{"report_id":"eb461970-4e71-4a7c-b461-7221873d4eed","version":0,"status":"done","tags":[],"date":"2026-08-17T08:11:12Z","url":{"schema":"https","addr":"efootballcoins.com/en/","fqdn":"efootballcoins.com","domain":"efootballcoins.com","tld":"com"},"ip":{"addr":"68.66.216.47","port":0,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"efootballcoins.com/en/","fqdn":"efootballcoins.com","domain":"efootballcoins.com","tld":"com"},"title":"Get Free eFootball™ Coins","dom":{"size":14092,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (323)","md5":"2cd26ac3ccd1f377d0d99d249c3741b9","sha1":"2f0ff62736663d46d24b36bd50f2301bb144149f","sha256":"0d2ad00c78eb4a0ef1ebb2debf78e449b8bfc263150641ff67bc47b636e8c431","sha512":"55eb7902191c79114ac64d52014f6fb599465a68eab6ee579cb7757f1ae5d9ac89a177b55422544b9399545bf5783178fa34e8b5169e37cf77929c2c6e5835f1","ssdeep":"192:hT1XwYUJZpzqVAiUIuzAX0fOjgW+H1VkgXHNnw49KvXHUSpQb/U1plt7FiIQrWcH:qZ63eCE2rIV5jWt4VclISWiriviWiPy","tlshash":"f15285232aa11025b09796a939e1578e2735c103e907953e7eed65e4cfcedc1c9f338a","dom_hash":"domhash1ae60c065378f9aa9e375b9c435f67a9","first_seen":"2026-07-30T15:43:55.90361Z","last_seen":"2026-08-17T08:12:02.12736Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"efootballcoins.com/en/","fqdn":"efootballcoins.com","domain":"efootballcoins.com","tld":"com"},"ip":{"addr":"68.66.216.47","port":0,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-21T08:11:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballcoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballcoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"efootballcoins.com","ip":{"addr":"68.66.216.47","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"domain_registered":"2026-03-21","domain_rank":0,"first_seen":"2026-07-30T15:43:51.934915Z","last_seen":"2026-07-30T15:43:51.934915Z","alert_count":20,"request_count":10,"received_data":153155,"sent_data":5060,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"efootballcoins.com/en/","fqdn":"efootballcoins.com","domain":"efootballcoins.com","tld":"com"},"ip":{"addr":"68.66.216.47","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b99387078921cd5fba4ed9facc6f174","sha1":"853afe382de2a353544dd273413910df8f4b8461","sha256":"04b47a11a6ebb3eee7f315ee77232f84056d9ae27beac181f3f3e15a4d9935ee","sha512":"43713477ce097a7079373b6485c78703e3c9bddba969b80c5cd1372595168b1e24aa2d171fcccef7d46ce901bcc816b7ee2766fbd983b647611577a08cc81077","ssdeep":"","tlshash":"5141cd5b3eb60430cd8b266b7991478c7a3240473d439546bdbc86940ffce80e8ba7e6","size":2343,"data":"","first_seen":"2026-07-30T15:43:55.911411Z","last_seen":"2026-08-17T08:12:02.152497Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"efootballcoins.com/efootball.webp","fqdn":"efootballcoins.com","domain":"efootballcoins.com","tld":"com"},"ip":{"addr":"68.66.216.47","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://efootballcoins.com/en/","date":"2026-08-17T08:10:46.430Z","timestamp":1786954246430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.efootballcoins.com.zznmcpwg.a2hosted.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 20:16:26 GMT","end":"Mon, 19 Oct 2026 20:16:25 GMT"},"fingerprint":{"sha1":"F3:82:EF:A2:AF:FE:0D:92:B0:25:AD:B3:F6:B8:4D:84:E6:06:5E:2B","sha256":"43:41:59:19:36:8D:5C:F3:FA:3A:E8:18:9D:AA:38:4A:1B:96:6F:6F:CC:86:38:59:DA:8A:CE:3F:3E:77:B4:6A"}}},"request":{"raw":"GET /efootball.webp HTTP/1.1\r\nHost: efootballcoins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://efootballcoins.com/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Aug 2026 08:10:46 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 22 May 2026 18:00:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 81386\r\ndate: Mon, 17 Aug 2026 08:10:46 