{"report_id":"14b1f440-a1ad-4081-8e8c-2fd795c368cd","version":6,"status":"done","tags":[],"date":"2026-03-23T10:42:26Z","url":{"schema":"http","addr":"tobrut88.com/","fqdn":"tobrut88.com","domain":"tobrut88.com","tld":"com"},"ip":{"addr":"104.21.90.231","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"tobrut88.com/","fqdn":"tobrut88.com","domain":"tobrut88.com","tld":"com"},"title":"Tobrut88 – Deposit Pulsa Masuk Full Tanpa Ada Potongan","dom":{"size":70227,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (29215)","md5":"8dd9940cee175575b4895fa95fc35f9b","sha1":"4408f977062b1d84546c2839c1b5baa19290a0fa","sha256":"0e3b1916ee7082813674de72f871754e7171ede60a3c5c066824d93b0bff4913","sha512":"ca5c4c99830ca450993d5ef1c90fb64ab31256222a4f018b5446323c629b5d7a5a49e0072160d2f5f1e0c4ae97af6c200b2a42b25b7e1480d00ee796cef3429b","ssdeep":"1536:vZ5F4g5A4WR2vpa6gB+yevn3ZpQopXPFEx:pa6gB+yWppQopXCx","tlshash":"2e63e73269ac10be2127d35654d5f76f7d24e913ca660a85f4acabcccb82f52693330d","dom_hash":"domhash995d4e59aad0990c7f0e3d1186df3d0b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tobrut88.com/","fqdn":"tobrut88.com","domain":"tobrut88.com","tld":"com"},"ip":{"addr":"104.21.90.231","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-27T10:42:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"tobrut88.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.ampproject.org","ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2015-08-31","domain_rank":3289,"first_seen":"2015-10-09T04:27:01Z","last_seen":"2026-03-23T09:17:33.215662Z","alert_count":0,"request_count":5,"received_data":340593,"sent_data":2272,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tobrut88.com","ip":{"addr":"172.67.162.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-04-22","domain_rank":0,"first_seen":"2026-03-23T10:42:26.877044Z","last_seen":"2026-03-23T10:42:26.877044Z","alert_count":16,"request_count":16,"received_data":426681,"sent_data":7609,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-anim-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"55b12ea4a5e5ddcefab1d262fbc0d8b2","sha1":"bcc63b9b719ee9ec94c0859d4e9876f05cef77a7","sha256":"e8a02555e6fe00cf4382691d569b602f62a67b6fffa922334f4348f2782b61e7","sha512":"bf62b120d5b5ad6b8dfb44e98ed42b9cf9f04719b18433aff98fa4b4e079f4a9c2bcfd3dc5d611710d184f32cba77187a56370ab76815ca4c7f8e680db0f7281","ssdeep":"","tlshash":"4971b8b872c5b5365bd63cd2446b5405fa3964363407c868b168dfcf293a85624b6f3c","size":3802,"data":"","first_seen":"2026-03-18T09:15:17.862394Z","last_seen":"2026-04-05T07:23:33.620947Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe1b81f958d86c98e88b86960a4dc246","sha1":"eb7c9593cf4980bd7774efec7f9579a9227d021f","sha256":"958c3f227881fbb4eebfe70f950f16384382a519ac0b708a073ae809205e312d","sha512":"bd2a0e6ce8551a58f83c095f7c1c071b061ac495337f58fda6b7e175344003a4687de1185d9ec87b1bfd4dd44fab2d6d54a6081b884c034bca5d6dac989a45da","ssdeep":"3072:dHxofahpFRKNAtM0sK8NQgU9SutUvDK3p9Pd+g3:XofahpF+At5s2gU9SutSDK3p9F","tlshash":"f524c5a53296b03247e154f5d4774002e3296998340b816cf8bceecb7ca9d86b1b6f7d","size":228175,"data":"","first_seen":"2026-03-18T09:15:17.810072Z","last_seen":"2026-04-05T08:34:03.553356Z","times_seen":199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-bind-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"378e19c639fc5eb26999204f145d6e87","sha1":"3967539a257b804710a39f669733ccb0653c16ba","sha256":"d3cb5ea23badbae7dcde8f720c7f8af543ae561eca84afe9f87936920aad9a42","sha512":"1abb62b8a831f13ed1ba0a5069207ea5bec77eed2e353c4b7b216e3a52179bbb728516499d0ef4ce0320ebfa9a24d18b477b723717