{"report_id":"abb39e1d-86e4-471f-9333-09a403fcd4f7","version":0,"status":"done","tags":[],"date":"2026-08-22T18:47:42Z","url":{"schema":"https","addr":"gemtosa.com/efootball/","fqdn":"gemtosa.com","domain":"gemtosa.com","tld":"com"},"ip":{"addr":"172.67.198.9","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"gemtosa.com/efootball/","fqdn":"gemtosa.com","domain":"gemtosa.com","tld":"com"},"title":"eFootball - Update v2 Promo Coins \u0026 GP Event","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-22T21:26:39.146368Z","times_seen":1041336,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"gemtosa.com/efootball/","fqdn":"gemtosa.com","domain":"gemtosa.com","tld":"com"},"ip":{"addr":"172.67.198.9","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-26T18:47:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"gemtosa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"d2v7l2267atlz5.cloudfront.net","ip":{"addr":"54.192.209.6","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-03-25T17:29:47.7297Z","last_seen":"2026-08-20T18:56:53.699633Z","alert_count":0,"request_count":1,"received_data":27799,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-16T22:33:33.289447Z","alert_count":0,"request_count":1,"received_data":508303,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"gemtosa.com","ip":{"addr":"104.21.68.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-11-29","domain_rank":0,"first_seen":"2025-11-11T23:48:55.425671Z","last_seen":"2026-08-05T16:46:20.14895Z","alert_count":14,"request_count":14,"received_data":487023,"sent_data":7051,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"d1cdbd1x576ga0.cloudfront.net","ip":{"addr":"3.164.247.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2026-04-26T06:40:27.305228Z","last_seen":"2026-08-17T07:48:18.806512Z","alert_count":0,"request_count":4,"received_data":9837,"sent_data":2058,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gemtosa.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"gemtosa.com","domain":"gemtosa.com","tld":"com"},"ip":{"addr":"104.21.68.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-22T21:25:35.837105Z","times_seen":125947,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemtosa.com/efootball/","fqdn":"gemtosa.com","domain":"gemtosa.com","tld":"com"},"ip":{"addr":"104.21.68.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c310538a0792a569f56a8a4650c3154","sha1":"6a62ebc36d885aace21149e9ae989748ab02b390","sha256":"53d6d09635537b0e891c2ab7c9338655743c2c829e4f943ae38022cbbdd8f90c","sha512":"59117e3802d395961d6f77c96e54ea04476f5390bb13c8c5a67a639db8131358f5438f59fb30e03c04ed7713bd8b58dfbca96284d7155563f63e3426f06c01bf","ssdeep":"","tlshash":"1d900296589970f853519600553627226354d46588052094c150411538490cae4a5a52","size":54,"data":"","first_seen":"2026-08-22T18:47:46.7994Z","last_seen":"2026-08-22T19:23:42.991232Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemtosa.com/efootball/","fqdn":"gemtosa.com","domain":"gemtosa.com","tld":"com"},"ip":{"addr":"104.21.68.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fc4395463b120066c9fea2de815c80f","sha1":"6a98882a9c094683565d8b9d56f82f414aa13c20","sha256":"60d48c959c78675a3e9e46c73b87ebcacf5ee9d051ccafcf37bf65d788fe0a46","sha512":"144b10a5795fbabbd1e1ba37cc8331395cdf14d562c2098d6a04a6f898fe472545223b487650fe0c71348b39edf37693a5cc65f8607ff0c0a81fbfe532cc1da8","ssdeep":"","tlshash":"5d900209db7545755800631a7c9c084a096730123b509c1db466e110c2a4f80664e193","size":56,"data":"","first_seen":"2026-08-22T18:47:46.80076Z","last_seen":"2026-08-22T19:23:42.994011Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2v7l2267atlz5.cloudfront.net/bcdb7d0.js","fqdn":"d2v7l2267atlz5.cloudfront.net","domain":"d2v7l2267atlz5.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.6","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea59f4a53936cd48199eace769df6246","sha1":"e70c6fad5aee18dcaecf1e61c847f6049d45ca79","sha256":"2abdec1db4f68bb8fffeb80279dd09f15db9ab88248b219d157b74c3bcd3cd4e","sha512":"f172bcd3f25e1064ed6b55dc2445a3350a5d8f15f620926bdb13bbb80418e0963412dcfac09a3fe831411f690a13b000b5e8033537e93df36b5dfca47aa5e209","ssdeep":"768:n5f26236wBXroljZ1/peRXMiH54aGz1WCyQgmip4L/4aLv0NO:U3Z7OZ1h2ayQgM","tlshash":"7ec2535aab6a1809867763badf1f5208f575032f1512c119bc7c88d85fb0d3442aaffc","size":27325,"data":"","first_seen":"2026-04-23T22:58:31.149268Z","last_seen":"2026-08-22T19:23:42.973232Z","times_seen":668,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-8QZ28X1N0N","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb651d60f9b775c5acec7a49d3cadbca","sha1":"be6b376f1a9939cb8707a3f96908bdc0b76c9bed","sha256":"218ec81d7e7927582de2617421c2c5af6847f3fccee3065456eac1955eea68e2","sha512":"e1ed3183ecb6cf47b9c7c2cdd04acd6d3323fe4d1e9260ed5bb520e37201976a5e2b98cc3267c16db685a93758f74c8736c4977b1d0b9dcf6a5f6bbfe79b1d13","ssdeep":"6144:ujc79AY1iLZKHg0N70HtdZen0okfha5gcXsL3EQB3PDqkbzW0cHHNNbKQ:CVdLZMvNwO0lDkHPX","tlshash":"62b4e8ceb3d674665396f078503f01cba57b28a2b45cc89af189cce42e7469a4127f7c","size":507699,"data":"","first_seen":"2026-08-22T18:47:46.793019Z","last_seen":"2026-08-22T18:47:46.793019Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1cdbd1x576ga0.cloudfront.net/hE3xqdHGvSOpV.4462813.ec319.0.js","fqdn":"d1cdbd1x576ga0.cloudfront.net","domain":"d1cdbd1x576ga0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.164.247.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bededbe54489322c0f95de1aba5d5718","sha1":"8a12dd5dcc12fa711f35d044c3c415247a978332","sha256":"b88ecd6acf524d6241ffa8258b05c8aa7d38ee1a2c9e27cbe1dc5305ad90bfe1","sha512":"f9ee419f5a8c3dc3934ec4e2f3a9505df81b87834687d42e24db5ace223f7c668d6713f6b1e40b0a6512760ee7823b1548cef0dd6860b5d441f4f47c81149504","ssdeep":"384:MWwWVxYK/ha/Hu5zACt2I98A04vcswaw3wmhwewXwu:MUVxYKIm5zAG2IyA04vcDxgmylAu","tlshash":"f262f7c37954c439fb93ac5d6afa5fba5984240882c2f7b4fa4ef62c47cd0b846d2254","size":14545,"data":"","first_seen":"2026-08-22T18:47:46.802375Z","last_seen":"2026-08-22T19:23:42.989901Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1cdbd1x576ga0.cloudfront.net/public/external/check.php?it=4462813\u0026time=1787424436475","fqdn":"d1cdbd1x576ga0.cloudfront.net","domain":"d1cdbd1x576ga0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.164.247.