{"report_id":"a4ca942f-b135-4a14-b297-f34ac6b345af","version":6,"status":"done","tags":[],"date":"2026-03-16T06:21:09Z","url":{"schema":"http","addr":"www.adidas138.org/","fqdn":"www.adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"adidas138.org/","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"title":"Adidas138 - Adidas 138 | Trik Profit Register Member Terpilih","dom":{"size":131702,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6883)","md5":"0086f6fa426c2d852401a036b95558af","sha1":"eaa23a813596ea1fc77ba39d326fc457698042d4","sha256":"8a90dd88b65119507bb862232b0e07c367823fff916947850c7561b7437be50a","sha512":"4b9e593bfa57d4ee5b8be0956b49a2025c23645ca1f336e3172eb15545b39fe524891199cf404b58444ceddc187d0b2c0550e400afee90831550c568c9fd8cbb","ssdeep":"1536:eZ5F4g5A4WR2vMK+tCZkdD5f/9hMYVVIKCFKebypc1mBeoYZbUoPeV:XCZkdCYVWKCFKEypcAn","tlshash":"69d3b607d5a2204d180391286be6bb6b3b78d443ca17dd1cbedd6784cf86a81ad7374e","dom_hash":"domhashf8b435ef3c040948269abf314de22c25","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.adidas138.org/","fqdn":"www.adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-20T06:21:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"www.adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"adidas138.org","ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":31,"request_count":31,"received_data":1979537,"sent_data":14322,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-15T22:16:12.279722Z","alert_count":0,"request_count":4,"received_data":34783,"sent_data":2144,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.ampproject.org","ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2015-08-31","domain_rank":3289,"first_seen":"2015-10-09T04:27:01Z","last_seen":"2026-03-09T07:52:40.780043Z","alert_count":0,"request_count":6,"received_data":411516,"sent_data":2643,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.adidas138.org","ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":110280,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-15T22:19:58.945817Z","alert_count":0,"request_count":1,"received_data":11479,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012601162341000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d1e1939a681e26ad7bac3e1bc7a4698","sha1":"1b6b404001ca244b6617aab982989604eb5db41b","sha256":"32a998421e9461bc53f942def0e915f0c7100cd4db2e516221bd443494147631","sha512":"af0ab1fedb33087a7bf24b01fdf1e1d7588e518104c563e448d68d0a4fed2c7a813f98e567530ba239e574abfeafdc4886b5e99d531ff14a7e075dff61f19008","ssdeep":"96:GKoAosPGpV3yMDc0jGAM+G0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:GKqswV3yv0jGAFCPX/tqKyWp4M0rDTI","tlshash":"0af196dc7ac2b83a5757b4b780af414fa63bb94624ad9120d120f0d83cb995ed633e5c","size":7798,"data":"","first_seen":"2026-01-27T21:42:06.36181Z","last_seen":"2026-03-18T14:43:08.908491Z","times_seen":2151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-sidebar-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b44bcbd9902a6a481f2e8fccdc72e0e0","sha1":"80a00b7c5a2f6c85a8e5e35a25a7cac53884397b","sha256":"364dc811bd3548aa75b0c0474fb10051817891a60f094c64f74ba5a98323bc59","sha512":"f1054575e0664808773515df02a5e1bc9cc6a5c69bd9838ddb2734c0966fece8fae6db72d14c5ba147fbb63ff2be22b60b0b24cac1d471fbe712e18f5e868d2d","ssdeep":"384:TnXCVRcBmEljVOL6DpbaGCF7YQ+CTvhsvuNE/h9puKL5Et5MfaWrFWZuz7:TXC0ljCjTE/vRL5EfMfaWr7z7","tlshash":"2ee2c89cf292b0714697a0b180bf450aa23ba555641b842cb05decc76d78e5ab237f7c","size":31363,"data":"","first_seen":"2026-01-27T21:42:06.364387Z","last_seen":"2026-03-17T16:27:48.036454Z","times_seen":197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ff91886e860e4619d05516e8f995ac9","sha1":"56468dd46f28eede1ba8d02e853f704880f2f6af","sha256":"40f44e561cd75242d279c273a68619979a6fefc12cebd9b45852569f0f376032","sha512":"75762daad99642e3ff371277cde27363a8cea7589bfa825eed5a17ca943a1a8c67c49c574797e3ec43cb9f0b70fa2b03db8b5ebe00e01124036d9cc1455dafba","ssdeep":"384:HCXUpS23O0bbj36DTbaGCF7sQY8EvEtjWHF4w5PAyEXaE5GOLyawhrys15:HCXUVOU2vN5tmaEhLyawhrys15","tlshash":"1dc2939df282b47542a7e0b5507f860ba23ba058644e442cf42de9e27db8d4a7137f7c","size":26664,"data":"","first_seen":"2026-01-27T21:50:45.479821Z","last_seen":"2026-03-17T16:27:48.019524Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-carousel-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"518b01ada964654afbaa2627e460f254","sha1":"48632703b7c70ade62fc92de93e80f02e0e992fa","sha256":"b4a65fac9208c28aa476e2c286a628a137707461b53c0ce42d40d8b83e357e9a","sha512":"bd7b07d62237886b5e48f1ddb58df6aa7b74aabde300c44d4dbbe0738bb8083f799c6b1eb10dc81a5ae99595a5967b15a2d49195bf0763398083bbfab297f5ef","ssdeep":"768:BuCdWBuHV4qVy2STUSIQ/jkZ9PmTSnSba9La+0:B2unY3Ht/eNj01","tlshash":"3b03b5d8b382b43d4697a174406f110ee23fa919640a452cf1abddc5bebc99a2137f3d","size":38737,"data":"","first_seen":"2026-01-27T21:50:45.489197Z","last_seen":"2026-03-17T16:27:48.018269Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"de93c62fe8d520d5f20d3a375921f388","sha1":"ecc3eb0c77b12d60831c1f456bad0302b4d5db83","sha256":"07443ee9c85233c09c22c0668278316d8d4c25b7a5af83eba6ac761f30b75dff","sha512":"ea341717b7f75186720b4a3aab7f653eebeafb92ee328fc9fb2b2eee0365e201b11353a0f1d0fd5c1c8f8c06a134626f38b4f3375513675a9d1fa78ee065c156","ssdeep":"6144:HoUwkmOu6CFmZZoS2/VdK/HWL1Uqb9W9z:IlLWdYeW5Uqb9Gz","tlshash":"6154949db296b0724793b075803f150ae33ba855240a812cf56de9d67cbcd8aa137f7c","size":284617,"data":"","first_seen":"2026-01-27T21:42:06.365435Z","last_seen":"2026-03-17T21:09:47.691036Z","times_seen":2185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012601162341000/v0/amp-loader-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a4d82a5fcbe799aa3cd604d0add90a","sha1":"5614c8c0cb0b1ea9f6252f9a1c0465d68fad49c4","sha256":"28e18a22a127994816624a5d8843978ff13ec874e7bb6c3ec57d236fa85864f8","sha512":"f5e8c8ddfd89af0765afc670f3e2e847ce78e9a1f7bf0c75288d541f4445c02246b0da7b8a8a25a6d2aba28c72d671416108d80adc3404dfd2bd9ee9a3fc4a8a","ssdeep":"192:EfQHMOgzKBbnnRrVGOoPFU6rO2tHrbLvANHzMb5F4g5A4WR2vN:u0g2BbnnHWbLvARzMb5F4g5A4WR2vN","tlshash":"4d42a364a54ba2ac530341b484fab906757ecd4fb8104035f0118edecf99f48bd7ba6e","size":12715,"data":"","first_seen":"2026-01-27T21:42:06.359185Z","last_seen":"2026-03-18T14:43:08.891553Z","times_seen":1620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:47.