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":81386,"size_decoded":81779,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6bd30ade0089ad872870d0cf85fd3240","sha1":"6b8796903c42611e38f34d72b49c9e313d7770d1","sha256":"3d85a15b427885b7b19716db422bf8e8482fd08d7ac37eaa7e48849999642b1b","sha512":"048ab244551f4620b6b9ff727e42df19f4013dd697a31064789f518c48f2b4b503757203029d9e3e6b142a4929c7e6b393338a448acaa8d5412939a14cc0c982","ssdeep":"1536:mmeoucMPgRjjkcGxEXQEG1/6RiNe4oz7WToXIlCIPA2ocqE8yCVdhz:mm/ucMPVcGHp1BNe3WUOCIsE8FPhz","tlshash":"6c8302600e4d9f5ef04a2466b81d0af834ed48bb1123e7b0258e9427ab4794edddd1ea","first_seen":"2026-07-30T15:43:55.909778Z","last_seen":"2026-08-17T08:12:02.130761Z","times_seen":4,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballcoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballcoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"efootballcoins.com/coin3.webp","fqdn":"efootballcoins.com","domain":"efootballcoins.com","tld":"com"},"ip":{"addr":"68.66.216.47","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://efootballcoins.com/en/","date":"2026-08-17T08:10:46.434Z","timestamp":1786954246434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.efootballcoins.com.zznmcpwg.a2hosted.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 20:16:26 GMT","end":"Mon, 19 Oct 2026 20:16:25 GMT"},"fingerprint":{"sha1":"F3:82:EF:A2:AF:FE:0D:92:B0:25:AD:B3:F6:B8:4D:84:E6:06:5E:2B","sha256":"43:41:59:19:36:8D:5C:F3:FA:3A:E8:18:9D:AA:38:4A:1B:96:6F:6F:CC:86:38:59:DA:8A:CE:3F:3E:77:B4:6A"}}},"request":{"raw":"GET /coin3.webp HTTP/1.1\r\nHost: efootballcoins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://efootballcoins.com/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Aug 2026 08:10:46 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 22 May 2026 17:59:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4014\r\ndate: Mon, 17 Aug 2026 08:10:46 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4014,"size_decoded":4406,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"11e1242735a18e8794c76016304a35b9","sha1":"3892a2960fb5c8a3401502d8463b4cc16b475b80","sha256":"bcea53dda81315d423e88781494c11b92e9e1a4ed2634657e643ee98f172f33a","sha512":"e0160c21ff35dfd52f5e62244655dae5aa3ff02eac7d01ddc78cbdbef75095a3561dc30ff552bf1436cb87748038267f25702806d272326c1d5862311d58e352","ssdeep":"","tlshash":"8f816c15617476268108fe7b009f66dd2ab5b151e0aac0a1b321cf79ad6acb24a91c7c","first_seen":"2025-11-02T15:59:21.372145Z","last_seen":"2026-08-17T08:12:02.138818Z","times_seen":6,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballcoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballcoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"efootballcoins.com/eFootballSans-Bold.ttf","fqdn":"efootballcoins.com","domain":"efootballcoins.com","tld":"com"},"ip":{"addr":"68.66.216.47","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://efootballcoins.com/en/","date":"2026-08-17T08:10:46.665Z","timestamp":1786954246665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.efootballcoins.com.zznmcpwg.a2hosted.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 20:16:26 GMT","end":"Mon, 19 Oct 2026 20:16:25 GMT"},"fingerprint":{"sha1":"F3:82:EF:A2:AF:FE:0D:92:B0:25:AD:B3:F6:B8:4D:84:E6:06:5E:2B","sha256":"43:41:59:19:36:8D:5C:F3:FA:3A:E8:18:9D:AA:38:4A:1B:96:6F:6F:CC:86:38:59:DA:8A:CE:3F:3E:77:B4:6A"}}},"request":{"raw":"GET /eFootballSans-Bold.ttf HTTP/1.1\r\nHost: efootballcoins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://efootballcoins.com/en/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Mon, 17 Aug 2026 08:10:46 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":796,"size_decoded":1129,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-08-17T09:26:18.40309Z","times_seen":53567,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballcoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballcoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"efootballcoins.com/coins.png","fqdn":"efootballcoins.com","domain":"efootballcoins.com","tld":"com"},"ip":{"addr":"68.66.216.47","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://efootballcoins.com/en/","date":"2026-08-17T08:10:46.775Z","timestamp":1786954246775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.efootballcoins.com.zznmcpwg.a2hosted.