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","size":72,"data":"","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-08-22T19:23:42.96102Z","times_seen":3460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1cdbd1x576ga0.cloudfront.net/public/external/check.php?it=4462813\u0026time=1787424451844","fqdn":"d1cdbd1x576ga0.cloudfront.net","domain":"d1cdbd1x576ga0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.164.247.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","size":72,"data":"","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-08-22T19:23:42.96102Z","times_seen":3460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemtosa.com/efootball/","fqdn":"gemtosa.com","domain":"gemtosa.com","tld":"com"},"ip":{"addr":"104.21.68.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"776d67ce66f325afb35532ebdf77d2ff","sha1":"b4695936276535c4cdae32e07b037cb3c5a38fae","sha256":"f1b839e87cb69df9e487605bc9460f5b74a5d8037482382d5c161e9c7d7da7cf","sha512":"11ad8a164a32e39bf6b693f56e0fc2140878f3e26348f775a8421567f7ffa2f68b49fef978be7a17e764996619441c4a43551b138de8ee097e7cda342b32475c","ssdeep":"","tlshash":"50c02b8c220f1cb041f72b008b3fba00b04232a8d4f0e972890963444e30e03d754810","size":153,"data":"","first_seen":"2026-05-08T04:04:02.439449Z","last_seen":"2026-08-22T19:23:42.992788Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemtosa.com/efootball/assets/script1.js","fqdn":"gemtosa.com","domain":"gemtosa.com","tld":"com"},"ip":{"addr":"104.21.68.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"24510b18e38565c290775d97f82862ae","sha1":"595b46b12bced58d1c1b244985d1b796877b0250","sha256":"3674b1b86c7b5fdc43591e7f115c5a165763cdd0b29aface6a7d25d16424dc3b","sha512":"bfdcf1a218e6bf6d24ec9cf324bbd45d55f197d99179c03ca8caaecbed57ed388ce8067f462b7cfd548e76f4b7dc20ac95181c80ca1c1350124fd39058584ea8","ssdeep":"96:vbcYayrNkoitb/7f5aynJG2A24VVSQ5aJ/kohI2IUF0u2TcqljuwicXBap5seK/A:jbj47UyX8fUF0u2TPNoti4y1IP","tlshash":"b4020fc35940c6ff33126b8b993c8dd9f211878ba94497caa29cec6d90c6517e8be135","size":8229,"data":"","first_seen":"2026-08-22T18:47:46.797657Z","last_seen":"2026-08-22T19:23:42.958262Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"gemtosa.com/efootball/assets/image0.png","fqdn":"gemtosa.com","domain":"gemtosa.com","tld":"com"},"ip":{"addr":"104.21.68.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemtosa.com/efootball/","date":"2026-08-22T18:47:06.052Z","timestamp":1787424426052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemtosa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 21:38:41 GMT","end":"Mon, 19 Oct 2026 22:36:02 GMT"},"fingerprint":{"sha1":"D4:E5:0E:7B:11:4C:B0:B3:FB:BC:C0:61:B7:07:5A:E9:24:14:0D:F3","sha256":"0D:7F:DF:3F:AC:D2:B8:90:D6:16:F1:55:97:6A:7B:80:3A:A7:B0:AC:A3:9D:52:F4:EE:57:F6:78:AE:5F:C2:C7"}}},"request":{"raw":"GET /efootball/assets/image0.png HTTP/1.1\r\nHost: gemtosa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemtosa.com/efootball/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 29 Aug 2026 18:47:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 06:34:29 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ndate: Sat, 22 Aug 2026 18:47:07 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z9TPpN7xeubEj5rG%2BxJuObwoNxaCapB2cu1JACAEpLdpBbLaXeupCPDOYyQsvS9962pqp8rkszad3PKV0eyOqByg2MCtJdICC1Bj39yAp4JwF70IE6fJhClRzi%2BPKw%3D%3D\"}]}\r\ncf-ray: a2f40b46cd5c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6513\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6513,"size_decoded":7297,"mime_type":"image/png","magic":"PNG image data, 1280 x 1280, 8-bit/color RGBA, non-interlaced","md5":"b1aff3db3bd923356a45416baacedc38","sha1":"5d87304097d9b34045ce00e75e6f29918deff6b6","sha256":"6e4b7d6d4e4c6e4d16d4a66d2ddf34eec11d3f6196018ead9ba6348e2b7dc786","sha512":"0ad42272884922e853e84382309ee296c73fff9647fcf08d3329da5b49c38487d9f4225eba73811100b42e423c6d29e178ef6f4d20c873a47eefcac97ed4826f","ssdeep":"6:6v/lhPgYyllll0AERK7pyunqWjrzz24bnJYdp:6v/7RybaRK78KD1n+z","tlshash":"e1d1c0c2f380e1e8c2fe0077d0280c007233f3c4033019206481cc7b28546c041d8040","first_seen":"2026-03-27T14:16:21.372927Z","last_seen":"2026-08-22T19:23:42.970452Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1269,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"gemtosa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemtosa.com/efootball/assets/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUZiZSSShiA.woff2","fqdn":"gemtosa.com","domain":"gemtosa.com","tld":"com"},"ip":{"addr":"104.21.68.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gemtosa.com/efootball/","date":"2026-08-22T18:47:09.366Z","timestamp":1787424429366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemtosa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 21:38:41 GMT","end":"Mon, 19 Oct 2026 22:36:02 GMT"},"fingerprint":{"sha1":"D4:E5:0E:7B:11:4C:B0:B3:FB:BC:C0:61:B7:07:5A:E9:24:14:0D:F3","sha256":"0D:7F:DF:3F:AC:D2:B8:90:D6:16:F1:55:97:6A:7B:80:3A:A7:B0:AC:A3:9D:52:F4:EE:57:F6:78:AE:5F:C2:C7"}}},"request":{"raw":"GET /efootball/assets/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUZiZSSShiA.woff2 HTTP/1.1\r\nHost: gemtosa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemtosa.com/efootball/assets/style0.