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 16 Mar 2026 06:20:47 GMT\r\ndate: Mon, 16 Mar 2026 06:20:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10793,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"80df91dcfc8560910aca9bdd91a1e7d0","sha1":"2949de02fc38469258987e9b847a70a9cff1a21c","sha256":"0552ee50f635535685ba2713af81fa081791d7705baa9cdb3c5d1f463aa0a228","sha512":"65cbf1a5ff0d2e099211a39ed5128c8a95587b42dc854f30ffec1fc82e658911808709e5300319b495ec69bed73670e5c91404feb94fda4e7315b9b79ec62402","ssdeep":"192:+pspOlpXHaedhHdPgKQcXr3lVwa3RzJ/apsqiazk:+mkX","tlshash":"aa22add1087be114ab835cc123ce7d36ee1e9255b850e5786bfd0c98adabc254372b2d","first_seen":"2025-09-17T11:27:36.910597Z","last_seen":"2026-04-05T12:53:54.79244Z","times_seen":4640,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":79,"dns":0,"connect":8,"send":0,"wait":22,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/siam-engine-active.webp","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:47.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/siam-engine-active.webp HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:47 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2638\r\ndate: Mon, 16 Mar 2026 06:20:47 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2638,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"50ecd649e5d2884f78d3c707b4c2d4e2","sha1":"8f10fde7bd67196a381f2817ab2380020ea11561","sha256":"f5b298ff90bec28afe818f980eed433c9e2bcaa499ffd0b9ae23adb38a4171bb","sha512":"b78120e7fccdaf4848c11cbc0376b814cb4fd7fdb4dd8697be785eca4da9345dc5f23896860add1c7a364d5ceb3d26fb7656c5d4ecbb3a15a62c538c4af47f6a","ssdeep":"","tlshash":"d5513b83a14e60173d5bda0f1c7c411d5ed7011c47c2f82062afacaa4eb902a6de7d9f","first_seen":"2026-03-14T02:32:22.206389Z","last_seen":"2026-03-16T06:21:15.869785Z","times_seen":2,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:47.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://adidas138.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:26:59 GMT\r\nexpires: Mon, 15 Mar 2027 05:26:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 89629\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-05T14:48:15.129875Z","times_seen":193431,"resource_available":false,"data":null}},"time_used":1529,"timings":{"blocked":756,"dns":1,"connect":7,"send":0,"wait":10,"receive":1,"ssl":751},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:47.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://adidas138.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 07:02:38 GMT\r\nexpires: Sun, 14 Mar 2027 07:02:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 170290\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-05T14:48:15.082698Z","times_seen":204590,"resource_available":false,"data":null}},"time_used":1549,"timings":{"blocked":768,"dns":3,"connect":21,"send":0,"wait":9,"receive":1,"ssl":742},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/games/jackpot/mahjong-magic.webp","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/games/jackpot/mahjong-magic.webp HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:48 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 67046\r\ndate: Mon, 16 Mar 2026 06:20:48 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":67046,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ba81fa66974c944ed2bad9433d40109","sha1":"91eaea0a7e3e2f7e74a46e5528ea3954c816edea","sha256":"8b6827e88529e36f25484c237aa2dc2c8f2b71c6af94a9732bfb8e0174118961","sha512":"a2fc564c959dc62ed010f9e5ac94ba2ae0521ec30473491a3284395b788a553875a592c44bedc503db81a2d86399af17a30bed7441f888e49b08d72e2ec5615b","ssdeep":"1536:sG5YB2j6Pktmysm+HRdFYCONyhsqBbejcAoO6To+3Kt+:F48+xdTRBpejJovToqKA","tlshash":"416312791e1ee47e1c03512559afda27d8ec45e73bfa8801c78b16f22b061da60770ee","first_seen":"2026-02-01T15:05:23.43523Z","last_seen":"2026-04-05T05:12:25.275551Z","times_seen":14,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://adidas138.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 11 Mar 2026 20:43:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13449\r\ndate: Mon, 16 Mar 2026 06:20:48 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":110061,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"512fdff74b77eba98d2d249989c36b0d","sha1":"0968877aa6952620bf1349523c577d0507255942","sha256":"8fbc8aba14ed82bd09d4e82a54f64e3806ba0d0d0e30f7c271601636639fd74f","sha512":"f3d0f5c11258da22eb32993b2cec037a6a3b1c2e47080ae8cf861d277fd4a50c2e9d2d30fe67ccf2ddb87882e17a192e388b24533df24ff9a16e93c72ed0ef57","ssdeep":"768:XVzADgJXGT+JPkS4YDhf/SuvUAIpvswIFCkv8QLrmTv/wilQkj+LY:egIT+VvUAovswIFCkv8QL4v/wil9+LY","tlshash":"6ab36216c942204a58339369dfb29b4efb965153c602c55d7ffda3828fb2940c5a3f8e","first_seen":"2026-03-16T06:21:15.876002Z","last_seen":"2026-03-16T06:21:15.876002Z","times_seen":1,"resource_available":true,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/games/jackpot/jungle-bang-bang.webp","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/games/jackpot/jungle-bang-bang.webp HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:48 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 71984\r\ndate: Mon, 16 Mar 2026 06:20:48 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":71984,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a5ad58bddcc4e9bbf1d43ac8a706b37","sha1":"8b459f750e133fa0825a8b9f317daa2cb63b06a6","sha256":"5594fe56baa2972910c8bb549ecf909b1fa3c8c9a1831e5862d0e9a87407b416","sha512":"bb4680b173bd1e9a5de1533000545d109568901e22f5560f8c6e4907b19c6a81a788200d79833dd93a6162525656385f19cea37e8101e807bafd7192abdaa8fd","ssdeep":"1536:lv5wmzNS/Ia1VSbF9tLXofY/9WlCf6hmmD/kHQbPkWg:HwwNSlVhfYlWQf6hdD8wIt","tlshash":"a26302cee2e82c4595f00899da2938f760234ffd25fee6c5c5095924ac8fcb65d0ca97","first_seen":"2026-01-10T10:25:03.067716Z","last_seen":"2026-04-04T09:41:50.9403Z","times_seen":34,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/games/viral/Mahjong-Ways.webp","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/games/viral/Mahjong-Ways.webp HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:48 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28688\r\ndate: Mon, 16 Mar 2026 06:20:48 