{"report_id":"c3f342d6-7241-4194-b8fd-e62095252391","version":0,"status":"done","tags":[],"date":"2026-08-17T08:20:57Z","url":{"schema":"https","addr":"efootballfreecoins.com/","fqdn":"efootballfreecoins.com","domain":"efootballfreecoins.com","tld":"com"},"ip":{"addr":"198.54.126.15","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"efootballfreecoins.com/","fqdn":"efootballfreecoins.com","domain":"efootballfreecoins.com","tld":"com"},"title":"eFootball Free Coins – Get Up to 350K Coins \u0026 GP (2026)","dom":{"size":9434,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (654)","md5":"7e5f756c95384c933538c8fef28c68c1","sha1":"5bfb02426b3964936e89e1a6c2a70f3a72e1d71e","sha256":"edb9471037784ce10ff8126403c9d79892e09ec3dd2ddbc17f9b54353b7ff585","sha512":"470ac5f491b5cd00e5626b07cba223ce7b17317b5de8de9a2047be11c78b857cf8d8000ab28b5ea9c83b0815082c60b99f0ba7adb7e25ce17b36e9366a6d1a25","ssdeep":"192:Brdf/K9lFdQBMi7jHHI+nhQqjgObSs/42A2UBJLC:Brdf/K9lFdQBMi7jHHI+nDbRpUjC","tlshash":"88122072e7e06827519786d03aa1aa5a7ed0fb03dd5a4182b1fc1ac80fd7dc7cd63609","dom_hash":"domhash49294d7eaae25a011dd8d2bac2478b9b","first_seen":"2026-08-17T08:20:58.935076Z","last_seen":"2026-08-17T08:21:24.069793Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"efootballfreecoins.com/","fqdn":"efootballfreecoins.com","domain":"efootballfreecoins.com","tld":"com"},"ip":{"addr":"198.54.126.15","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-21T08:20:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballfreecoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballfreecoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"efootballfreecoins.com","ip":{"addr":"198.54.126.15","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2025-01-04","domain_rank":1089194,"first_seen":"2025-11-18T01:26:18.813953Z","last_seen":"2025-11-18T01:26:18.813954Z","alert_count":14,"request_count":7,"received_data":86212,"sent_data":3519,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-16T22:33:33.289447Z","alert_count":0,"request_count":1,"received_data":499458,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"efootballfreecoins.com/","fqdn":"efootballfreecoins.com","domain":"efootballfreecoins.com","tld":"com"},"ip":{"addr":"198.54.126.15","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"63e2053cf072cedc6d4a749b6b51d080","sha1":"0f082d53d69e9a6de68c534bb461b23990754787","sha256":"f08335b14151caf5eb9bc769881b4a1700a1faefc76b04054b35b68fc5894fc3","sha512":"1b2534241c4e9e31d75540acf33730b81bb9fc0490af6f8e6f1a074ee7e447afdf0863d0f847efe64d27d50e1b30b7f0158c2f02ed552261fa49ff24bc3b07a1","ssdeep":"","tlshash":"15c02b8c310e1c7141e72700cb3fba00f0023324a4f06931080a23045d20e13e744c54","size":149,"data":"","first_seen":"2026-08-17T08:20:58.973145Z","last_seen":"2026-08-17T08:21:24.087809Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"efootballfreecoins.com/js/app-min.js","fqdn":"efootballfreecoins.com","domain":"efootballfreecoins.com","tld":"com"},"ip":{"addr":"198.54.126.15","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5485da71ca988f79e0bb0d4c87c12d72","sha1":"4fae28a1cf2187db756329ed75f0d6a5a2ccb2e7","sha256":"8af0f8f3e44e6183960e92ba7bbf0ad49171227b75541132adf2b9c31924fca1","sha512":"fffea23cad78dc0b4de123b96ffc65a7ff14626204ae0ebf4289cd52945d9fd58e48e78f93c90f82f4f4d337d490ad5afd8dca2a4a4ea6c20f8bb04a5e445baf","ssdeep":"192:+2hLy9vmys+5YEQISbBcyXLdkC31Q6YZYgmc:pdy9vmys+5Y2yXLdkl6YdP","tlshash":"c2d194a7b8de1831029a45b360e61f8d7bb0a1082e014981bc7cd4e547bdf45db73ed9","size":6586,"data":"","first_seen":"2026-08-17T08:20:58.958046Z","last_seen":"2026-08-17T08:21:24.074559Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-1HKKTRZCR7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d356a94d7c3597628978abf172d8b511","sha1":"c099f6bf7fdb54d38408896486c5c7c0b4a722cd","sha256":"3fb5a596813123ce9b6641bba82f940f9f2c3fa802bd5e0f3c52d922fc19a42a","sha512":"e36e