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 29 Aug 2026 18:47:09 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 31 Mar 2025 06:34:29 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\ndate: Sat, 22 Aug 2026 18:47:09 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5goZZkXAEnmlMPAUNcBcbOU7f4Z%2B%2FxQsdC1y82Iiw2pgRMmFameFE%2FhR4KhnUvXgYTSo21RVIiiAP73TuWvx%2F14TwI5B6anxWPzDOSYb88yPcz9LQLtbzjVJPq%2F0TQ%3D%3D\"}]}\r\ncf-ray: a2f40b5b88712efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12636\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":12636,"size_decoded":13431,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12636, version 1.0","md5":"a949f6639117ea2d41f1bd0e27d8e25b","sha1":"7152fe797dc616b5785131dab349d85df5cb519e","sha256":"fc16994e738d26a44087500014561d06dbd4d2d0cf12c5b344d2cc2eff332204","sha512":"d4a2df86692a0f8a81626181bba20b8cfc2ca872663df33788dd51c9a9e6cb802a7b05513476a416851c74825006c8d3fbff384b537858478160c771c4ea10b5","ssdeep":"192:NUvroc+7CnJI9yb+KLjzPTbo8qALX8uNMwkj+T/u4DzBax0RTJ+X8zXFi5tDh6+6:uvMf0J3fTbDq86e64DzBDTI8z1ijptn0","tlshash":"4442ae128c72f86fdbc679f2f6f003a95de2841296784500dab529048530ee987f28ae","first_seen":"2026-03-27T14:16:21.367633Z","last_seen":"2026-08-22T19:23:42.976759Z","times_seen":15,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"gemtosa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemtosa.com/favicon.ico","fqdn":"gemtosa.com","domain":"gemtosa.com","tld":"com"},"ip":{"addr":"104.21.68.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemtosa.com/efootball/","date":"2026-08-22T18:47:09.926Z","timestamp":1787424429926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemtosa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 21:38:41 GMT","end":"Mon, 19 Oct 2026 22:36:02 GMT"},"fingerprint":{"sha1":"D4:E5:0E:7B:11:4C:B0:B3:FB:BC:C0:61:B7:07:5A:E9:24:14:0D:F3","sha256":"0D:7F:DF:3F:AC:D2:B8:90:D6:16:F1:55:97:6A:7B:80:3A:A7:B0:AC:A3:9D:52:F4:EE:57:F6:78:AE:5F:C2:C7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gemtosa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemtosa.com/efootball/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9dfRL7vljOVsjOr9dOWtNr4nemGTFcww7w2Yy58xgzFtgL%2BUPYv9V8iRZqJkgTsCUzQ7yA2zmvlRTHqjR5jp6iFha56U%2FoGXplDO0zGUd%2F%2FFo82cQJIYegQ1Dkl4jQ%3D%3D\"}]}\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\npriority: u=6,i=?0\r\ndate: Sat, 22 Aug 2026 18:47:11 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2f40b5f08ec2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1490,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-22T21:17:22.697075Z","times_seen":151782,"resource_available":true,"data":null}},"time_used":1176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"gemtosa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d1cdbd1x576ga0.cloudfront.net/public/external/css_frontXF.css","fqdn":"d1cdbd1x576ga0.cloudfront.net","domain":"d1cdbd1x576ga0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.164.247.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemtosa.com/efootball/","date":"2026-08-22T18:47:14.005Z","timestamp":1787424434005,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 12 Jul 2026 00:00:00 GMT","end":"Mon, 25 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"56:E1:B4:D4:6E:2A:82:93:D8:10:D2:E6:46:B4:0B:8A:25:2F:D8:F7","sha256":"62:DE:1C:E5:D4:24:62:AA:AF:3B:AE:00:20:10:37:20:77:34:7D:8D:F2:5C:C6:B3:34:85:25:07:AE:CB:C6:01"}}},"request":{"raw":"GET /public/external/css_frontXF.css HTTP/1.1\r\nHost: d1cdbd1x576ga0.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemtosa.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 6134\r\ndate: Sat, 22 Aug 2026 18:47:14 GMT\r\naccept-ranges: bytes\r\nserver: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nlast-modified: Thu, 17 Aug 2023 03:23:55 GMT\r\netag: \"17f6-60315f12e3b62\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d5ffe4a44770755efd4aa2fc68579118.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: dCI0CGp0EwPbSsIOogsUUYbuOHq3fIC-8U2ylvpIJlzbh95H4GKC6g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":6134,"size_decoded":6602,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8cf8da7dc6b5d43ae6872b4fe5564c38","sha1":"cc3c14ce8bccf427b4a777449876eb722381cb18","sha256":"60a0f85900cf8e56c1607c8c120f68064a4f8d22a40637b224774cb611e93c2f","sha512":"e719aa872285169d609b29810cf8b4d748bae32bb08ceb4122ea4cd08345f7fb1f688eb03f55c10ad145e414920de88ffdc02f6b77be46e2d9106d80438f7826","ssdeep":"96:XtPngNH2uJbg6iLiTX9KFORdtHGMl3JYYD9PzhZ:XtPgRpViLiTX1dtHGMlm29PzhZ","tlshash":"eac1e16c6d21254581368a15e3db861ad87ca12319317efdb381235b4f316fc13abfba","first_seen":"2023-08-18T00:45:26Z","last_seen":"2026-08-22T19:23:42.986607Z","times_seen":3338,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":0,"dns":19,"connect":11,"send":0,"wait":182,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1cdbd1x576ga0.cloudfront.net/public/clockers/PrimeApps/cssXF.css","fqdn":"d1cdbd1x576ga0.cloudfront.net","domain":"d1cdbd1x576ga0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.164.247.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemtosa.com/efootball/","date":"2026-08-22T18:47:14.461Z","timestamp":1787424434461,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 12 Jul 2026 00:00:00 GMT","end":"Mon, 25 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"56:E1:B4:D4:6E:2A:82:93:D8:10:D2:E6:46:B4:0B:8A:25:2F:D8:F7","sha256":"62:DE:1C:E5:D4:24:62:AA:AF:3B:AE:00:20:10:37:20:77:34:7D:8D:F2:5C:C6:B3:34:85:25:07:AE:CB:C6:01"}}},"request":{"raw":"GET /public/clockers/PrimeApps/cssXF.css HTTP/1.1\r\nHost: d1cdbd1x576ga0.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemtosa.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 1804\r\ndate: Sat, 22 Aug 2026 18:47:14 GMT\r\naccept-ranges: bytes\r\nserver: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nlast-modified: Thu, 17 Aug 2023 03:34:52 GMT\r\netag: \"70c-603161857bc5e\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d5ffe4a44770755efd4aa2fc68579118.