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":28688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"af1d53a0e673ee9b8247ab093ebd6152","sha1":"7ecb269959c1efc583f9351691b6ea6ea4d548ca","sha256":"a6cb36e0f9dd285032e9e19b2eebbcd66369743313562a4c72233ba70227780b","sha512":"585e6046c0811e726f347b546c29f106b10e6d462dfc2bd12dc0d94d9a5bbba142a8e59d255ea8b69343e59c4b13bbadaffc74925eb019767d2779454af4b55a","ssdeep":"768:wmj5ehJdU2lNpqKshQ8JUnmcxygwuujBt:wOmnU2fpqKqQ8enTxuFBt","tlshash":"8ed2e1361ff59fc833b5b45dedd4b1b80ad6e4324461a067df76141ab4d28e3bc99044","first_seen":"2023-11-06T12:43:48Z","last_seen":"2026-04-05T13:11:55.794087Z","times_seen":324,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":661,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/games/favorit/Mahjong-Wins-2.jpg","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/games/favorit/Mahjong-Wins-2.jpg HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33266\r\ndate: Mon, 16 Mar 2026 06:20:48 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":33266,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2024:10:09 14:02:28], baseline, precision 8, 200x200, components 3","md5":"02238139fd1b40ae6bf29c55713ed1a9","sha1":"eb3681c9a8084a5eaea83d0855d07179b50d7832","sha256":"f0cd479240a6d323c2bd347c4391f29ceffcd8d44f6c624e2511b637ab7e5191","sha512":"311eed51679bbdc4774ba63f1c949902a3e1ab25a8401c321f65d37aef769bcf2685a695df706ab91f54e5043a9281bc2bb3305016095c5e87cf3ccd211af759","ssdeep":"768:BYybo4W17rtlx5hBUxbPdWn5iGkZCkxD84Vd:Boh17rtlNBcbc5iUkDd","tlshash":"9ee2d095f21b9e24ffd1a6305ea9bf54a6e2e6416f46126e34ef57197b20cb0cc09013","first_seen":"2025-04-16T23:04:51.850194Z","last_seen":"2026-03-30T20:45:37.256554Z","times_seen":57,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":670,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012601162341000/v0/amp-loader-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:37:14 GMT","end":"Mon, 27 Apr 2026 08:37:13 GMT"},"fingerprint":{"sha1":"1F:80:E1:44:12:8A:FC:40:29:3F:66:7D:B2:CD:6B:37:58:78:5F:62","sha256":"EF:BD:CB:97:0F:61:30:70:B3:64:A7:8B:27:68:D2:CE:8E:07:02:66:F9:1E:4F:FA:32:0C:8A:22:AD:45:CB:67"}}},"request":{"raw":"GET /rtv/012601162341000/v0/amp-loader-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://adidas138.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 3927\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 04:58:55 GMT\r\nexpires: Mon, 15 Mar 2027 04:58:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 91313\r\netag: \"f118bd7ec62de08d\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12715,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12600)","md5":"88a4d82a5fcbe799aa3cd604d0add90a","sha1":"5614c8c0cb0b1ea9f6252f9a1c0465d68fad49c4","sha256":"28e18a22a127994816624a5d8843978ff13ec874e7bb6c3ec57d236fa85864f8","sha512":"f5e8c8ddfd89af0765afc670f3e2e847ce78e9a1f7bf0c75288d541f4445c02246b0da7b8a8a25a6d2aba28c72d671416108d80adc3404dfd2bd9ee9a3fc4a8a","ssdeep":"192:EfQHMOgzKBbnnRrVGOoPFU6rO2tHrbLvANHzMb5F4g5A4WR2vN:u0g2BbnnHWbLvARzMb5F4g5A4WR2vN","tlshash":"4d42a364a54ba2ac530341b484fab906757ecd4fb8104035f0118edecf99f48bd7ba6e","first_seen":"2026-01-27T21:42:06.359185Z","last_seen":"2026-03-18T14:43:08.891553Z","times_seen":1620,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":90,"dns":11,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/Adidas138.png","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/Adidas138.png HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Mar 2026 20:12:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 75015\r\ndate: Mon, 16 Mar 2026 06:20:48 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":75015,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 745 x 238, 8-bit/color RGBA, non-interlaced","md5":"b1d44d9286cfe4ae6c8d250cb74106e0","sha1":"5511eb45c6538222c5b84c2b7d1bbc629e9943ad","sha256":"a651953fe34748552c6611703adebdfc98366f89f4481392f1732a1b2c9f5c91","sha512":"af14588173e79296917da89da3090cbfed83fed4534f23744fe7e8d099c2895034c523d0d2848e06bc33c7101cddea89459824ecd90ee1d70be25d88fc90bdfc","ssdeep":"1536:5OXZQi5PZ17+PxfrdU2djEbNKD0s1m7D5ebx06EonQn1O0ex:YLZWfr22N5m35ebx2oWo","tlshash":"4c7302f94ebadcd1650ab596c6f0a277eec07683b4746f2ad075f34ec34b0650c069a4","first_seen":"2026-03-16T06:21:15.885635Z","last_seen":"2026-03-16T06:21:15.885635Z","times_seen":1,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":158,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/icon/news.png","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/icon/news.png HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 336\r\ndate: Mon, 16 Mar 2026 06:20:48 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":336,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 23, 8-bit/color RGBA, non-interlaced","md5":"a19ecddf9a2433247df17487b78cde70","sha1":"06aa60570d2098b88c82019afe8faa9106a8d457","sha256":"2178139d950466efdddf2e72fdb03f3b8b508d2468dd227813142dd0955f9a9f","sha512":"1f040f0027c49e3bd6c8a5c15e0ef7d2ef6115aa00107ac1fa4df9ba6dce3599dfb82b5e5b96b11467fb0791b521676e65a3cf5369b8619a4b1041a436bb8719","ssdeep":"","tlshash":"6ae028e4d71e85d4d51e0f67de95f11decf5411459ab3545064cd57b0bc00c4c4c8300","first_seen":"2023-08-15T16:00:28Z","last_seen":"2026-03-30T20:45:37.24019Z","times_seen":6,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/games/favorit/Slot88-Rush.jpg","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/games/favorit/Slot88-Rush.jpg HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 104429\r\ndate: Mon, 16 Mar 2026 06:20:48 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":104429,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2025:09:02 11:05:07], progressive, precision 8, 200x200, components 3","md5":"3bc29bcd0863ede121e1fd5595aa2766","sha1":"3bf5795705e52a6293856b6b397e9d6f32f77232","sha256":"e218a70757b74be02f12d6624e4500825a24f84bca9e4df5899f2c11b49014a8","sha512":"cfa0535f604517f4243cb9dc7d75a7ef221eb01f7c1c6992968f34558173e4d5ed3de0e8d3c3c67823e2f2bbc7ac94e553b098a59c0b4107c2ad6ccfeeccc3ae","ssdeep":"1536:1vKv9s4uJsyU+fG+ut04ERaTKh0dvs++mU2zl6YotdFODQ3MIRai:zsyU+f2t04vbXU6lZW7OD+PIi","tlshash":"2fa3017daabb6f51f9e0b13164e48506a720fbe28a53a391b44dfc0177742828fbd413","first_seen":"2026-03-14T02:32:22.212792Z","last_seen":"2026-03-16T06:21:15.889071Z","times_seen":2,"resource_available":false,"data":null}},"time_used":835,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/promosi-slot-games.jpg","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/promosi-slot-games.jpg HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 11 Mar 2026 14:06:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 264111\r\ndate: Mon, 16 Mar 2026 06:20:48 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":264111,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x613, components 3","md5":"39f13f952c44bfbbd15855aa8d1b8e3b","sha1":"1d3a3240f7e1180067d582396f64efaf1b24ec0d","sha256":"eec505d692d5d7984e4bb6c82be7326f088ba6ec0f7ba2e6aaf4e8941e7cec76","sha512":"8f37f1667e59edbf408bee544024a3c3f4237b82b2c84f9610969857fa06a654b31283be0529b74266228dba7c97a2755fd7d3b2ee32fb33edb238c9ea58208e","ssdeep":"6144:srWVEUa6t3zyyuGV4siqWuWX7vlNCV1LUhxeDvRlHXuJ1hhmopW:fEU1t3NtV4siqtW5w/UhxezXuTml","tlshash":"dc442292f74a93b70b76112831f28d2743fe7172f92582ae15bda15d0e8578048b4efe","first_seen":"2026-03-16T06:21:15.891512Z","last_seen":"2026-03-16T06:21:15.891512Z","times_seen":1,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":540,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.adidas138.org/","fqdn":"www.adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-16T06:20:46.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncontent-type: text/html\r\ncontent-length: 795\r\ndate: Mon, 16 Mar 2026 06:20:46 GMT\r\nserver: LiteSpeed\r\nlocation: https://adidas138.org/\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":110061,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":1437,"timings":{"blocked":634,"dns":36,"connect":168,"send":0,"wait":169,"receive":0,"ssl":428},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"www.adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:47.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://adidas138.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Mar 2026 02:03:45 GMT\r\nexpires: Fri, 12 Mar 2027 02:03:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 361023\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-04-05T14:38:59.221005Z","times_seen":296285,"resource_available":false,"data":null}},"time_used":1531,"timings":{"blocked":760,"dns":5,"connect":8,"send":0,"wait":13,"receive":3,"ssl":739},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/games/viral/Nexus-Outsourced.webp","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/games/viral/Nexus-Outsourced.webp HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:48 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33738\r\ndate: Mon, 16 Mar 2026 06:20:48 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33738,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"61c703cec49083fd37fc37ed63bbf6b7","sha1":"34210e4c002efdf615625f9fbc9bec3b5b669107","sha256":"03e24dd21c28ce27d3a4e527fd42ed53e56e31e4096062607b22606242ddb7be","sha512":"708fec5cd4ef6a831d6728d8e34f58cac814f9f6c4ddbb49bd08fa3f6594220046e32c131fb22e7b662f12b584271c0b2594a7344a9e8f9fe720c57faeaa522b","ssdeep":"768:1FYyy97nzPQWuuyZCTeK42lgUKU4XwtYZMz6RkTsgoVYH6ya:H0zP1u1CTCYgUKU4XY6RkTIVmHa","tlshash":"7ce2e1cca4619772e6b8b3b851f50bee6375607dd67197f62c82903223b46c286ce1d8","first_seen":"2026-01-28T07:33:51.289662Z","last_seen":"2026-03-16T06:21:15.895535Z","times_seen":4,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":661,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/games/favorit/King-Of-Spears.jpg","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/games/favorit/King-Of-Spears.jpg HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24078\r\ndate: Mon, 16 Mar 2026 06:20:48 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":24078,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"49bf597398876d37690dd1130924b66b","sha1":"6042d5f7b77bfee65cb7c45c37deb1e10bae6099","sha256":"f2a7c8afbd906296bd62a29496fcba784e8eca10158e376e570fbffd6445d93b","sha512":"9e04d1023b20edc911fff88f5e5dc643436e9b5a91dcb5770c7e8900ba1bff3c9710ebb29ff9f3bfa4c028842abc545f3990399a15b68835598caf6511d0247a","ssdeep":"384:BYNg72Fpl1JJCmNA+25y9R0WEgDvAXwr7ozW4q3eb4KWRZrXsby3ocID/XZz0cDB:BYyyFpl1X8lETDEgDvmwrZ4TUds+L4XL","tlshash":"d9b2e0296fbb67d3f9e1ce3450aa7dca53dbb025f380218d23d4ca6850815c0ca631be","first_seen":"2026-03-14T02:32:22.20793Z","last_seen":"2026-03-16T17:02:59.612769Z","times_seen":3,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":668,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/games/viral/Wild-Bounty-Showdown.webp","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/games/viral/Wild-Bounty-Showdown.webp HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:48 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10658\r\ndate: Mon, 16 Mar 2026 06:20:48 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":10658,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7800b3dd65b012e5a998c3f4e2551649","sha1":"a8a8d9438fc391fe55aa3a878ae515f2c5076980","sha256":"1db58d5601dd8d3b42dec6c2a01eb97cc812efb938b5b6045453a2fb84d383af","sha512":"d66c8b299d8d0d5fa06742a9eff9e8c4e9f4a6c316a4a5ee81ca5e02a0f1401b87d512c090884096123667554743fbddb33a78b83c89c29cd227ce4638dde2cf","ssdeep":"192:l8M3mgHPWbCB0EWae68rC3hxS4jr7CtJ6id/xZP+bRmElxMUd4s:eaB0l6P3hxS4jCr6E/xKL+KN","tlshash":"f422d007ad40547194ae3363ce78e98757e0260962cd7fb1eab2e8b41d27212d5e60e1","first_seen":"2024-04-29T04:54:20Z","last_seen":"2026-04-05T13:11:55.782163Z","times_seen":331,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:47.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:37:14 GMT","end":"Mon, 27 Apr 2026 08:37:13 GMT"},"fingerprint":{"sha1":"1F:80:E1:44:12:8A:FC:40:29:3F:66:7D:B2:CD:6B:37:58:78:5F:62","sha256":"EF:BD:CB:97:0F:61:30:70:B3:64:A7:8B:27:68:D2:CE:8E:07:02:66:F9:1E:4F:FA:32:0C:8A:22:AD:45:CB:67"}}},"request":{"raw":"GET /v0.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 73111\r\ndate: Mon, 16 Mar 2026 06:20:47 GMT\r\nexpires: Mon, 16 Mar 2026 06:20:47 GMT\r\ncache-control: private, max-age=3000, stale-while-revalidate=1206600\r\netag: \"cbf8b0320ab789fb\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":284617,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64627)","md5":"de93c62fe8d520d5f20d3a375921f388","sha1":"ecc3eb0c77b12d60831c1f456bad0302b4d5db83","sha256":"07443ee9c85233c09c22c0668278316d8d4c25b7a5af83eba6ac761f30b75dff","sha512":"ea341717b7f75186720b4a3aab7f653eebeafb92ee328fc9fb2b2eee0365e201b11353a0f1d0fd5c1c8f8c06a134626f38b4f3375513675a9d1fa78ee065c156","ssdeep":"6144:HoUwkmOu6CFmZZoS2/VdK/HWL1Uqb9W9z:IlLWdYeW5Uqb9Gz","tlshash":"6154949db296b0724793b075803f150ae33ba855240a812cf56de9d67cbcd8aa137f7c","first_seen":"2026-01-27T21:42:06.365435Z","last_seen":"2026-03-17T21:09:47.691036Z","times_seen":2185,"resource_available":true,"data":null}},"time_used":408,"timings":{"blocked":152,"dns":1,"connect":29,"send":0,"wait":61,"receive":32,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:47.