63a4cd2dd3e3b011386895a6b9b78d9efaec88eede61e9632bdf819b99ae65df41f955ecf81f4105c993f5f3f6dc9588e85e8b9c952bb4f393616f194423","ssdeep":"6144:1MIBD/1ESJaC0XX3iRxnOF7hcgLsegErl3POiDrYMAwbGswDvRN:GunaxXX+xOdr+wGs2X","tlshash":"b7b4e88db3d674625396f078903f01cba57b29a2b45cc89af189cce42e7469a4137f7c","size":498854,"data":"","first_seen":"2026-08-17T08:20:58.953036Z","last_seen":"2026-08-17T08:21:24.080055Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"efootballfreecoins.com/","fqdn":"efootballfreecoins.com","domain":"efootballfreecoins.com","tld":"com"},"ip":{"addr":"198.54.126.15","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-17T08:20:26.345Z","timestamp":1786954826345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"efootballfreecoins.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 30 Jul 2026 16:50:04 GMT","end":"Sat, 13 Feb 2027 16:57:34 GMT"},"fingerprint":{"sha1":"21:E4:BD:EB:21:A4:99:09:5F:6B:58:07:5C:47:43:A9:43:DD:CF:A4","sha256":"3D:32:47:B8:1E:A6:C1:2A:9B:46:AB:B0:F0:68:12:AE:B5:B1:62:A0:56:AB:B4:83:58:E6:D8:66:0F:17:13:59"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: efootballfreecoins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Wed, 05 Aug 2026 22:37:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2571\r\ndate: Mon, 17 Aug 2026 08:20:26 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":9513,"size_decoded":2853,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (582)","md5":"af961a04f27509165b506d9bd2de114e","sha1":"a4768f451a06c3a0355750f070c50d504b986665","sha256":"a3e208a6d9d90209155312a7b5755606439fcc461f38ccd3a1059ba19cda900c","sha512":"fc106e576d2e2cf06d44a940c32023c09282e4f7b6b866a4987acaef925069956a218e3eb5ed02bc9f0d1c25619b9a4d107e67298961cddf5141d4a8db77844e","ssdeep":"192:xref/KObFdQBDE7jHHI+ehaejNOiSs/XA2UBJL2AM:xref/KObFdQBDE7jHHI+esiRhUjjM","tlshash":"9f121072e7e06827519786d03aa1aa5a7ed0fb03dd5a0182b1fc1ac80fd7dc6cd63609","first_seen":"2026-08-17T08:20:58.947422Z","last_seen":"2026-08-17T08:21:24.078329Z","times_seen":2,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":-1,"dns":20,"connect":166,"send":0,"wait":170,"receive":0,"ssl":339},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballfreecoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballfreecoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-1HKKTRZCR7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://efootballfreecoins.com/","date":"2026-08-17T08:20:27.415Z","timestamp":1786954827415,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:22 GMT","end":"Wed, 28 Oct 2026 20:42:21 GMT"},"fingerprint":{"sha1":"0C:36:58:3E:92:12:11:BD:3B:2C:77:32:B6:09:4D:99:02:12:5E:BB","sha256":"4C:2B:BB:AD:FE:07:99:6D:8E:58:81:DD:95:E6:E7:0B:1E:E2:BE:C1:0C:B5:DD:78:EB:1E:D6:2C:91:CE:30:0E"}}},"request":{"raw":"GET /gtag/js?id=G-1HKKTRZCR7 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://efootballfreecoins.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 17 Aug 2026 08:20:27 GMT\r\nexpires: Mon, 17 Aug 2026 08:20:27 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 169666\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":498854,"size_decoded":170270,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6662)","md5":"d356a94d7c3597628978abf172d8b511","sha1":"c099f6bf7fdb54d38408896486c5c7c0b4a722cd","sha256":"3fb5a596813123ce9b6641bba82f940f9f2c3fa802bd5e0f3c52d922fc19a42a","sha512":"e36e63a4cd2dd3e3b011386895a6b9b78d9efaec88eede61e9632bdf819b99ae65df41f955ecf81f4105c993f5f3f6dc9588e85e8b9c952bb4f393616f194423","ssdeep":"6144:1MIBD/1ESJaC0XX3iRxnOF7hcgLsegErl3POiDrYMAwbGswDvRN:GunaxXX+xOdr+wGs2X","tlshash":"b7b4e88db3d674625396f078903f01cba57b29a2b45cc89af189cce42e7469a4137f7c","first_seen":"2026-08-17T08:20:58.953036Z","last_seen":"2026-08-17T08:21:24.080055Z","times_seen":2,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":38,"receive":49,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"efootballfreecoins.com/images/banner-icon.webp","fqdn":"efootballfreecoins.com","domain":"efootballfreecoins.com","tld":"com"},"ip":{"addr":"198.54.126.15","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://efootballfreecoins.com/","date":"2026-08-17T08:20:27.417Z","timestamp":1786954827417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"efootballfreecoins.