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 20:16:26 GMT","end":"Mon, 19 Oct 2026 20:16:25 GMT"},"fingerprint":{"sha1":"F3:82:EF:A2:AF:FE:0D:92:B0:25:AD:B3:F6:B8:4D:84:E6:06:5E:2B","sha256":"43:41:59:19:36:8D:5C:F3:FA:3A:E8:18:9D:AA:38:4A:1B:96:6F:6F:CC:86:38:59:DA:8A:CE:3F:3E:77:B4:6A"}}},"request":{"raw":"GET /coins.png HTTP/1.1\r\nHost: efootballcoins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://efootballcoins.com/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Mon, 24 Aug 2026 08:10:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 May 2026 18:08:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1492\r\ndate: Mon, 17 Aug 2026 08:10:46 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1492,"size_decoded":1883,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"a213d0a68d29d3dd88c87b5f99a3b417","sha1":"abf98fcb7aab6d5ae9747d990c09293f4791b666","sha256":"3fd83f46ab8c748a0839bc3b4553f413e4ae5840d079e2818ed056cec0ea65db","sha512":"bbbf697d1ac9e02ece32d5f84a8a376e1a8e227b4fcf9f519d5aa85a839c5ba05508a3c725beea7a304a80eb5b0ac7b07e62f4476172c99b5a1c627c13dc6666","ssdeep":"","tlshash":"b531f91e8e2d518efc7520867b63d9583f7ab5d8b470e5634acdc13352b096640b887a","first_seen":"2025-08-24T08:07:28.441857Z","last_seen":"2026-08-17T08:26:36.56291Z","times_seen":14,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballcoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballcoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"efootballcoins.com/fonts/eFootballSans-Regular.woff2","fqdn":"efootballcoins.com","domain":"efootballcoins.com","tld":"com"},"ip":{"addr":"68.66.216.47","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://efootballcoins.com/en/","date":"2026-08-17T08:10:46.415Z","timestamp":1786954246415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.efootballcoins.com.zznmcpwg.a2hosted.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 20:16:26 GMT","end":"Mon, 19 Oct 2026 20:16:25 GMT"},"fingerprint":{"sha1":"F3:82:EF:A2:AF:FE:0D:92:B0:25:AD:B3:F6:B8:4D:84:E6:06:5E:2B","sha256":"43:41:59:19:36:8D:5C:F3:FA:3A:E8:18:9D:AA:38:4A:1B:96:6F:6F:CC:86:38:59:DA:8A:CE:3F:3E:77:B4:6A"}}},"request":{"raw":"GET /fonts/eFootballSans-Regular.woff2 HTTP/1.1\r\nHost: efootballcoins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://efootballcoins.com/en/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\nlast-modified: Thu, 15 Dec 2022 16:02:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 38472\r\ndate: Mon, 17 Aug 2026 08:10:46 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38472,"size_decoded":38844,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38472, version 1.0","md5":"8a22a6cdf7df5550ba8528e553bb5a0a","sha1":"aa7513426c68436fa520a12d22746c56ad5b1882","sha256":"be30f548b0bb940889e92a297d4ea77b772e96b17af4ef04a78bcb972291be17","sha512":"99cf05f96705fc9d4be9282ab02c1d829e801ea734c372590a16f2d3fc66b1606410c16512e8e3fc8525b3d4877165829333d4f74507a7d1e74c6c3ce95bce8d","ssdeep":"768:/yodLckbIPuznOFbXBtMKV4UTWE2xRGDxygcwGJqRTg1BzRD0qe2tJQRtq1:KodQMI2zg9QKDQ7FJY6RD0qp1","tlshash":"a803e1217ad3c2a9ece0297164c3c0e365d69c385fbee05364a46789de5c81feb4e642","first_seen":"2026-05-01T20:50:07.886619Z","last_seen":"2026-08-17T08:12:02.133928Z","times_seen":5,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballcoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballcoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"efootballcoins.com/coin1.webp","fqdn":"efootballcoins.com","domain":"efootballcoins.com","tld":"com"},"ip":{"addr":"68.66.216.47","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://efootballcoins.com/en/","date":"2026-08-17T08:10:46.432Z","timestamp":1786954246432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.efootballcoins.com.zznmcpwg.a2hosted.