d11de7e2e5942b864aad70","ssdeep":"768:OXCnqZrZK6LtckYVUCKeTDTfr8UrZLHc5Ql0p43fHLt+9TlVcAPnK07+hN0ZXrda:bq5dqLAUVjcw3zVKpJ40zQyU","tlshash":"a213d9b17282a43647d608f684367016e32d2956340ac8ecf1aceec77c77955b2b9e3d","size":41951,"data":"","first_seen":"2026-03-18T09:15:17.846899Z","last_seen":"2026-04-05T07:23:33.645086Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012603032146000/v0/amp-loader-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7fcfc2dad8a5a21597675f84c0a2cec","sha1":"b43be391d0a3bf209b3f01cf0f29b68311c03ab7","sha256":"44c1a7b71b2869d83d2f5198514dfb2e60b49c51b1edad87daa2af977842b045","sha512":"cd2e09e595efa89578bc1b4358d69798fa62e91e52eb29ae72999b4136eb6a4d66a0a897d43ad136cb3070303e197a1c5421762c1348e6fff712ba30a49c8b30","ssdeep":"384:Eo39KdedznnHXcxZgulqaa5F4g5A4WR2vCk:F39KMdT3cLgulDa5F4g5A4WR2vCk","tlshash":"1a429360a50be2ac530342b488f5b956757ccd4fb8104075f0604eeedb8ae54bdbba6e","size":12361,"data":"","first_seen":"2026-03-18T09:15:17.817764Z","last_seen":"2026-04-05T08:34:03.5555Z","times_seen":168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tobrut88.com/","date":"2026-03-23T10:42:03.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:13 GMT","end":"Mon, 18 May 2026 18:20:12 GMT"},"fingerprint":{"sha1":"0E:1A:26:72:B9:66:7B:27:2A:5F:B6:6E:78:84:9D:3E:9E:B3:DA:E4","sha256":"70:BA:BE:7A:0B:05:93:D0:F5:50:53:8C:8C:0A:29:F5:F0:31:E8:9C:EA:0B:27:0F:21:52:9E:47:AA:34:E5:4A"}}},"request":{"raw":"GET /v0.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://tobrut88.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tobrut88.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 63621\r\ndate: Mon, 23 Mar 2026 10:42:03 GMT\r\nexpires: Mon, 23 Mar 2026 10:42:03 GMT\r\ncache-control: private, max-age=3000, stale-while-revalidate=1206600\r\netag: \"1fb0813db2f9ea66\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":228175,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64621)","md5":"fe1b81f958d86c98e88b86960a4dc246","sha1":"eb7c9593cf4980bd7774efec7f9579a9227d021f","sha256":"958c3f227881fbb4eebfe70f950f16384382a519ac0b708a073ae809205e312d","sha512":"bd2a0e6ce8551a58f83c095f7c1c071b061ac495337f58fda6b7e175344003a4687de1185d9ec87b1bfd4dd44fab2d6d54a6081b884c034bca5d6dac989a45da","ssdeep":"3072:dHxofahpFRKNAtM0sK8NQgU9SutUvDK3p9Pd+g3:XofahpF+At5s2gU9SutSDK3p9F","tlshash":"f524c5a53296b03247e154f5d4774002e3296998340b816cf8bceecb7ca9d86b1b6f7d","first_seen":"2026-03-18T09:15:17.810072Z","last_seen":"2026-04-05T08:34:03.553356Z","times_seen":199,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":78,"dns":22,"connect":10,"send":0,"wait":32,"receive":36,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tobrut88.com/wp-content/themes/wordpress/images/Jackpot-Games/microgaming.jpg","fqdn":"tobrut88.com","domain":"tobrut88.com","tld":"com"},"ip":{"addr":"172.67.162.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tobrut88.com/","date":"2026-03-23T10:42:03.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tobrut88.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 12:09:02 GMT","end":"Tue, 02 Jun 2026 13:06:39 GMT"},"fingerprint":{"sha1":"A1:53:C3:1A:6E:FE:7D:F6:8D:AB:2B:74:33:CC:7C:3C:03:1D:ED:DF","sha256":"0D:8A:F7:33:E4:E3:ED:8C:3A:63:57:28:3A:5E:03:07:4B:2E:91:55:A3:F1:40:AF:57:69:CA:9A:93:8E:53:9B"}}},"request":{"raw":"GET /wp-content/themes/wordpress/images/Jackpot-Games/microgaming.jpg HTTP/1.1\r\nHost: tobrut88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tobrut88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 10:42:03 GMT\r\netag: \"2bed-6871459d-c5c58b;;;\"\r\nlast-modified: Fri, 11 Jul 2025 17:10:53 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11245\r\naccept-ranges: bytes\r\ndate: Mon, 23 Mar 2026 10:42:04 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iq8x3%2B3DOGRqhkmc6dZ%2BqwrIRHLJFLpOBTRDJTd69FgjrNBI2BM4%2BdKoAS82Dpii1M8LiEXIyDUUCHm8L2JsrCEe%2BoZIRZZKsLYPfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e0cd3c38f6cde91-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11245,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x110, components 3","md5":"9a60420995d9425aa266732bb23377c9","sha1":"2ce2312fe9a461152695227092fafcc34ea83bf8","sha256":"7b3c8e03b9239a06fb8e15aa4afbe9d3e9f09fd67ae2368bdf0afee01a7bc17d","sha512":"3dab732d70c4c74b7586ce8238bd75a138eba84fac93d06cd40c2ce634d3d028f9e3b855cfd4f9f102257f2cac9e1f12ddbdc1eef75a648e552ecd284e00a4e3","ssdeep":"192:jcTdOetxYpayMaqTIeoAlwCUffWSWs4cv11iUbfj1i3H9LL3GhlE0fKaPYAwjFas:jcTdOaYYyx7eoAlwtffWSbtzbfj1iols","tlshash":"3232aedafc03d363cfced4647c7ba28f0e115c418a8ddc61a6bbd856c4866d20b9584c","first_seen":"2026-03-23T10:42:29.120812Z","last_seen":"2026-03-23T10:42:29.120812Z","times_seen":1,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":635,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"tobrut88.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012603032146000/v0/amp-loader-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tobrut88.com/","date":"2026-03-23T10:42:04.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:13 GMT","end":"Mon, 18 May 2026 18:20:12 GMT"},"fingerprint":{"sha1":"0E:1A:26:72:B9:66:7B:27:2A:5F:B6:6E:78:84:9D:3E:9E:B3:DA:E4","sha256":"70:BA:BE:7A:0B:05:93:D0:F5:50:53:8C:8C:0A:29:F5:F0:31:E8:9C:EA:0B:27:0F:21:52:9E:47:AA:34:E5:4A"}}},"request":{"raw":"GET /rtv/012603032146000/v0/amp-loader-0.1.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://tobrut88.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tobrut88.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 3921\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 17 Mar 2026 21:21:34 GMT\r\nexpires: Wed, 17 Mar 2027 21:21:34 GMT\r\ncache-control: public, max-age=31536000\r\netag: \"43c0c1e3818fdba7\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 480030\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12361,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12245)","md5":"c7fcfc2dad8a5a21597675f84c0a2cec","sha1":"b43be391d0a3bf209b3f01cf0f29b68311c03ab7","sha256":"44c1a7b71b2869d83d2f5198514dfb2e60b49c51b1edad87daa2af977842b045","sha512":"cd2e09e595efa89578bc1b4358d69798fa62e91e52eb29ae72999b4136eb6a4d66a0a897d43ad136cb3070303e197a1c5421762c1348e6fff712ba30a49c8b30","ssdeep":"384:Eo39KdedznnHXcxZgulqaa5F4g5A4WR2vCk:F39KMdT3cLgulDa5F4g5A4WR2vCk","tlshash":"1a429360a50be2ac530342b488f5b956757ccd4fb8104075f0604eeedb8ae54bdbba6e","first_seen":"2026-03-18T09:15:17.817764Z","last_seen":"2026-04-05T08:34:03.5555Z","times_seen":168,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012603032146000/ww.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tobrut88.com/","date":"2026-03-23T10:42:04.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:13 GMT","end":"Mon, 18 May 2026 18:20:12 GMT"},"fingerprint":{"sha1":"0E:1A:26:72:B9:66:7B:27:2A:5F:B6:6E:78:84:9D:3E:9E:B3:DA:E4","sha256":"70:BA:BE:7A:0B:05:93:D0:F5:50:53:8C:8C:0A:29:F5:F0:31:E8:9C:EA:0B:27:0F:21:52:9E:47:AA:34:E5:4A"}}},"request":{"raw":"GET /rtv/012603032146000/ww.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tobrut88.com/\r\nOrigin: https://tobrut88.