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:37:14 GMT","end":"Mon, 27 Apr 2026 08:37:13 GMT"},"fingerprint":{"sha1":"1F:80:E1:44:12:8A:FC:40:29:3F:66:7D:B2:CD:6B:37:58:78:5F:62","sha256":"EF:BD:CB:97:0F:61:30:70:B3:64:A7:8B:27:68:D2:CE:8E:07:02:66:F9:1E:4F:FA:32:0C:8A:22:AD:45:CB:67"}}},"request":{"raw":"GET /v0/amp-lightbox-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8540\r\ndate: Mon, 16 Mar 2026 06:20:47 GMT\r\nexpires: Mon, 16 Mar 2026 06:20:47 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"5dd7131a95c6cb40\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26664,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (26547)","md5":"5ff91886e860e4619d05516e8f995ac9","sha1":"56468dd46f28eede1ba8d02e853f704880f2f6af","sha256":"40f44e561cd75242d279c273a68619979a6fefc12cebd9b45852569f0f376032","sha512":"75762daad99642e3ff371277cde27363a8cea7589bfa825eed5a17ca943a1a8c67c49c574797e3ec43cb9f0b70fa2b03db8b5ebe00e01124036d9cc1455dafba","ssdeep":"384:HCXUpS23O0bbj36DTbaGCF7sQY8EvEtjWHF4w5PAyEXaE5GOLyawhrys15:HCXUVOU2vN5tmaEhLyawhrys15","tlshash":"1dc2939df282b47542a7e0b5507f860ba23ba058644e442cf42de9e27db8d4a7137f7c","first_seen":"2026-01-27T21:50:45.479821Z","last_seen":"2026-03-17T16:27:48.019524Z","times_seen":81,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":141,"dns":0,"connect":32,"send":0,"wait":40,"receive":4,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/icon/icon-gacor.svg","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:47.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/icon/icon-gacor.svg HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5154\r\ndate: Mon, 16 Mar 2026 06:20:47 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7663,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b9ac3698353188323aca1e72b0b415da","sha1":"c28c2c237808f3f960aa78f35880123679e14084","sha256":"f80d635418113fa7972b15027e670b2706ee2820163b62b2f27145f9073ac0b0","sha512":"7aa2bf1158e6546e9e8dd9784f7f67f95cab57d65d918b0598d781f26b5f973776929af9976112d7cf0d0bdb187dad6ea59bd15d126f0d7b2718dfe4802c8cc8","ssdeep":"192:1opYUslj6GuF9Tf9kLkAPEj18y2Ysi4My8O+:1oSlmNF9Tf99AEJaY348l","tlshash":"10f16c19a178ec2fdbf4817270a740546f1a5093f3b357c44ea203b38a0da55049aefc","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-04-05T13:09:33.522207Z","times_seen":1152,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/icon/icon-populer.svg","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:47.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/icon/icon-populer.svg HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 43234\r\ndate: Mon, 16 Mar 2026 06:20:47 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":57328,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f8f5f25769046146ae42b17a41c0a16a","sha1":"80e7bba523210c58296f8de4a6fa6a22e913382f","sha256":"dafd7d97d8675bb8ea10eede4680abba88a04c54242a3333a291d66dc91c6e27","sha512":"fbc4ffe351d868e0bc7742724578a558932d9f17c423039657c3150f3adae2e0c5f2dcc3559e94e5d4349e24e8cab31e708cfd982b5ee5419455db9802ad9b87","ssdeep":"1536:JWAHKFFqtSQd1JZjfknvKi05k1QnwqR1FmRQv+qP:JWAyYtS21JVfWXLi1IQvNP","tlshash":"e743f1423f407f7c4976d289916cd15fec26a88f6580ab5f7ef38895b27e6080ca50ad","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-04-05T13:09:33.553768Z","times_seen":1157,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/icon/icon-jackpot.svg","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:47.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/icon/icon-jackpot.svg HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 23783\r\ndate: Mon, 16 Mar 2026 06:20:47 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31905,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"524d091d4759569c313dd81aab7d521d","sha1":"95b068a7e8847a60803b33fd7b051292be42303a","sha256":"4609cea657d57c84eb55546dd797d3098185421efb86ef0cf25e3e8d1447655a","sha512":"3172c7104d69254d1c7b6e7c5ba7c82c6ae2a18312bc9531b8b0ee8756e3a554c94184f7a44bbb8cffb76795c2447111ae27500d426f0758d9bbee8355bfeca9","ssdeep":"768:1SiFxD6THNhWHpmolBwPP0KB2j75lcTrwyl/K:siD6TtheBGPpw7QA","tlshash":"f6e2e01fce8ea7ac8516426c303bfdea0dcc6e4d80487aedb9c1b5ab15a655140b2715","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-04-05T13:09:33.5683Z","times_seen":1403,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/jackpot.gif","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/jackpot.gif HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:48 GMT\r\ncontent-type: image/gif\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 419803\r\ndate: Mon, 16 Mar 2026 06:20:48 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":419803,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 700 x 102","md5":"dd20d4ce62410a9463c37d4586ab2a13","sha1":"36673ddbbb27a5638f026ebf7a55d39d4bdae821","sha256":"7997d7170df421a6cb0d205a34b7ab521ce2bd1131f3fcdd257a01989a072736","sha512":"ab86fc5a7cef2a4307f6894a9a4730113a0ba4af005f61fff168c7510d3017cfb72dda9760fa60039147904798ef3e6f32c4a2f73e0540f94c835ab2b1a66cf5","ssdeep":"6144:zIaRCUQYXsa16SR2GRJWSoyZRBUmBC8VXQnEsTzFdsIndEotUXbGltUrGNWz9yiA:MlJar2qJ2yZRVBZQnE0SoqrG4rkWEG/W","tlshash":"ab94239f58a8cb13b83fbed04f4724157d8e4de9c91359b6746aba4c7a0906d12f2f08","first_seen":"2025-07-19T10:48:28.810134Z","last_seen":"2026-03-16T06:21:15.903221Z","times_seen":3,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":206,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012601162341000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:37:14 GMT","end":"Mon, 27 Apr 2026 08:37:13 GMT"},"fingerprint":{"sha1":"1F:80:E1:44:12:8A:FC:40:29:3F:66:7D:B2:CD:6B:37:58:78:5F:62","sha256":"EF:BD:CB:97:0F:61:30:70:B3:64:A7:8B:27:68:D2:CE:8E:07:02:66:F9:1E:4F:FA:32:0C:8A:22:AD:45:CB:67"}}},"request":{"raw":"GET /rtv/012601162341000/v0/amp-auto-lightbox-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://adidas138.