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 20:16:26 GMT","end":"Mon, 19 Oct 2026 20:16:25 GMT"},"fingerprint":{"sha1":"F3:82:EF:A2:AF:FE:0D:92:B0:25:AD:B3:F6:B8:4D:84:E6:06:5E:2B","sha256":"43:41:59:19:36:8D:5C:F3:FA:3A:E8:18:9D:AA:38:4A:1B:96:6F:6F:CC:86:38:59:DA:8A:CE:3F:3E:77:B4:6A"}}},"request":{"raw":"GET /coin1.webp HTTP/1.1\r\nHost: efootballcoins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://efootballcoins.com/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Aug 2026 08:10:46 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 22 May 2026 17:59:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3522\r\ndate: Mon, 17 Aug 2026 08:10:46 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3522,"size_decoded":3914,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"462ed04540f27921c24e0008d1deae79","sha1":"2aa1b686cc1874dda73b346fd7f48824c5c3d860","sha256":"af792c1f571712be9b6cffbbb58e9dcb923bd6a13e2b1ae16f35eb193a0aa99b","sha512":"19323dd8e675206ec589ec293e596e58bc6be498dfb1db4d9e426da50aaea0e29a80d6279649f37d198b4327ad0f5b833ea943ba329d9c4ac891b774d255f073","ssdeep":"","tlshash":"40714cdbd66c82b3f036e1151164278c701f54fd2c5f1f9ea6aa86f28a2976807124dd","first_seen":"2025-11-02T15:59:21.389922Z","last_seen":"2026-08-17T08:12:02.134595Z","times_seen":6,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballcoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballcoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"efootballcoins.com/coin2.webp","fqdn":"efootballcoins.com","domain":"efootballcoins.com","tld":"com"},"ip":{"addr":"68.66.216.47","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://efootballcoins.com/en/","date":"2026-08-17T08:10:46.433Z","timestamp":1786954246433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.efootballcoins.com.zznmcpwg.a2hosted.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 20:16:26 GMT","end":"Mon, 19 Oct 2026 20:16:25 GMT"},"fingerprint":{"sha1":"F3:82:EF:A2:AF:FE:0D:92:B0:25:AD:B3:F6:B8:4D:84:E6:06:5E:2B","sha256":"43:41:59:19:36:8D:5C:F3:FA:3A:E8:18:9D:AA:38:4A:1B:96:6F:6F:CC:86:38:59:DA:8A:CE:3F:3E:77:B4:6A"}}},"request":{"raw":"GET /coin2.webp HTTP/1.1\r\nHost: efootballcoins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://efootballcoins.com/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 24 Aug 2026 08:10:46 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 22 May 2026 17:59:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3772\r\ndate: Mon, 17 Aug 2026 08:10:46 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3772,"size_decoded":4164,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1ae2b1202b0b5e7000367a38de20915e","sha1":"29e8d0b90481db4ba9148681ba88bf4ef09e5d8e","sha256":"83b3ddace7ee9eb2c0b28bce62ee3f3ff8f6352cd5aa082a41f47eecb578ef1b","sha512":"2d0efb2ffd42cdae4ea8c98671dabc67d09a84816cff04824da098e302aa8d6b93d2cf75536c4947807b0ad678ce91d68fcfd9fb48e83b978e1a7b004f23fd01","ssdeep":"","tlshash":"00717d4eda23496184c23df4ddd477687baf716fa8528e27ee00450eb183f7d2483656","first_seen":"2025-11-02T15:59:21.383464Z","last_seen":"2026-08-17T08:12:02.136353Z","times_seen":7,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballcoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballcoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"efootballcoins.com/eFootballSans-Bold.woff","fqdn":"efootballcoins.com","domain":"efootballcoins.com","tld":"com"},"ip":{"addr":"68.66.216.47","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://efootballcoins.com/en/","date":"2026-08-17T08:10:46.553Z","timestamp":1786954246553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.efootballcoins.com.zznmcpwg.a2hosted.