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: lePvGYr7cTs0azTaFhhyXJe_qEaBDs_sVIXxWN6ovo-Jz0xqwi_izw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1804,"size_decoded":2271,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9be74b455cf7e0b6fc1461ba3d9ad01c","sha1":"f1fa072d9874b423fd003efeffcd128e174d88ca","sha256":"e6959d5cfed508bcc278587c05b26b361bc678f8a7f0502ca6f8ce01f2838cd5","sha512":"6269145c9f99746b9135c994e118582b5219ff98a20ebe50e57d27a14f7859bc085c063002e86f718e301197d53a73275f3544915c1a1a3416adaf9669767182","ssdeep":"","tlshash":"51316a3eae72594f41b9861126f7d21ba5bc515f0a30af7d7a20360a1f261bd2073fd8","first_seen":"2023-08-26T19:01:26Z","last_seen":"2026-08-22T19:23:42.97905Z","times_seen":2312,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemtosa.com/efootball/","fqdn":"gemtosa.com","domain":"gemtosa.com","tld":"com"},"ip":{"addr":"104.21.68.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-22T18:47:04.163Z","timestamp":1787424424163,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemtosa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 21:38:41 GMT","end":"Mon, 19 Oct 2026 22:36:02 GMT"},"fingerprint":{"sha1":"D4:E5:0E:7B:11:4C:B0:B3:FB:BC:C0:61:B7:07:5A:E9:24:14:0D:F3","sha256":"0D:7F:DF:3F:AC:D2:B8:90:D6:16:F1:55:97:6A:7B:80:3A:A7:B0:AC:A3:9D:52:F4:EE:57:F6:78:AE:5F:C2:C7"}}},"request":{"raw":"GET /efootball/ HTTP/1.1\r\nHost: gemtosa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=28,cfOrigin;dur=1393, cfExtPri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-type: text/html\r\nlast-modified: Sat, 15 Aug 2026 09:32:05 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2BBqV3T9VjO3hg%2BkMoQ01DYfC8v385ZhAl26ndNdp6%2F0SivWyDZn6cOexCnxnLtCxL6NYLLKn7dy8Q2Ab%2Bq5iSAIgSn7euVUprAPenSl5Di1QLtXlFzyMgWmWHfqwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\npriority: u=0,i\r\ndate: Sat, 22 Aug 2026 18:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2f40b3b3be02efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":24597,"size_decoded":5206,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (847)","md5":"7704bc01ff5400af3c166872269120c3","sha1":"06ab8e9599c9f0f472379c4d9735120fc7de82a9","sha256":"a73b8182bba376002eccb1fdf12dd1d0264074302a3958ae6e82782a086959ad","sha512":"311544a963450dd914f891ecd62b54e5fcfecb315f4b769309026642ff5da1b60a8b1f68d8af0b72e872127b037e32d9d8e310923ac3f9ff94e35c99565eb786","ssdeep":"768:AVhDR2222S2222A2222Q222l2222e22232222WD:AVhgD","tlshash":"72b2876419f214b31487a9d5ae69db1baed1e717ca6b610836fd1b881fc3d87cc43b08","first_seen":"2026-08-22T18:47:46.776363Z","last_seen":"2026-08-22T18:47:46.776363Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1467,"timings":{"blocked":-1,"dns":15,"connect":20,"send":0,"wait":1432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"gemtosa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemtosa.com/efootball/assets/style0.css","fqdn":"gemtosa.com","domain":"gemtosa.com","tld":"com"},"ip":{"addr":"104.21.68.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemtosa.com/efootball/","date":"2026-08-22T18:47:05.846Z","timestamp":1787424425846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemtosa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 21:38:41 GMT","end":"Mon, 19 Oct 2026 22:36:02 GMT"},"fingerprint":{"sha1":"D4:E5:0E:7B:11:4C:B0:B3:FB:BC:C0:61:B7:07:5A:E9:24:14:0D:F3","sha256":"0D:7F:DF:3F:AC:D2:B8:90:D6:16:F1:55:97:6A:7B:80:3A:A7:B0:AC:A3:9D:52:F4:EE:57:F6:78:AE:5F:C2:C7"}}},"request":{"raw":"GET /efootball/assets/style0.css HTTP/1.1\r\nHost: gemtosa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemtosa.com/efootball/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 29 Aug 2026 18:47:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 06:34:29 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ndate: Sat, 22 Aug 2026 18:47:09 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U1VViE5yrz0AQ3lc4h6NEBywElPsoeQ2wwtyrJ85xiFSp5i%2BewZ0vdZXDIY1BapASyZ8cLrat6PXg%2BV1Pn788cFaGAXByg638xf4D2KDoWtSJN5OFG1xO8QOjIV02w%3D%3D\"}]}\r\ncf-ray: a2f40b458d492efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 480\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1751,"size_decoded":1310,"mime_type":"text/css","magic":"ASCII text","md5":"16021b9dc0535e2337b3b9772329240e","sha1":"609825f162e09a694f33a3b4cfadd2b4d2657f61","sha256":"b10acc5d6da1de6b0a45dc5a5c17adea2755dc499ce98965984d86bf53d247c8","sha512":"33a4b43a215813195b8024fe9afd3cc378c4a15daff23663d9a7217a928ab9d5bb8efbfea2d2b47541fac077ce7e4889875e93d26cbd59067a6e3e8535974170","ssdeep":"","tlshash":"4c31cea048ab6140eb4b1cd237cf3e339a9d62053015da351ffd0428ecabd356268b8e","first_seen":"2026-03-27T14:16:21.359208Z","last_seen":"2026-08-22T19:23:42.980215Z","times_seen":15,"resource_available":false,"data":null}},"time_used":3463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3463,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"gemtosa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemtosa.com/efootball/assets/style1.css","fqdn":"gemtosa.com","domain":"gemtosa.com","tld":"com"},"ip":{"addr":"104.21.68.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemtosa.com/efootball/","date":"2026-08-22T18:47:05.848Z","timestamp":1787424425848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemtosa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 21:38:41 GMT","end":"Mon, 19 Oct 2026 22:36:02 GMT"},"fingerprint":{"sha1":"D4:E5:0E:7B:11:4C:B0:B3:FB:BC:C0:61:B7:07:5A:E9:24:14:0D:F3","sha256":"0D:7F:DF:3F:AC:D2:B8:90:D6:16:F1:55:97:6A:7B:80:3A:A7:B0:AC:A3:9D:52:F4:EE:57:F6:78:AE:5F:C2:C7"}}},"request":{"raw":"GET /efootball/assets/style1.css HTTP/1.1\r\nHost: gemtosa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemtosa.com/efootball/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 29 Aug 2026 18:47:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 06:34:29 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ndate: Sat, 22 Aug 2026 18:47:07 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SIn%2FeNhlmgxgkwXm3npsP%2BIViCRtz%2BnGCzXM1rjpZlWYaBIPkPj5jdF9ZcUCCWt9tZZQCJR%2FZsjR%2BTFeGO8sOQrz4KBMFFhPM0RRyp76QoO54rhPjpd71n363zfEbQ%3D%3D\"}]}\r\ncf-ray: a2f40b458d4a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2422\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11631,"size_decoded":3259,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"88c2774baf2da984ce77d4d615493cb2","sha1":"00c75af8c4fa4479ff5969ff1083054418f48fd7","sha256":"95228312d2deb3776c797894fe7fbef731e1b662390cb8c54861653afb34f8f6","sha512":"34d4f56278b42ed36f060fef4661ceb037d21aff619f40fb9d117d12d192250ca8eaf2e547b5af226d55790ad6b013e23903ba2384ae8bd443b16e02d4f76fee","ssdeep":"192:3JFpjmawa0F6reRMH68gWkR9SHeQjJHqrP7RU751C5BEoYrPw6y4NFkgj9OCe2ZF:3JFp8FF8xk7VWHqrl/246ZFdFb","tlshash":"6f3210966ae30505b48bd0ac6fb78a86275c9443c00fcd7e7a5e7258cf492e8c562bcd","first_seen":"2026-03-27T14:16:21.381162Z","last_seen":"2026-08-22T19:23:42.987787Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"gemtosa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemtosa.com/efootball/assets/i5mage2.png","fqdn":"gemtosa.com","domain":"gemtosa.com","tld":"com"},"ip":{"addr":"104.21.68.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemtosa.com/efootball/","date":"2026-08-22T18:47:06.055Z","timestamp":1787424426055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemtosa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 21:38:41 GMT","end":"Mon, 19 Oct 2026 22:36:02 GMT"},"fingerprint":{"sha1":"D4:E5:0E:7B:11:4C:B0:B3:FB:BC:C0:61:B7:07:5A:E9:24:14:0D:F3","sha256":"0D:7F:DF:3F:AC:D2:B8:90:D6:16:F1:55:97:6A:7B:80:3A:A7:B0:AC:A3:9D:52:F4:EE:57:F6:78:AE:5F:C2:C7"}}},"request":{"raw":"GET /efootball/assets/i5mage2.png HTTP/1.1\r\nHost: gemtosa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemtosa.com/efootball/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 29 Aug 2026 18:47:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 07:20:08 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ndate: Sat, 22 Aug 2026 18:47:08 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EXx0K2gP3A0tP688mH23TVo0iLAB0RHA%2BmWS7RUF9zfObkQvHM53nCGK%2BODyuGmutJs7QlULVUrrVfyvyYR2Udqk5hYCvQBCPtWm%2BTWp%2BxOLzrWzubbmXgachRYr1Q%3D%3D\"}]}\r\ncf-ray: a2f40b46dd5e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 45019\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":45019,"size_decoded":45808,"mime_type":"image/png","magic":"PNG image data, 458 x 473, 8-bit colormap, non-interlaced","md5":"702d9d7c212258c1857e6f6cb9ebc274","sha1":"5d07ca95270df0531d33804eca2401f754855f0e","sha256":"0f35d67e1661575f064cd77cc5457e429ae181bd0e16ac5da4881373d8d1b962","sha512":"c97d58d550efe850843c529faa23ff58b15a5794c0251f2cf49cff268dd089ce0a853f8e368f5822d11e27bcbc26deb5ce9871e3cee47184b0db4f586195bd43","ssdeep":"768:rAlMTL9ZJQ+LGZnJXvg2gymx7P9FSvPSzLv0COhsLgkA+lvjhOmLnmoOg8:rGULPFogZymx7oazgCT3FHn7U","tlshash":"1613f172154614ee76bf81ba3a6d5191b45608fc80f7e4b270c33a9e783311f5a628f6","first_seen":"2026-08-22T18:47:46.78254Z","last_seen":"2026-08-22T19:23:42.981161Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2275,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"gemtosa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemtosa.com/efootball/assets/banner.jpg","fqdn":"gemtosa.com","domain":"gemtosa.com","tld":"com"},"ip":{"addr":"104.21.68.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemtosa.com/efootball/","date":"2026-08-22T18:47:09.320Z","timestamp":1787424429320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemtosa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 21:38:41 GMT","end":"Mon, 19 Oct 2026 22:36:02 GMT"},"fingerprint":{"sha1":"D4:E5:0E:7B:11:4C:B0:B3:FB:BC:C0:61:B7:07:5A:E9:24:14:0D:F3","sha256":"0D:7F:DF:3F:AC:D2:B8:90:D6:16:F1:55:97:6A:7B:80:3A:A7:B0:AC:A3:9D:52:F4:EE:57:F6:78:AE:5F:C2:C7"}}},"request":{"raw":"GET /efootball/assets/banner.jpg HTTP/1.1\r\nHost: gemtosa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemtosa.com/efootball/assets/style1.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 29 Aug 2026 18:47:13 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 31 Mar 2025 07:40:54 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\ndate: Sat, 22 Aug 2026 18:47:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FjKskBl%2BzOHRQiGPZBkroCtvVV6APU%2BVIUfLcO%2F2LuedmvS9%2FKkAZ69o0OPqZizfHq%2F2xS6lS8ofm91sv7Y1bnR23toYV7fauVDTvOKy6%2FnV%2FJrHdLv1UJtMKP6ZFw%3D%3D\"}]}\r\ncf-ray: a2f40b5b38692efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 201026\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":201026,"size_decoded":201823,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3","md5":"5f33d7b8f3488fe25351ec436ce2114c","sha1":"f4c20cc418ac4b901ebac7c5217d9439df9ae712","sha256":"560b89a5041acaecc58bbc6ca9f003168a57f07f315e16a91738879f26d44144","sha512":"0321b790856f5acd852133243a0d581aa2f69388facc189e22cadcb34c5d5a3d38de0b28a4fad1bae73dd392261ec1435a806e1994557dc5906223757ea3ac5b","ssdeep":"6144:c5tuHjcwHBHf5H/fSIrSAmw5dNFxmC1dqn:c5cDZH5J+aFYCy","tlshash":"3d14237161c4d8d7e085fa39cae91de6218329409cb78b52784e1cdbb4ef0f56726c1b","first_seen":"2026-08-22T18:47:46.78408Z","last_seen":"2026-08-22T19:23:42.988841Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4655,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4434,"receive":221,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"gemtosa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d2v7l2267atlz5.cloudfront.net/bcdb7d0.js","fqdn":"d2v7l2267atlz5.cloudfront.net","domain":"d2v7l2267atlz5.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.6","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemtosa.com/efootball/","date":"2026-08-22T18:47:09.332Z","timestamp":1787424429332,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 12 Jul 2026 00:00:00 GMT","end":"Mon, 25 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"56:E1:B4:D4:6E:2A:82:93:D8:10:D2:E6:46:B4:0B:8A:25:2F:D8:F7","sha256":"62:DE:1C:E5:D4:24:62:AA:AF:3B:AE:00:20:10:37:20:77:34:7D:8D:F2:5C:C6:B3:34:85:25:07:AE:CB:C6:01"}}},"request":{"raw":"GET /bcdb7d0.js HTTP/1.1\r\nHost: d2v7l2267atlz5.