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 30 Jul 2026 16:50:04 GMT","end":"Sat, 13 Feb 2027 16:57:34 GMT"},"fingerprint":{"sha1":"21:E4:BD:EB:21:A4:99:09:5F:6B:58:07:5C:47:43:A9:43:DD:CF:A4","sha256":"3D:32:47:B8:1E:A6:C1:2A:9B:46:AB:B0:F0:68:12:AE:B5:B1:62:A0:56:AB:B4:83:58:E6:D8:66:0F:17:13:59"}}},"request":{"raw":"GET /images/banner-icon.webp HTTP/1.1\r\nHost: efootballfreecoins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://efootballfreecoins.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Aug 2026 08:20:27 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 21 May 2026 09:15:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7398\r\ndate: Mon, 17 Aug 2026 08:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7398,"size_decoded":7715,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 131x131, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a049f346d64c818e3ae64c750ac09e83","sha1":"2d1bd3d4fb223fa1488a3b1b310c3bcb13c17bfc","sha256":"3d0368f3f7fe4376b736c20693ec7e63cf88b462c8a0d8bbf814ae885e1ec722","sha512":"d420e1583c062c59f985aa609a2a7adadb7e1685b121794439be6e34775c47e26da263b736ba7bfe2aa385cad722b368822ca6a92bff49eda50e223a76ede7a6","ssdeep":"96:lykG2ycCn+uxWVM9H0FEsGVitbJC4BzaNc9SMLbUTujLEQDgYzf1fi/X1Zmfzspc:2/nuu90FEPACFm9H9jfZfcXOrsp8jiNs","tlshash":"4ee1af884a24f243d97de32f922ed1566f2f147714186abb880aead7f50c84f111af76","first_seen":"2026-08-17T08:20:58.956237Z","last_seen":"2026-08-17T08:21:24.082572Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballfreecoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballfreecoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"efootballfreecoins.com/js/app-min.js","fqdn":"efootballfreecoins.com","domain":"efootballfreecoins.com","tld":"com"},"ip":{"addr":"198.54.126.15","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://efootballfreecoins.com/","date":"2026-08-17T08:20:27.420Z","timestamp":1786954827420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"efootballfreecoins.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 30 Jul 2026 16:50:04 GMT","end":"Sat, 13 Feb 2027 16:57:34 GMT"},"fingerprint":{"sha1":"21:E4:BD:EB:21:A4:99:09:5F:6B:58:07:5C:47:43:A9:43:DD:CF:A4","sha256":"3D:32:47:B8:1E:A6:C1:2A:9B:46:AB:B0:F0:68:12:AE:B5:B1:62:A0:56:AB:B4:83:58:E6:D8:66:0F:17:13:59"}}},"request":{"raw":"GET /js/app-min.js HTTP/1.1\r\nHost: efootballfreecoins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://efootballfreecoins.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 05 Aug 2026 22:37:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1964\r\ndate: Mon, 17 Aug 2026 08:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6586,"size_decoded":2252,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (6586), with no line terminators","md5":"5485da71ca988f79e0bb0d4c87c12d72","sha1":"4fae28a1cf2187db756329ed75f0d6a5a2ccb2e7","sha256":"8af0f8f3e44e6183960e92ba7bbf0ad49171227b75541132adf2b9c31924fca1","sha512":"fffea23cad78dc0b4de123b96ffc65a7ff14626204ae0ebf4289cd52945d9fd58e48e78f93c90f82f4f4d337d490ad5afd8dca2a4a4ea6c20f8bb04a5e445baf","ssdeep":"192:+2hLy9vmys+5YEQISbBcyXLdkC31Q6YZYgmc:pdy9vmys+5Y2yXLdkl6YdP","tlshash":"c2d194a7b8de1831029a45b360e61f8d7bb0a1082e014981bc7cd4e547bdf45db73ed9","first_seen":"2026-08-17T08:20:58.958046Z","last_seen":"2026-08-17T08:21:24.074559Z","times_seen":2,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballfreecoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballfreecoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"efootballfreecoins.com/apple-touch-icon.png","fqdn":"efootballfreecoins.com","domain":"efootballfreecoins.com","tld":"com"},"ip":{"addr":"198.54.126.15","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://efootballfreecoins.com/","date":"2026-08-17T08:20:27.717Z","timestamp":1786954827717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"efootballfreecoins.