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13071\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 17 Mar 2026 21:23:41 GMT\r\nexpires: Wed, 17 Mar 2027 21:23:41 GMT\r\ncache-control: public, max-age=31536000\r\netag: \"d1df5c7bf2e3a902\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 479903\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46270,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46150)","md5":"a58da1d57698a1cc695b99dd54509103","sha1":"0f4f3468d3b795cea101223f7f5b881683629e15","sha256":"8c54a748bcbd623b9faad8d3c1ab22c1ccd0f7be17b449102908dcc6f2a2ba7f","sha512":"31d006028f6ccd9723c5239a0e04ae70abd90f30e6a5546e1a55640fb949527d97ff3de51c7521658c8177ac14f50906006c3acc27e039ee31a078f1c9fd4a5c","ssdeep":"768:bCIFh7NY3GBGJ87rpB67WhEAyn8fUVCjkzQbyFpPcsKdN4emH+bUwTKtgyb9Q:h7aCV7zfUVZepQ+2gOG","tlshash":"0f230bb433a6546f839284e5005a3009e67e2c663006d8fcf678eed77cb199795b6f34","first_seen":"2026-03-18T09:15:17.837253Z","last_seen":"2026-04-05T07:23:33.612722Z","times_seen":119,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-bind-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tobrut88.com/","date":"2026-03-23T10:42:03.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:13 GMT","end":"Mon, 18 May 2026 18:20:12 GMT"},"fingerprint":{"sha1":"0E:1A:26:72:B9:66:7B:27:2A:5F:B6:6E:78:84:9D:3E:9E:B3:DA:E4","sha256":"70:BA:BE:7A:0B:05:93:D0:F5:50:53:8C:8C:0A:29:F5:F0:31:E8:9C:EA:0B:27:0F:21:52:9E:47:AA:34:E5:4A"}}},"request":{"raw":"GET /v0/amp-bind-0.1.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://tobrut88.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tobrut88.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13885\r\ndate: Mon, 23 Mar 2026 10:42:03 GMT\r\nexpires: Mon, 23 Mar 2026 10:42:03 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"9983d640b1fca272\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41957,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41829)","md5":"378e19c639fc5eb26999204f145d6e87","sha1":"3967539a257b804710a39f669733ccb0653c16ba","sha256":"d3cb5ea23badbae7dcde8f720c7f8af543ae561eca84afe9f87936920aad9a42","sha512":"1abb62b8a831f13ed1ba0a5069207ea5bec77eed2e353c4b7b216e3a52179bbb728516499d0ef4ce0320ebfa9a24d18b477b723717d11de7e2e5942b864aad70","ssdeep":"768:OXCnqZrZK6LtckYVUCKeTDTfr8UrZLHc5Ql0p43fHLt+9TlVcAPnK07+hN0ZXrda:bq5dqLAUVjcw3zVKpJ40zQyU","tlshash":"a213d9b17282a43647d608f684367016e32d2956340ac8ecf1aceec77c77955b2b9e3d","first_seen":"2026-03-18T09:15:17.846899Z","last_seen":"2026-04-05T07:23:33.645086Z","times_seen":119,"resource_available":true,"data":null}},"time_used":904,"timings":{"blocked":426,"dns":19,"connect":23,"send":0,"wait":30,"receive":3,"ssl":400},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tobrut88.com/wp-content/themes/wordpress/images/Jackpot-Games/cmd368.jpg","fqdn":"tobrut88.com","domain":"tobrut88.com","tld":"com"},"ip":{"addr":"172.67.162.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tobrut88.com/","date":"2026-03-23T10:42:03.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tobrut88.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 12:09:02 GMT","end":"Tue, 02 Jun 2026 13:06:39 GMT"},"fingerprint":{"sha1":"A1:53:C3:1A:6E:FE:7D:F6:8D:AB:2B:74:33:CC:7C:3C:03:1D:ED:DF","sha256":"0D:8A:F7:33:E4:E3:ED:8C:3A:63:57:28:3A:5E:03:07:4B:2E:91:55:A3:F1:40:AF:57:69:CA:9A:93:8E:53:9B"}}},"request":{"raw":"GET /wp-content/themes/wordpress/images/Jackpot-Games/cmd368.jpg HTTP/1.1\r\nHost: tobrut88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tobrut88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 10:42:03 GMT\r\netag: \"2a3c-6871459d-c5c587;;;\"\r\nlast-modified: Fri, 11 Jul 2025 17:10:53 