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemtosa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 Apr 2026 13:57:28 GMT\r\ncontent-encoding: gzip\r\nserver: AmazonS3\r\ndate: Sat, 22 Aug 2026 18:38:11 GMT\r\netag: W/\"ea59f4a53936cd48199eace769df6246\"\r\nvary: Accept-Encoding\r\nx-cache: Error from cloudfront\r\nvia: 1.1 1052525f0d15ecb6749de58fe7a481c8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Qtr2uVS1zbZM7zgbHzQTRqoh4DR0419pQ9iwab-2NS0vgfTCia6SEg==\r\nage: 1116\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":27325,"size_decoded":8254,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1637), with CRLF line terminators","md5":"ea59f4a53936cd48199eace769df6246","sha1":"e70c6fad5aee18dcaecf1e61c847f6049d45ca79","sha256":"2abdec1db4f68bb8fffeb80279dd09f15db9ab88248b219d157b74c3bcd3cd4e","sha512":"f172bcd3f25e1064ed6b55dc2445a3350a5d8f15f620926bdb13bbb80418e0963412dcfac09a3fe831411f690a13b000b5e8033537e93df36b5dfca47aa5e209","ssdeep":"768:n5f26236wBXroljZ1/peRXMiH54aGz1WCyQgmip4L/4aLv0NO:U3Z7OZ1h2ayQgM","tlshash":"7ec2535aab6a1809867763badf1f5208f575032f1512c119bc7c88d85fb0d3442aaffc","first_seen":"2026-04-23T22:58:31.149268Z","last_seen":"2026-08-22T19:23:42.973232Z","times_seen":668,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":18,"connect":1,"send":0,"wait":346,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1cdbd1x576ga0.cloudfront.net/public/external/check.php?it=4462813\u0026time=1787424436475","fqdn":"d1cdbd1x576ga0.cloudfront.net","domain":"d1cdbd1x576ga0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.164.247.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemtosa.com/efootball/","date":"2026-08-22T18:47:16.482Z","timestamp":1787424436482,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 12 Jul 2026 00:00:00 GMT","end":"Mon, 25 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"56:E1:B4:D4:6E:2A:82:93:D8:10:D2:E6:46:B4:0B:8A:25:2F:D8:F7","sha256":"62:DE:1C:E5:D4:24:62:AA:AF:3B:AE:00:20:10:37:20:77:34:7D:8D:F2:5C:C6:B3:34:85:25:07:AE:CB:C6:01"}}},"request":{"raw":"GET /public/external/check.php?it=4462813\u0026time=1787424436475 HTTP/1.1\r\nHost: d1cdbd1x576ga0.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemtosa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 72\r\ndate: Sat, 22 Aug 2026 18:47:16 GMT\r\nx-powered-by: PHP/7.4.11\r\nserver: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d5ffe4a44770755efd4aa2fc68579118.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: b7NjpTtZXBASmQlCUEMZU3_d5lnZKV63l1-ya-xxGZlMiM7rLjMW-w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":72,"size_decoded":482,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-08-22T19:23:42.96102Z","times_seen":3460,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemtosa.com/efootball/assets/style2.css","fqdn":"gemtosa.com","domain":"gemtosa.com","tld":"com"},"ip":{"addr":"104.21.68.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemtosa.com/efootball/","date":"2026-08-22T18:47:05.853Z","timestamp":1787424425853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemtosa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 21:38:41 GMT","end":"Mon, 19 Oct 2026 22:36:02 GMT"},"fingerprint":{"sha1":"D4:E5:0E:7B:11:4C:B0:B3:FB:BC:C0:61:B7:07:5A:E9:24:14:0D:F3","sha256":"0D:7F:DF:3F:AC:D2:B8:90:D6:16:F1:55:97:6A:7B:80:3A:A7:B0:AC:A3:9D:52:F4:EE:57:F6:78:AE:5F:C2:C7"}}},"request":{"raw":"GET /efootball/assets/style2.css HTTP/1.1\r\nHost: gemtosa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemtosa.com/efootball/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 29 Aug 2026 18:47:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 06:34:29 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ndate: Sat, 22 Aug 2026 18:47:07 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y3HjNbR7ZWS52wsoJu8DqR2x3ZotUw6e1PqF1Gf9GpKs495tWS3%2BMun%2BM9uuiZb5L0rFQVy3lfPXeBHiZWqOLe07j%2FuQ9grOemFzWqBGObIyAlTPcqQpeNusweaK5A%3D%3D\"}]}\r\ncf-ray: a2f40b459d4b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12347\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59104,"size_decoded":13181,"mime_type":"text/css","magic":"ASCII text, with very long lines (58918)","md5":"ac183601f96dfa4e518f93127a9d1fb8","sha1":"7212c2bbfe08fce32eb76dc512fcfc45c7981ec7","sha256":"c75f4ba7633508bebece0c578b256bd46e6ef6a520f2068431ae452e5be0c9df","sha512":"cfbbe75c18d2bf00bb92421a042936ddb70a31b63771af8772c8e92407e7962b4b37c50576e176917282935f11e36373cc74e6f737e0c837e58a2742f5c0a0f8","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz8:PE0PxXE4YXJgndFTfy9lQI","tlshash":"9c43fbb8e54c01c9b731c44bef82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2026-03-27T14:16:21.386509Z","last_seen":"2026-08-22T19:23:42.975528Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1471,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"gemtosa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemtosa.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"gemtosa.com","domain":"gemtosa.com","tld":"com"},"ip":{"addr":"104.21.68.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemtosa.com/efootball/","date":"2026-08-22T18:47:06.043Z","timestamp":1787424426043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemtosa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 21:38:41 GMT","end":"Mon, 19 Oct 2026 22:36:02 GMT"},"fingerprint":{"sha1":"D4:E5:0E:7B:11:4C:B0:B3:FB:BC:C0:61:B7:07:5A:E9:24:14:0D:F3","sha256":"0D:7F:DF:3F:AC:D2:B8:90:D6:16:F1:55:97:6A:7B:80:3A:A7:B0:AC:A3:9D:52:F4:EE:57:F6:78:AE:5F:C2:C7"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: gemtosa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemtosa.com/efootball/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Mon, 24 Aug 2026 18:47:06 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o72406HVSkNUy60%2BY1f6VmRgvnuINveJ0alCE2AHg3fLTjb8M04gss32CU7%2F6rQHxQELQL8RKdu93PepmvXDPtQeJosTz69rMQp9Flh6oILOlDzhd8gIqawYZU0fNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sat, 22 Aug 2026 18:47:06 GMT\r\nserver: cloudflare\r\ncf-ray: a2f40b46cd5a2efa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":4788,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-08-22T21:25:35.837105Z","times_seen":125947,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"gemtosa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemtosa.com/efootball/assets/fa-solid-900.woff2","fqdn":"gemtosa.com","domain":"gemtosa.com","tld":"com"},"ip":{"addr":"104.21.68.