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 30 Jul 2026 16:50:04 GMT","end":"Sat, 13 Feb 2027 16:57:34 GMT"},"fingerprint":{"sha1":"21:E4:BD:EB:21:A4:99:09:5F:6B:58:07:5C:47:43:A9:43:DD:CF:A4","sha256":"3D:32:47:B8:1E:A6:C1:2A:9B:46:AB:B0:F0:68:12:AE:B5:B1:62:A0:56:AB:B4:83:58:E6:D8:66:0F:17:13:59"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: efootballfreecoins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://efootballfreecoins.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Aug 2026 08:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 15 Jan 2025 09:14:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26061\r\ndate: Mon, 17 Aug 2026 08:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26061,"size_decoded":26378,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"e9b49b3ad2341a8609dcd3a86cbc0e7d","sha1":"dab2ebbbccbe264871a6b388670f93bc1ce83a41","sha256":"e4ff2ab26466d9f6b8f440377cc5da35e8a49d3e5000062ada3d4da2be1263e6","sha512":"cd12e12434368cb9fc7a3e954436a6779d49133295bc691000965c55a4a02506941a4d4351cbceac3b55f15a22595f6ef76d5c2a9cefadf40de142d7bc643e7f","ssdeep":"768:G+TY3zcIy1ZQKTUn3W0+QMo/ThW1d3N1R1LV6g:kRIYnm0kIdW1dN1DX","tlshash":"2bc2f1d8e57a840e0b8cd7325920ea1875b7109362379f1199407e4f3bfbaa94a353f7","first_seen":"2026-08-17T08:20:58.962243Z","last_seen":"2026-08-17T08:21:24.086235Z","times_seen":2,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballfreecoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballfreecoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"efootballfreecoins.com/css/main-min.css","fqdn":"efootballfreecoins.com","domain":"efootballfreecoins.com","tld":"com"},"ip":{"addr":"198.54.126.15","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://efootballfreecoins.com/","date":"2026-08-17T08:20:27.414Z","timestamp":1786954827414,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"efootballfreecoins.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 30 Jul 2026 16:50:04 GMT","end":"Sat, 13 Feb 2027 16:57:34 GMT"},"fingerprint":{"sha1":"21:E4:BD:EB:21:A4:99:09:5F:6B:58:07:5C:47:43:A9:43:DD:CF:A4","sha256":"3D:32:47:B8:1E:A6:C1:2A:9B:46:AB:B0:F0:68:12:AE:B5:B1:62:A0:56:AB:B4:83:58:E6:D8:66:0F:17:13:59"}}},"request":{"raw":"GET /css/main-min.css HTTP/1.1\r\nHost: efootballfreecoins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://efootballfreecoins.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Aug 2026 08:20:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 May 2026 09:15:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2173\r\ndate: Mon, 17 Aug 2026 08:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9231,"size_decoded":2533,"mime_type":"text/css","magic":"ASCII text, with very long lines (9231), with no line terminators","md5":"c9c2e869289bf2b2931c70d1ad569750","sha1":"c94d458d45d0aca1ec0010c178ef517535f99d03","sha256":"2545c89c9197cc6ef4c528e702df1025e476add5a8d2f24cc2bd5b25ff9a23ea","sha512":"14af31b880a591e967ab6a0d584a99c65763ef29189e33c8c8adef1e6c996f89b55441f6536ebfd23551fdf409b9b42a4d0ecb8a033c62b95c34b907daa42bd3","ssdeep":"192:38lA+tvWX4OdQlSuqCtZy44D/1NYaoeCUMfH7pp4WtRc23/ZfC:D+IqBqYUeFpE84","tlshash":"31127321ea996018f17bc4e5b4c0aede71a8c107e2335bede9a6317ec9c619b173074c","first_seen":"2026-08-17T08:20:58.964921Z","last_seen":"2026-08-17T08:21:24.072623Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballfreecoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballfreecoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"efootballfreecoins.com/images/banner-bg.webp","fqdn":"efootballfreecoins.com","domain":"efootballfreecoins.com","tld":"com"},"ip":{"addr":"198.54.126.15","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://efootballfreecoins.com/","date":"2026-08-17T08:20:27.610Z","timestamp":1786954827610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"efootballfreecoins.