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10812\r\naccept-ranges: bytes\r\ndate: Mon, 23 Mar 2026 10:42:04 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BQcEVCsryEtTMOPPT%2FnmttRm9gOUDRt%2BuQa%2FtPzvxWBurcbGe3d%2BS%2F7OntcwQ7UVR1wkMkHdqvLYwNg%2BgYAS596Q2cqel0yEBBAnog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e0cd3c37f65de91-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10812,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x110, components 3","md5":"c032c3d4586f957d5edc48cace071677","sha1":"a668f8e6986a023f2fcc448e94687a8b15b1e711","sha256":"0d0c48ea43ed814f5f42a2c5255d03db52e56ad856003f01e0e35678d4dd1744","sha512":"7acb81304bdda1e7054601488de9e2447ad7d328fe0c1dae9ad8f3fe3760ca049caaffdf35f5160b0bbd9988331dfd049ad85834692f5ded9bde182f20865011","ssdeep":"192:/Gd6/o6jTcskRswgNwcIBECMtDE6m/AdyVRDDNCgM3QGqJQCqSxFuDezw0VP:/GdQZkijNgBElE6mId2ZDQk/JQCqg8DS","tlshash":"9522ad37e140ff44c449d936beff90474fa115e4b8e2e9b9a932695eb0581b3835212f","first_seen":"2026-03-23T10:42:29.127458Z","last_seen":"2026-03-23T10:42:29.127458Z","times_seen":1,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":611,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"tobrut88.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tobrut88.com/wp-content/themes/wordpress/images/Jackpot-Games/jdb.jpg","fqdn":"tobrut88.com","domain":"tobrut88.com","tld":"com"},"ip":{"addr":"172.67.162.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tobrut88.com/","date":"2026-03-23T10:42:03.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tobrut88.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 12:09:02 GMT","end":"Tue, 02 Jun 2026 13:06:39 GMT"},"fingerprint":{"sha1":"A1:53:C3:1A:6E:FE:7D:F6:8D:AB:2B:74:33:CC:7C:3C:03:1D:ED:DF","sha256":"0D:8A:F7:33:E4:E3:ED:8C:3A:63:57:28:3A:5E:03:07:4B:2E:91:55:A3:F1:40:AF:57:69:CA:9A:93:8E:53:9B"}}},"request":{"raw":"GET /wp-content/themes/wordpress/images/Jackpot-Games/jdb.jpg HTTP/1.1\r\nHost: tobrut88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tobrut88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 10:42:03 GMT\r\netag: \"302e-6871459d-c5c589;;;\"\r\nlast-modified: Fri, 11 Jul 2025 17:10:53 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12334\r\naccept-ranges: bytes\r\ndate: Mon, 23 Mar 2026 10:42:04 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PANb16pB45RnquwRWTjOgVql1G8hFeTD9OMlsdfG50zkmfu2xzYd7lpESwSUBG0Ld43tXpaIe3MDGO%2BUNbSvb8SFQOdrTh4zr9NE%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e0cd3c38f6ade91-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12334,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x110, components 3","md5":"6b30c67fe11065d1132771daebe26351","sha1":"1cf39e00f1075b2cc758a5a7a0b4c7cbb3460f0d","sha256":"75cacedae609bc12c278b171081cfdc7876980d5c520152f308f2eda7b0d278c","sha512":"d1142d8830ac6c57ef59ac35eff88b02b342fd3ab08ea3f986e8a84b7927795ee8e5fffd9c47f56d2a23c1f71d7e2c9864b508295b89cb7547076d5036f04bd5","ssdeep":"192:/xpiVxFrIQ19Js+w9/UdFGVJsxjuxcJQobY8b0Cr3iCWlYBuawacNN2fXe2:/xpiG+sIFGVJQy+Jv03lOuVa3","tlshash":"fa42a01ae6247f75a99d00911c77be8c4a7618e04ef384dce9f2dd26c5b00764961c63","first_seen":"2026-03-23T10:42:29.129665Z","last_seen":"2026-03-23T10:42:29.129665Z","times_seen":1,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":660,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"tobrut88.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tobrut88.com/wp-content/themes/wordpress/images/Jackpot-Games/pragmatic-play.jpg","fqdn":"tobrut88.com","domain":"tobrut88.com","tld":"com"},"ip":{"addr":"172.67.162.