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gemtosa.com/efootball/","date":"2026-08-22T18:47:09.367Z","timestamp":1787424429367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemtosa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 21:38:41 GMT","end":"Mon, 19 Oct 2026 22:36:02 GMT"},"fingerprint":{"sha1":"D4:E5:0E:7B:11:4C:B0:B3:FB:BC:C0:61:B7:07:5A:E9:24:14:0D:F3","sha256":"0D:7F:DF:3F:AC:D2:B8:90:D6:16:F1:55:97:6A:7B:80:3A:A7:B0:AC:A3:9D:52:F4:EE:57:F6:78:AE:5F:C2:C7"}}},"request":{"raw":"GET /efootball/assets/fa-solid-900.woff2 HTTP/1.1\r\nHost: gemtosa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemtosa.com/efootball/assets/style2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 29 Aug 2026 18:47:10 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 31 Mar 2025 06:34:29 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\ndate: Sat, 22 Aug 2026 18:47:10 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XjL2tdg1UHBYZ9tvgNl3nmlf0HTfKUAkrhNagSp6ooUj68VsDvda3Tw4ycAsdVu1nlyJkEfNzfnGUaps4ymLOTrFBq4C9AySGW%2FKJ9LdO%2FOHVdl4uJABzy%2FpjgkZiA%3D%3D\"}]}\r\ncf-ray: a2f40b5b88722efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 78268\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78268,"size_decoded":79059,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78268, version 331.-31196","md5":"d824df7eb2e268626a2dd9a6a741ac4e","sha1":"0ccb2c814a7e4ca12c4778821633809cb0361eaa","sha256":"9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537","sha512":"a84e13f216ea95146af285af98aef0b464cd962440e161a1c602ca2178a179e04ae4ed2a2f98d5b2eb165480ec6920e0e88de77d5f1eb7f11ed772b092daf865","ssdeep":"1536:AOhrLFyv3lzKb1hkG8l0o4HXWj2uwgcdSJSls7ZahNpUFl8a/KdDe8Y7fN5O:AOhfMv3ILc0Dm3wA4LpKKdO7a","tlshash":"c97312aba6cd77ac88dd14565f0043533afdfb35ab27864349eca2e01a300677b5712b","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-08-22T21:15:20.72003Z","times_seen":58256,"resource_available":false,"data":null}},"time_used":1388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1251,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"gemtosa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemtosa.com/efootball/assets/fa-regular-400.woff2","fqdn":"gemtosa.com","domain":"gemtosa.com","tld":"com"},"ip":{"addr":"104.21.68.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gemtosa.com/efootball/","date":"2026-08-22T18:47:09.369Z","timestamp":1787424429369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemtosa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 21:38:41 GMT","end":"Mon, 19 Oct 2026 22:36:02 GMT"},"fingerprint":{"sha1":"D4:E5:0E:7B:11:4C:B0:B3:FB:BC:C0:61:B7:07:5A:E9:24:14:0D:F3","sha256":"0D:7F:DF:3F:AC:D2:B8:90:D6:16:F1:55:97:6A:7B:80:3A:A7:B0:AC:A3:9D:52:F4:EE:57:F6:78:AE:5F:C2:C7"}}},"request":{"raw":"GET /efootball/assets/fa-regular-400.woff2 HTTP/1.1\r\nHost: gemtosa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemtosa.com/efootball/assets/style2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 29 Aug 2026 18:47:09 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 31 Mar 2025 06:34:29 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\ndate: Sat, 22 Aug 2026 18:47:09 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ra2gtVJOCfct1C%2B6Fc05hppnXfJ8jmYjRazEgLuE%2F70bvEVr6VdFiHpeSWayw4Za63UOgI1MICmkL8m1WoxinzpLH6B6u2chPrvR810EfaHUVw1B3xDzcsqi3PaVKg%3D%3D\"}]}\r\ncf-ray: a2f40b5b88732efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13224\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13224,"size_decoded":14013,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13224, version 331.-31196","md5":"b91d376b8d7646d671cd820950d5f7f1","sha1":"13517529affa39e2585c591acae6dc336b6aa917","sha256":"e42a88444448ac3d60549cc7c1ff2c8a9cac721034c073d80a14a44e79730cca","sha512":"80d50b0cf7d064332a0c8e7d9f2e294f1abed15c47644cb04b92b785af4601b683cfd3c668c0ef31dee342840063e0c395ae453650184971ba984ec8ecd3223a","ssdeep":"384:eGBfQ1X4Rpcob1t2NCu+FfLckX1edFTYdpPKW0:eMIis6cCuZnTYLyW0","tlshash":"0d52c058c9438097d01fe137fe4fe8b95c5d518aba94d3c18628d7792cb4342ace31b2","first_seen":"2023-04-05T08:50:32Z","last_seen":"2026-08-22T20:26:50.463389Z","times_seen":22915,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"gemtosa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-8QZ28X1N0N","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemtosa.com/efootball/","date":"2026-08-22T18:47:09.333Z","timestamp":1787424429333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:22 GMT","end":"Wed, 28 Oct 2026 20:42:21 GMT"},"fingerprint":{"sha1":"0C:36:58:3E:92:12:11:BD:3B:2C:77:32:B6:09:4D:99:02:12:5E:BB","sha256":"4C:2B:BB:AD:FE:07:99:6D:8E:58:81:DD:95:E6:E7:0B:1E:E2:BE:C1:0C:B5:DD:78:EB:1E:D6:2C:91:CE:30:0E"}}},"request":{"raw":"GET /gtag/js?id=G-8QZ28X1N0N HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemtosa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 22 Aug 2026 18:47:09 GMT\r\nexpires: Sat, 22 Aug 2026 18:47:09 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 171662\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":507699,"size_decoded":172266,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6662)","md5":"fb651d60f9b775c5acec7a49d3cadbca","sha1":"be6b376f1a9939cb8707a3f96908bdc0b76c9bed","sha256":"218ec81d7e7927582de2617421c2c5af6847f3fccee3065456eac1955eea68e2","sha512":"e1ed3183ecb6cf47b9c7c2cdd04acd6d3323fe4d1e9260ed5bb520e37201976a5e2b98cc3267c16db685a93758f74c8736c4977b1d0b9dcf6a5f6bbfe79b1d13","ssdeep":"6144:ujc79AY1iLZKHg0N70HtdZen0okfha5gcXsL3EQB3PDqkbzW0cHHNNbKQ:CVdLZMvNwO0lDkHPX","tlshash":"62b4e8ceb3d674665396f078503f01cba57b28a2b45cc89af189cce42e7469a4127f7c","first_seen":"2026-08-22T18:47:46.793019Z","last_seen":"2026-08-22T18:47:46.793019Z","times_seen":1,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":5,"connect":16,"send":0,"wait":38,"receive":48,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemtosa.com/efootball/assets/image1.png","fqdn":"gemtosa.com","domain":"gemtosa.com","tld":"com"},"ip":{"addr":"104.21.68.