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 30 Jul 2026 16:50:04 GMT","end":"Sat, 13 Feb 2027 16:57:34 GMT"},"fingerprint":{"sha1":"21:E4:BD:EB:21:A4:99:09:5F:6B:58:07:5C:47:43:A9:43:DD:CF:A4","sha256":"3D:32:47:B8:1E:A6:C1:2A:9B:46:AB:B0:F0:68:12:AE:B5:B1:62:A0:56:AB:B4:83:58:E6:D8:66:0F:17:13:59"}}},"request":{"raw":"GET /images/banner-bg.webp HTTP/1.1\r\nHost: efootballfreecoins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://efootballfreecoins.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Aug 2026 08:20:27 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 21 May 2026 09:15:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9816\r\ndate: Mon, 17 Aug 2026 08:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9816,"size_decoded":10133,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x155, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e5714b4cde7425895f3e630fd20a0c05","sha1":"10ae9eb8250c7c726faeafaa298cfb7c056ba6b7","sha256":"0934709be1513e18c55b883e3322c014c20ada6abe95e2491b30a070c6bc6244","sha512":"26f65d59996605010f03a34464f3fefca2940bb76ce885bca7b3abda22e151c80d9e87bfc44443168e8f08f06f9078836aa5320cfd06ffff6cff0be555f5c089","ssdeep":"192:q6EAR9jwxeVXa+aRi03Jo8Kgt01I+Eo9avmnzX0Rqs9Bnlj8:MARK8a+wti1ITLunr0F7y","tlshash":"3d12bf30cfc462bcf69654aa575af5ab8c009387a9e4fb34c6110e63087a55120f9f21","first_seen":"2026-08-17T08:20:58.967842Z","last_seen":"2026-08-17T08:21:24.07624Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballfreecoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballfreecoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"efootballfreecoins.com/favicon.ico","fqdn":"efootballfreecoins.com","domain":"efootballfreecoins.com","tld":"com"},"ip":{"addr":"198.54.126.15","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://efootballfreecoins.com/","date":"2026-08-17T08:20:27.718Z","timestamp":1786954827718,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"efootballfreecoins.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 30 Jul 2026 16:50:04 GMT","end":"Sat, 13 Feb 2027 16:57:34 GMT"},"fingerprint":{"sha1":"21:E4:BD:EB:21:A4:99:09:5F:6B:58:07:5C:47:43:A9:43:DD:CF:A4","sha256":"3D:32:47:B8:1E:A6:C1:2A:9B:46:AB:B0:F0:68:12:AE:B5:B1:62:A0:56:AB:B4:83:58:E6:D8:66:0F:17:13:59"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: efootballfreecoins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://efootballfreecoins.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Aug 2026 08:20:27 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Sun, 05 Jan 2025 10:30:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15406\r\ndate: Mon, 17 Aug 2026 08:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15406,"size_decoded":15726,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"7c3cb358155c474c23bd75375555e263","sha1":"c4a23a282c8a363c5d58f60abf1e973c73482b09","sha256":"6cb2a4bb8231d1e94caafdc9b4315eea42e96236227c44ab7a41f35dd56a9a6f","sha512":"59f9b5e7423079e33c26c28c14ca3d1471310f083235bb2fe7855114a4a75420d1502a1df51b23667ca7f54e3e25526128f586f8f33b079eb730f79357fc1fd8","ssdeep":"192:UX+ViopLU4lkq6NUcOioaDmhwYH91j/eQXXXXXXXXXXXXX/Vm+6f655PE:UOy4KiymhFdxeQXXXXXXXXXXXXXDf5","tlshash":"ac62f38c712290beddb37af2f18e17e9551538fba61d6f000078b9181d92eb6de1b183","first_seen":"2026-08-17T08:20:58.970161Z","last_seen":"2026-08-17T08:21:24.086985Z","times_seen":2,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballfreecoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballfreecoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}