1f6cfef33d5be7fbb4c5efd52a651c","ssdeep":"768:M2BTzmIBpm5wq8c0+cROpO/8/WJ0apGEqus3cTN6qzexNhKxfcWKzo4NXjeq2FnL:NzmO2wq8c0cQpRqusvqq/wZc17hjBxPC","tlshash":"c023f21a4789129f5181f88fad6494390a28eafc83f942ed46a7647d6f32d206f0069f","first_seen":"2025-09-30T11:15:33.789281Z","last_seen":"2026-04-05T08:20:54.922182Z","times_seen":236,"resource_available":false,"data":null}},"time_used":628,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/games/populer/Boxing-King-Title-Match.jpg","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/games/populer/Boxing-King-Title-Match.jpg HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23532\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23532,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"9925ca46bf6067559f802b2aebe4fd78","sha1":"cd7edbfba41d2b01316466ea3a8dba83bf5efd42","sha256":"e134b6d0e904ebd86d979e991edc278b74c46c531fdb3f8ffa315a25ff390f68","sha512":"0029cb3f0c6e0ae08eecdf0ea07d75c01d2132184b49166f0ea655e512bed73b96789353ed6347d89622b19793025a854a25bad3a5cf15ddc2f9daac503a7a79","ssdeep":"384:BYNg7L8YbcDccqwLcJLRUhYnT2qfip0VDhKuwcrKp95xQBu3WTqZhcN1cI+GrUPr:BYyNo6FtwYTs6VD1zrKYrTqfy+1PXb","tlshash":"a1b2e1f29b18c7fef734d27894e9aef207c3601e92936e8509d44692069069dff06336","first_seen":"2026-03-03T17:02:19.703536Z","last_seen":"2026-03-30T20:45:37.27743Z","times_seen":3,"resource_available":false,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":625,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/games/populer/Gates-of-Pyroth.jpg","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:05.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/games/populer/Gates-of-Pyroth.jpg HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27835\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":27835,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"89d494e9e6b33272824b2aedb18a417e","sha1":"19efa16ee7def2b8c7c4f1e291b792d67da22d6d","sha256":"21e82828c830dd30c9e67f204bcdb45b9303035a4be21a9ce78048f956972ff5","sha512":"d4fc5964616ed84a1003860b38359f09f603f54a976dbda27311469e35773d1a56f06019ab569ff7f9f7b15c2237e3067785977dfe7af03bc7e834e8daf56e8e","ssdeep":"768:BYyin8q+yXqxsJQMkDIvPqF+MOT1cNakz23e:BPw2IHM7ay","tlshash":"9fc2d160fd5e42f2f9d89f749ce8bb4082c3a7a8a079b58690d071dd215eec543dc2d6","first_seen":"2026-03-03T17:02:19.708545Z","last_seen":"2026-03-30T20:45:37.279463Z","times_seen":3,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewa555.net/assets/images/favicon.png","fqdn":"dewa555.net","domain":"dewa555.net","tld":"net"},"ip":{"addr":"209.74.68.24","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewa555.net/","date":"2026-03-30T20:45:06.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewa555.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 06 Mar 2026 00:00:00 GMT","end":"Sat, 06 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:E7:59:52:7F:44:E7:32:99:86:0D:CC:B5:E9:9F:88:6E:3A:F9:25","sha256":"85:3C:F9:3B:C2:A1:A7:72:55:17:A9:FC:18:80:99:F0:0A:89:49:77:2E:A6:C9:86:D8:AA:00:79:3F:F7:4F:32"}}},"request":{"raw":"GET /assets/images/favicon.png HTTP/1.1\r\nHost: dewa555.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewa555.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 06 Apr 2026 20:45:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 04 Mar 2026 10:20:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 172326\r\ndate: Mon, 30 Mar 2026 20:45:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":172326,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"16f2eee544299bec8a59a5a10e128da9","sha1":"c6a654c69c06215ca2153790dd0483f250718f5f","sha256":"d3af5f0e9e3a446160e097e69c3dd1c8d4c861d99bd7bfdb9c90011b060544c0","sha512":"17e0c1a683fbfe62d55105034c511aef7e12160891e2aa469a5dd0875dc617c47e53620281705b56a5623d2cb59bdfac306c6155eb1ed97fbff30f17945b0808","ssdeep":"3072:FpasZRFEL6cT/KUVpC7QJ4yk5jn4IADD92oNfiIISdvA68UqnmRz:PasZTBcTH8UKyGjn4IADpNaINo68at","tlshash":"b4f3133beb3e7baf20ab0b536dd57a7714b622e1278d29194c04c100fb6ea51d1705ba","first_seen":"2026-03-30T20:45:37.262042Z","last_seen":"2026-03-30T20:45:37.262042Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"dewa555.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"dewa555.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}