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 20:16:26 GMT","end":"Mon, 19 Oct 2026 20:16:25 GMT"},"fingerprint":{"sha1":"F3:82:EF:A2:AF:FE:0D:92:B0:25:AD:B3:F6:B8:4D:84:E6:06:5E:2B","sha256":"43:41:59:19:36:8D:5C:F3:FA:3A:E8:18:9D:AA:38:4A:1B:96:6F:6F:CC:86:38:59:DA:8A:CE:3F:3E:77:B4:6A"}}},"request":{"raw":"GET /eFootballSans-Bold.woff HTTP/1.1\r\nHost: efootballcoins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://efootballcoins.com/en/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Mon, 17 Aug 2026 08:10:46 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":796,"size_decoded":1129,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-08-17T09:26:18.40309Z","times_seen":53567,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballcoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballcoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"efootballcoins.com/en/","fqdn":"efootballcoins.com","domain":"efootballcoins.com","tld":"com"},"ip":{"addr":"68.66.216.47","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-17T08:10:45.749Z","timestamp":1786954245749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.efootballcoins.com.zznmcpwg.a2hosted.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 20:16:26 GMT","end":"Mon, 19 Oct 2026 20:16:25 GMT"},"fingerprint":{"sha1":"F3:82:EF:A2:AF:FE:0D:92:B0:25:AD:B3:F6:B8:4D:84:E6:06:5E:2B","sha256":"43:41:59:19:36:8D:5C:F3:FA:3A:E8:18:9D:AA:38:4A:1B:96:6F:6F:CC:86:38:59:DA:8A:CE:3F:3E:77:B4:6A"}}},"request":{"raw":"GET /en/ HTTP/1.1\r\nHost: efootballcoins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sun, 24 May 2026 10:35:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3438\r\ndate: Mon, 17 Aug 2026 08:10:46 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncache-control: max-age=3600, must-revalidate\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14297,"size_decoded":3919,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (323), with CRLF line terminators","md5":"1291485d804eb70360af13199a21c344","sha1":"277b9ecddf5f667ec8dd0b2e8fd7857c2819bb2e","sha256":"caaffce04e854559a039a08dec406acb351762359ff730dd29910daa916c9758","sha512":"0a02b9fde7399e46a0eae543d2e7f0a9ecc148fd42c864e096ba2e42a82a59ff9338963a8dcabf922f7c5493219e3f873eadbe9081bb20311b283b18f32cb6c2","ssdeep":"192:zZpiCImu2Hqov0S/1UhdquYFKE7845c9mFqIWR2iri+iWi1k:zZbLKVhhEz7845c9HIhiri+iWi1k","tlshash":"5b5266232a401025a0b757b9bda2879eea358103d507923e39ed76e5cffdd40c9b3b85","first_seen":"2026-07-30T15:43:55.90894Z","last_seen":"2026-08-17T08:12:02.151192Z","times_seen":4,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":27,"connect":103,"send":0,"wait":104,"receive":0,"ssl":211},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballcoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballcoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"efootballcoins.com/eFootballSans-Bold.woff2","fqdn":"efootballcoins.com","domain":"efootballcoins.com","tld":"com"},"ip":{"addr":"68.66.216.47","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://efootballcoins.com/en/","date":"2026-08-17T08:10:46.428Z","timestamp":1786954246428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.efootballcoins.com.zznmcpwg.a2hosted.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 20:16:26 GMT","end":"Mon, 19 Oct 2026 20:16:25 GMT"},"fingerprint":{"sha1":"F3:82:EF:A2:AF:FE:0D:92:B0:25:AD:B3:F6:B8:4D:84:E6:06:5E:2B","sha256":"43:41:59:19:36:8D:5C:F3:FA:3A:E8:18:9D:AA:38:4A:1B:96:6F:6F:CC:86:38:59:DA:8A:CE:3F:3E:77:B4:6A"}}},"request":{"raw":"GET /eFootballSans-Bold.woff2 HTTP/1.1\r\nHost: efootballcoins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://efootballcoins.com/en/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Mon, 17 Aug 2026 08:10:46 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":796,"size_decoded":1129,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-08-17T09:26:18.40309Z","times_seen":53567,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballcoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"efootballcoins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}