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 2965\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 10 Mar 2026 19:24:38 GMT\r\nexpires: Wed, 10 Mar 2027 19:24:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 471370\r\netag: \"bcfe0d3a461d36bf\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7798,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7676)","md5":"8d1e1939a681e26ad7bac3e1bc7a4698","sha1":"1b6b404001ca244b6617aab982989604eb5db41b","sha256":"32a998421e9461bc53f942def0e915f0c7100cd4db2e516221bd443494147631","sha512":"af0ab1fedb33087a7bf24b01fdf1e1d7588e518104c563e448d68d0a4fed2c7a813f98e567530ba239e574abfeafdc4886b5e99d531ff14a7e075dff61f19008","ssdeep":"96:GKoAosPGpV3yMDc0jGAM+G0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:GKqswV3yv0jGAFCPX/tqKyWp4M0rDTI","tlshash":"0af196dc7ac2b83a5757b4b780af414fa63bb94624ad9120d120f0d83cb995ed633e5c","first_seen":"2026-01-27T21:42:06.36181Z","last_seen":"2026-03-18T14:43:08.908491Z","times_seen":2151,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/favicon.jpg","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:49.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/favicon.jpg HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28541\r\ndate: Mon, 16 Mar 2026 06:20:49 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28541,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 192x192, components 3","md5":"6dd7c9955f8a7220b8cb55a4e4b997a2","sha1":"d97056ce700d848912245675e5608f8df9537a77","sha256":"d91d8071c4583efc4085faa4b2bfd810ad2e00efecbefde1a94f7a1234f907b1","sha512":"2941c8a3af5f21265e59a0797c1874e5d7b14efc8a2ffbba5641f4b46d630258a3ae4f62f7a3047f48ebf8902629935b70ce4a95af68aa816b0ad16862b5f582","ssdeep":"768:oYylJmi6Q1wl5eu82dtJhbuIHZE7QgVOfvtAika:obmT6Vu8EtJR5ExVOfKVa","tlshash":"23d2f1fb93467f62de85e0312892cb343961fd60057ffed1c1916258b606aa1bf6c213","first_seen":"2026-03-14T02:32:22.20266Z","last_seen":"2026-03-16T06:21:15.904701Z","times_seen":2,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-carousel-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:47.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:37:14 GMT","end":"Mon, 27 Apr 2026 08:37:13 GMT"},"fingerprint":{"sha1":"1F:80:E1:44:12:8A:FC:40:29:3F:66:7D:B2:CD:6B:37:58:78:5F:62","sha256":"EF:BD:CB:97:0F:61:30:70:B3:64:A7:8B:27:68:D2:CE:8E:07:02:66:F9:1E:4F:FA:32:0C:8A:22:AD:45:CB:67"}}},"request":{"raw":"GET /v0/amp-carousel-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11489\r\ndate: Mon, 16 Mar 2026 06:20:47 GMT\r\nexpires: Mon, 16 Mar 2026 06:20:47 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"c283e3610ded7deb\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38737,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38616)","md5":"518b01ada964654afbaa2627e460f254","sha1":"48632703b7c70ade62fc92de93e80f02e0e992fa","sha256":"b4a65fac9208c28aa476e2c286a628a137707461b53c0ce42d40d8b83e357e9a","sha512":"bd7b07d62237886b5e48f1ddb58df6aa7b74aabde300c44d4dbbe0738bb8083f799c6b1eb10dc81a5ae99595a5967b15a2d49195bf0763398083bbfab297f5ef","ssdeep":"768:BuCdWBuHV4qVy2STUSIQ/jkZ9PmTSnSba9La+0:B2unY3Ht/eNj01","tlshash":"3b03b5d8b382b43d4697a174406f110ee23fa919640a452cf1abddc5bebc99a2137f3d","first_seen":"2026-01-27T21:50:45.489197Z","last_seen":"2026-03-17T16:27:48.018269Z","times_seen":221,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":147,"dns":1,"connect":31,"send":0,"wait":44,"receive":19,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/home-slider.jpg","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:47.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /home-slider.jpg HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html\r\ncontent-length: 771\r\ndate: Mon, 16 Mar 2026 06:20:47 GMT\r\nserver: LiteSpeed\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nlocation: https://adidas138.org/\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":110061,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:47.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://adidas138.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Mar 2026 23:23:03 GMT\r\nexpires: Thu, 11 Mar 2027 23:23:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 370665\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-04-05T14:48:15.130443Z","times_seen":204211,"resource_available":false,"data":null}},"time_used":1515,"timings":{"blocked":753,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":750},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/games/jackpot/mochi-mania-1000.webp","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/games/jackpot/mochi-mania-1000.webp HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:48 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26894\r\ndate: Mon, 16 Mar 2026 06:20:48 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":26894,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c42fc80a564ac8b91e809abeb7789606","sha1":"34a508040ca4fd21e3997cf833ec39bada2ba5f4","sha256":"b479108aa7b849f10a80a7a1256235b5ef99cf5f0f90fe218a08338b9985c5a0","sha512":"d2e3709fc0e7bdf00f2956b0b7eeeb9dce35e9c4143bbd3913b4de07dd5a8145c536926e6d446273c33041becf061d911aab8ece2c9fd7f3fdbf01b0a7c977de","ssdeep":"384:bFYNg7T17HzRsWEWhBi/ODvh/odTaq10kGMbQFHnrqogVYh1zndZqjLeBpSfUdJ8:bFYyXxHLhw8wJi+UnzgVcRwOrSfUAH","tlshash":"4ac2e0f1ab20d734ca30d67848e9e387a2b333a8ea143c16b43cd77b9739440b61a156","first_seen":"2026-01-25T20:41:40.303404Z","last_seen":"2026-04-05T08:20:54.917009Z","times_seen":7,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/games/viral/Lucky-Twins-Nexus.webp","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/games/viral/Lucky-Twins-Nexus.webp HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:48 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13100\r\ndate: Mon, 16 Mar 2026 06:20:48 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":13100,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"39e01a11cecf194bfd0dd88539e61350","sha1":"62e5107fd7253f2e0c1c31bea6baa79f18d52cc0","sha256":"de815985cca45ef8e93e564749333bbf84be1a054961f86a06b038ef56464fed","sha512":"91be7f79f1de7726c40701324c0474c56fbc3e7659b08406b7bbdc2097e92e7f7bc2ba834d0c1cc3370c43d91b12e585956cf6fe28055f11d2954eccb72e92ad","ssdeep":"384:EXJHsBeNgdXLlO6ToF5egjwWrPJ0EQPMhMCVZg6/:YHsBeNXhF5egvDgWMCV7","tlshash":"1842c052bc432e66ec0f7f2b8354837163e81ad4e0d4cb434ade1277d60289d6dd1ea2","first_seen":"2025-09-30T11:15:33.678272Z","last_seen":"2026-04-05T13:11:55.739173Z","times_seen":300,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":662,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/games/viral/Laughing-Buddha-Nexus.webp","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/games/viral/Laughing-Buddha-Nexus.webp HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:48 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30744\r\ndate: Mon, 16 Mar 2026 06:20:48 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":30744,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"366bcda231e269c6e78076286bc89404","sha1":"fd968eccf5d11174f34238dbcd1afe1a6a2d77de","sha256":"9181bfef5791ffcdbdec303a821e4a0df1594e3ef869dda4731eb85cf5c4b251","sha512":"840da22099affbbdc5b09a1d36a148668d89ec3a575105f883676729d67ccf835f93e0ba8a3180c21a082c9ed25a250db4f3d8602a49271f2d15c9656c7d8d53","ssdeep":"768:8FYyu0dEzWmZ2vm6f/mXwymCDMVzIC5hLWF84BKxn:Mqw82vmiYwZCDMFLWC4In","tlshash":"7bd2f157af16b371f8f2f33830af2f7250894ea056011fb628e06b3248642476ade255","first_seen":"2025-11-11T10:54:01.40101Z","last_seen":"2026-04-05T13:11:55.722485Z","times_seen":99,"resource_available":false,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":667,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/games/favorit/Lucky-Tiger-1000.jpg","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/games/favorit/Lucky-Tiger-1000.jpg HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 21817\r\ndate: Mon, 16 Mar 2026 06:20:48 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":21817,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3","md5":"20948d2a7ca14b92a97beba5c34d116b","sha1":"57c6f0e8b02192c3194e2e35594fb7388abcca3f","sha256":"99a3670701762cae4974b7449c580076504f0b3f62917fac68c06275575bb9ce","sha512":"dd3b86118f2cc18f4466a606310d52b62b9bc9a982380f3ed43856c28c6d1eb62ca57a8e4c6ad089d9295bfa383fd6edbe75f8c3ef02e028c1e3b9e198f406c2","ssdeep":"384:BYNg7FNan8t5VKItBVWh9lhJG98UuNMRFQW3ZfvXBlLZLuPmrJxh:BYyvan8/VKILVyBo9iCIWpnRuPaJb","tlshash":"67a2d071af1fe643fb1eda3c41636bba716d3335d3d41458a62cea06c3460812e8e359","first_seen":"2026-03-01T03:06:04.745457Z","last_seen":"2026-03-16T06:21:15.91076Z","times_seen":4,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":671,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/games/favorit/Diner-Delights.jpg","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/games/favorit/Diner-Delights.jpg HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12601\r\ndate: Mon, 16 Mar 2026 06:20:48 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":12601,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"86547b15c551b20b8a88180dd9526f7f","sha1":"cb1c8e12503975584e89cfc647a6a2cde078f317","sha256":"6bb517d16eed5e0e07d9fef0cda7a690104ed102f585e045e0c3873337878b01","sha512":"eb549499eb1c0723974bac222d18828ff937d344e552b2d7016cd08666b536d60ca3ba74e031470b59fb55be179bcbb05c98fd00b009568c674fbc0ca61ba4dc","ssdeep":"384:WHgae4fjPqfzu8n2aQx/uqb2spGvW0Sqvnd+dbpZwc:WHgd4fjPPKu/nbbGvWEQZwc","tlshash":"0542c0c6f9e168c4bfa26c9178839570454aec22cfd193fe60c5e8454e71fb18b1e2b1","first_seen":"2026-03-14T02:32:22.208938Z","last_seen":"2026-03-16T06:21:15.91165Z","times_seen":2,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":670,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-16T06:20:47.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 11 Mar 2026 20:43:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13449\r\ndate: Mon, 16 Mar 2026 06:20:47 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":110061,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"512fdff74b77eba98d2d249989c36b0d","sha1":"0968877aa6952620bf1349523c577d0507255942","sha256":"8fbc8aba14ed82bd09d4e82a54f64e3806ba0d0d0e30f7c271601636639fd74f","sha512":"f3d0f5c11258da22eb32993b2cec037a6a3b1c2e47080ae8cf861d277fd4a50c2e9d2d30fe67ccf2ddb87882e17a192e388b24533df24ff9a16e93c72ed0ef57","ssdeep":"768:XVzADgJXGT+JPkS4YDhf/SuvUAIpvswIFCkv8QLrmTv/wilQkj+LY:egIT+VvUAovswIFCkv8QL4v/wil9+LY","tlshash":"6ab36216c942204a58339369dfb29b4efb965153c602c55d7ffda3828fb2940c5a3f8e","first_seen":"2026-03-16T06:21:15.876002Z","last_seen":"2026-03-16T06:21:15.876002Z","times_seen":1,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":172,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-sidebar-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:47.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:37:14 GMT","end":"Mon, 27 Apr 2026 08:37:13 GMT"},"fingerprint":{"sha1":"1F:80:E1:44:12:8A:FC:40:29:3F:66:7D:B2:CD:6B:37:58:78:5F:62","sha256":"EF:BD:CB:97:0F:61:30:70:B3:64:A7:8B:27:68:D2:CE:8E:07:02:66:F9:1E:4F:FA:32:0C:8A:22:AD:45:CB:67"}}},"request":{"raw":"GET /v0/amp-sidebar-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9650\r\ndate: Mon, 16 Mar 2026 06:20:47 GMT\r\nexpires: Mon, 16 Mar 2026 06:20:47 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"df45f6b0644672fd\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31363,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31247)","md5":"b44bcbd9902a6a481f2e8fccdc72e0e0","sha1":"80a00b7c5a2f6c85a8e5e35a25a7cac53884397b","sha256":"364dc811bd3548aa75b0c0474fb10051817891a60f094c64f74ba5a98323bc59","sha512":"f1054575e0664808773515df02a5e1bc9cc6a5c69bd9838ddb2734c0966fece8fae6db72d14c5ba147fbb63ff2be22b60b0b24cac1d471fbe712e18f5e868d2d","ssdeep":"384:TnXCVRcBmEljVOL6DpbaGCF7YQ+CTvhsvuNE/h9puKL5Et5MfaWrFWZuz7:TXC0ljCjTE/vRL5EfMfaWr7z7","tlshash":"2ee2c89cf292b0714697a0b180bf450aa23ba555641b842cb05decc76d78e5ab237f7c","first_seen":"2026-01-27T21:42:06.364387Z","last_seen":"2026-03-17T16:27:48.036454Z","times_seen":197,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":144,"dns":0,"connect":15,"send":0,"wait":44,"receive":4,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/games/jackpot/fortune-of-olympus.webp","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/games/jackpot/fortune-of-olympus.webp HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:48 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 77864\r\ndate: Mon, 16 Mar 2026 06:20:48 