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemtosa.com/efootball/","date":"2026-08-22T18:47:06.053Z","timestamp":1787424426053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemtosa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 21:38:41 GMT","end":"Mon, 19 Oct 2026 22:36:02 GMT"},"fingerprint":{"sha1":"D4:E5:0E:7B:11:4C:B0:B3:FB:BC:C0:61:B7:07:5A:E9:24:14:0D:F3","sha256":"0D:7F:DF:3F:AC:D2:B8:90:D6:16:F1:55:97:6A:7B:80:3A:A7:B0:AC:A3:9D:52:F4:EE:57:F6:78:AE:5F:C2:C7"}}},"request":{"raw":"GET /efootball/assets/image1.png HTTP/1.1\r\nHost: gemtosa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemtosa.com/efootball/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 29 Aug 2026 18:47:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 06:34:29 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ndate: Sat, 22 Aug 2026 18:47:07 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mO95FIgz54m68iLMXACmSQRrwMA2PW2AEp%2FE7ZQR%2Brd3BWxCz337mZArPJg58txd2LFD%2FDFYMPe3DSvQsUe8JskDNMRSW29NKClk6Nl2U8%2FJmjWeJ%2Bchla4IQrmglw%3D%3D\"}]}\r\ncf-ray: a2f40b46dd5d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 428\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":428,"size_decoded":1217,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced","md5":"1c0b5c10716baddf9043744428093360","sha1":"25e5cdac73ccfe6d0ae9d186dc5669583ff07b2f","sha256":"40ce7674c9d5ae78f2777519ba1a5627e69f65846374f009f941cd1df316c065","sha512":"2825712b09a434b143f15508a504319071fe053b74763b662661c4829a537ec77a8510c09609b31dfd4c14ed96a1aef4f6ed4fc14e645ae82e2dd78b72c42383","ssdeep":"","tlshash":"f6e02bf3d21024480f8a48a063d39084aaf3049c8103c2aebe32e014ae310bc61b3b82","first_seen":"2026-03-27T14:16:21.363852Z","last_seen":"2026-08-22T19:23:42.971886Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"gemtosa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gemtosa.com/efootball/assets/script1.js","fqdn":"gemtosa.com","domain":"gemtosa.com","tld":"com"},"ip":{"addr":"104.21.68.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemtosa.com/efootball/","date":"2026-08-22T18:47:09.330Z","timestamp":1787424429330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemtosa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 21:38:41 GMT","end":"Mon, 19 Oct 2026 22:36:02 GMT"},"fingerprint":{"sha1":"D4:E5:0E:7B:11:4C:B0:B3:FB:BC:C0:61:B7:07:5A:E9:24:14:0D:F3","sha256":"0D:7F:DF:3F:AC:D2:B8:90:D6:16:F1:55:97:6A:7B:80:3A:A7:B0:AC:A3:9D:52:F4:EE:57:F6:78:AE:5F:C2:C7"}}},"request":{"raw":"GET /efootball/assets/script1.js HTTP/1.1\r\nHost: gemtosa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemtosa.com/efootball/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 07:22:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=1,i=?0\r\ndate: Sat, 22 Aug 2026 18:47:09 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OqwKNnAA9btb9vd%2BjnmiGAc%2BQ8mSNjxlOHCW3wt4OwVWpf6XYp9ryJAav6trma9bSjLcV1%2F8sPkiZWpcVCvYLTezXIqMm%2Bxuqk8Xj%2BgEtZR52hvJfqi2rOuPAZPTzw%3D%3D\"}]}\r\ncf-ray: a2f40b5b486c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1998\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8229,"size_decoded":2793,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8229), with no line terminators","md5":"24510b18e38565c290775d97f82862ae","sha1":"595b46b12bced58d1c1b244985d1b796877b0250","sha256":"3674b1b86c7b5fdc43591e7f115c5a165763cdd0b29aface6a7d25d16424dc3b","sha512":"bfdcf1a218e6bf6d24ec9cf324bbd45d55f197d99179c03ca8caaecbed57ed388ce8067f462b7cfd548e76f4b7dc20ac95181c80ca1c1350124fd39058584ea8","ssdeep":"96:vbcYayrNkoitb/7f5aynJG2A24VVSQ5aJ/kohI2IUF0u2TcqljuwicXBap5seK/A:jbj47UyX8fUF0u2TPNoti4y1IP","tlshash":"b4020fc35940c6ff33126b8b993c8dd9f211878ba94497caa29cec6d90c6517e8be135","first_seen":"2026-08-22T18:47:46.797657Z","last_seen":"2026-08-22T19:23:42.958262Z","times_seen":2,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"gemtosa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d1cdbd1x576ga0.cloudfront.net/public/external/check.php?it=4462813\u0026time=1787424451844","fqdn":"d1cdbd1x576ga0.cloudfront.net","domain":"d1cdbd1x576ga0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.164.247.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemtosa.com/efootball/","date":"2026-08-22T18:47:31.848Z","timestamp":1787424451848,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 12 Jul 2026 00:00:00 GMT","end":"Mon, 25 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"56:E1:B4:D4:6E:2A:82:93:D8:10:D2:E6:46:B4:0B:8A:25:2F:D8:F7","sha256":"62:DE:1C:E5:D4:24:62:AA:AF:3B:AE:00:20:10:37:20:77:34:7D:8D:F2:5C:C6:B3:34:85:25:07:AE:CB:C6:01"}}},"request":{"raw":"GET /public/external/check.php?it=4462813\u0026time=1787424451844 HTTP/1.1\r\nHost: d1cdbd1x576ga0.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gemtosa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 72\r\ndate: Sat, 22 Aug 2026 18:47:31 GMT\r\nx-powered-by: PHP/7.4.11\r\nserver: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d5ffe4a44770755efd4aa2fc68579118.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 9utMQC0kqKQkqhhV1um5Byhx4VU1vWqb5pKEMo0NC9qam7sd4n_DVw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":72,"size_decoded":482,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-08-22T19:23:42.96102Z","times_seen":3460,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}