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":77864,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4f7609a17957c32e9da0ff2a3ab0d38a","sha1":"9d7eeca4945a46c4d78de8557f4f71162ac2417b","sha256":"3c23e0f9ebb2963a0439d40b5020c0215e655cc2904dfba14482bddfdde16734","sha512":"80938c7c20695596fa6010efad8f33891b57240b7f6bf81119fdae06cf60cb34042e22f863d800bd209bcafecd6b290c97a98d82643699bb6350a3643581c5aa","ssdeep":"1536:mStQ7TqiFfDutlTGwk02FK0BMH1r/RB2JBdAjrrXBFd33:m7Tqy0r0SH92ujrDB733","tlshash":"6573029601311abec97a180dc567c3a1b28fefc20ebed42f715961f0fc61b086969b4d","first_seen":"2026-01-10T10:25:03.113151Z","last_seen":"2026-04-05T08:20:54.926812Z","times_seen":12,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/games/jackpot/wukong-black-scatter.webp","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/games/jackpot/wukong-black-scatter.webp HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:48 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48034\r\ndate: Mon, 16 Mar 2026 06:20:48 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":48034,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9b838cabeb7767209db1664f4751de6f","sha1":"559ce4a036951ac3f26db171019a3a62f68e70d5","sha256":"61ad8b7dd76238c118ebaff06225f30f6a25764592ed4a3f8cf98bb8dc3a3e04","sha512":"4f921ce1d310fcd07279358b6e86f7dceaa094434abb3cd20f52ba1db87684b84d36a55fec18de2c0d7d07f451cd7ca67f1f6cfef33d5be7fbb4c5efd52a651c","ssdeep":"768:M2BTzmIBpm5wq8c0+cROpO/8/WJ0apGEqus3cTN6qzexNhKxfcWKzo4NXjeq2FnL:NzmO2wq8c0cQpRqusvqq/wZc17hjBxPC","tlshash":"c023f21a4789129f5181f88fad6494390a28eafc83f942ed46a7647d6f32d206f0069f","first_seen":"2025-09-30T11:15:33.789281Z","last_seen":"2026-04-05T08:20:54.922182Z","times_seen":236,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/games/favorit/Asgardian-Rising.jpg","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/games/favorit/Asgardian-Rising.jpg HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14784\r\ndate: Mon, 16 Mar 2026 06:20:48 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":14784,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"1a2078c3fec19f2e94addf9f741858e2","sha1":"0bd16b2e095615cab22ae4ec1f3fa4bece675ba4","sha256":"a5b0e971506ffbfd294e2af8a515f3aaab7c1c91646924ee32437904238788c3","sha512":"7d954917b57b7a830e13aa9da001c34c5f085244ad4af2159cda8373b5376e9624f8b0aa6edeab943635d5f6900e2902ede27b927d704b882d644f839e7f7cf4","ssdeep":"384:W4X400vfqlY0/gWaw5pCXu7v5hXWDeQb/RVGyX+/RFQc2stX/CF+6qn:W4XnmilY0YJwz5ZWDXvGj/HL2uvCM6qn","tlshash":"f062c0adf02b6fd2af4ea83b54d51a02964ab021d58cb9271a4b001c317befd960d0f6","first_seen":"2026-02-10T23:12:10.600332Z","last_seen":"2026-03-26T03:10:21.537513Z","times_seen":4,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/favicon.jpg","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:49.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/favicon.jpg HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28541\r\ndate: Mon, 16 Mar 2026 06:20:49 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":28541,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 192x192, components 3","md5":"6dd7c9955f8a7220b8cb55a4e4b997a2","sha1":"d97056ce700d848912245675e5608f8df9537a77","sha256":"d91d8071c4583efc4085faa4b2bfd810ad2e00efecbefde1a94f7a1234f907b1","sha512":"2941c8a3af5f21265e59a0797c1874e5d7b14efc8a2ffbba5641f4b46d630258a3ae4f62f7a3047f48ebf8902629935b70ce4a95af68aa816b0ad16862b5f582","ssdeep":"768:oYylJmi6Q1wl5eu82dtJhbuIHZE7QgVOfvtAika:obmT6Vu8EtJR5ExVOfKVa","tlshash":"23d2f1fb93467f62de85e0312892cb343961fd60057ffed1c1916258b606aa1bf6c213","first_seen":"2026-03-14T02:32:22.20266Z","last_seen":"2026-03-16T06:21:15.904701Z","times_seen":2,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/games/jackpot/poker-win.webp","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/games/jackpot/poker-win.webp HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:48 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74470\r\ndate: Mon, 16 Mar 2026 06:20:48 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":74470,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ac6611c43619f65dbf2629b251955cec","sha1":"ab27d7efd8cd84860674952ed4dffa6c591b99f7","sha256":"abe3e7facd8c9d260aeca116430116b40d3421c77596856992dbbe2048b371a4","sha512":"71b0c26234037fb74c3d6ce03710f6fe4abed2775f1152d387fb9ba6840a2c746dabf8adc179e1961ff0be4a579e49048452fa64c6a27455221237cbb5348a8f","ssdeep":"1536:Ez6fLSqYpJDiZyETTOZ1e2CB2RhMdxxycIRZLn/dIOADq3ColPVsLTCxtLP48S:QDTyKvhM4DZrFiu3TliLTCEb","tlshash":"237302c357e9d3c56662b88ffa06e0674c9ea038ee1ddd08f1bd815a13c4c9b99c469c","first_seen":"2025-12-22T00:56:18.786478Z","last_seen":"2026-04-05T13:11:55.773802Z","times_seen":75,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adidas138.org/assets/images/games/viral/Olympus-Super-Scatter.webp","fqdn":"adidas138.org","domain":"adidas138.org","tld":"org"},"ip":{"addr":"162.0.215.109","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://adidas138.org/","date":"2026-03-16T06:20:48.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adidas138.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 27 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"49:F7:50:48:A0:D3:08:94:74:3E:21:8E:21:10:DF:F8:9C:26:B7:3D","sha256":"52:2B:6E:9E:F1:1C:DE:A8:E8:70:15:E8:E1:17:EB:0B:47:8B:3F:D5:22:C8:E8:47:AD:E8:20:9A:B8:19:F9:D4"}}},"request":{"raw":"GET /assets/images/games/viral/Olympus-Super-Scatter.webp HTTP/1.1\r\nHost: adidas138.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adidas138.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Mar 2026 06:20:48 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 08 Mar 2026 16:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 29338\r\ndate: Mon, 16 Mar 2026 06:20:48 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":29338,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2c4f3b7bcce578248aeca202ed8f1c38","sha1":"7c376307d253e2a7626fc51ccf756e6586ef437e","sha256":"ae4c722c4d93e330cd4b640f27806b779ce39251dd756ea2acd912472a3b8c6b","sha512":"c00a24c9dd68429e10bd13148b0570eee7797bba15a5f4b1cd1aef5e64268e0558bc0db8d26fbf886cceed777a754c1b78a693d3e2a27abc142951f30a18be04","ssdeep":"768:wFYyTg5a6kTGiljJ6YLRbEHrwe8J4bJbNOg:YW8TGipJ6504VbNOg","tlshash":"79d2e1e2b3d6a3a1d05485323c774ba99262d66db3003d52e573be1750601a1cbe23bf","first_seen":"2025-09-20T09:49:18.445001Z","last_seen":"2026-04-05T08:20:54.929762Z","times_seen":239,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":668,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"adidas138.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}