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tobrut88.com/","date":"2026-03-23T10:42:03.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tobrut88.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 12:09:02 GMT","end":"Tue, 02 Jun 2026 13:06:39 GMT"},"fingerprint":{"sha1":"A1:53:C3:1A:6E:FE:7D:F6:8D:AB:2B:74:33:CC:7C:3C:03:1D:ED:DF","sha256":"0D:8A:F7:33:E4:E3:ED:8C:3A:63:57:28:3A:5E:03:07:4B:2E:91:55:A3:F1:40:AF:57:69:CA:9A:93:8E:53:9B"}}},"request":{"raw":"GET /wp-content/themes/wordpress/images/Jackpot-Games/pragmatic-play.jpg HTTP/1.1\r\nHost: tobrut88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tobrut88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 10:42:03 GMT\r\netag: \"2482-6871459d-c5c58c;;;\"\r\nlast-modified: Fri, 11 Jul 2025 17:10:53 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9346\r\naccept-ranges: bytes\r\ndate: Mon, 23 Mar 2026 10:42:04 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IprYVmnsa%2FN2P3XeeK7p23yoACyKsJ9QI%2FNBHXAoOxKF9ja7xpPPP9ajgDTH2qrhPZr4vS7cNCsRRURjg%2Fpg3UC4i8%2FgDl%2BBmH%2FmDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e0cd3c38f6dde91-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9346,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x110, components 3","md5":"877ecd836f228ef2911982c3152c12f7","sha1":"0e9670773a12e324feb86f1352b57725a8cdf22b","sha256":"eaf5a7a75f0db64a5045c93ae4fecd009b460eb8a126a6d7d7d34468dd539960","sha512":"1cef3afb6336b32e19ddcdc0d898a13a8beb8cbaa4f56fcdbaead6e6865474ff172585e2c5df597d984eb603b7c7f578a9101aeb6fbb843d2be883e57a20c661","ssdeep":"192:/1ZtVmIMSKE285bwu7OslTjdNaYt7Gsx4/oHxq5Lt8kd1:/1TVmIW985T7vlTjaYtrFRKvd1","tlshash":"3312bf44d462ffc0e1d4e46d51f3a2561e9227e61f3bc1da0475490263f61ea05bcce7","first_seen":"2026-03-23T10:42:29.130971Z","last_seen":"2026-03-23T10:42:29.130971Z","times_seen":1,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"tobrut88.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tobrut88.com/wp-content/themes/wordpress/images/icon/idntrade.svg","fqdn":"tobrut88.com","domain":"tobrut88.com","tld":"com"},"ip":{"addr":"172.67.162.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tobrut88.com/","date":"2026-03-23T10:42:03.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tobrut88.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 12:09:02 GMT","end":"Tue, 02 Jun 2026 13:06:39 GMT"},"fingerprint":{"sha1":"A1:53:C3:1A:6E:FE:7D:F6:8D:AB:2B:74:33:CC:7C:3C:03:1D:ED:DF","sha256":"0D:8A:F7:33:E4:E3:ED:8C:3A:63:57:28:3A:5E:03:07:4B:2E:91:55:A3:F1:40:AF:57:69:CA:9A:93:8E:53:9B"}}},"request":{"raw":"GET /wp-content/themes/wordpress/images/icon/idntrade.svg HTTP/1.1\r\nHost: tobrut88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tobrut88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 10:42:03 GMT\r\netag: \"2ba9-6871459d-259e7c0;br\"\r\nlast-modified: Fri, 11 Jul 2025 17:10:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 8411\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 23 Mar 2026 10:42:04 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uGIh46csBOunCB%2FHViMcU1ScbpKMlwbRBp%2FE9S3k89je9R2g5Uvqi%2BIgLEdwzsqmbm0UEudxENdzKPVupHFUBOCRfLEv0X3BRNpsmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e0cd3c3bf6fde91-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11177,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"35bfc816c3b1e31930d5ac80c94f0208","sha1":"f71da011920187ea364a2111b591a51c743326da","sha256":"809f81bbfa5f2da3a801126be6efc539dfb9916f7f3db32b64850476b5cf5c4a","sha512":"296ebc79c8fa3b783821705384c1fb395632102c8eeff1a80963bea1194c0e26970819c338f93a3935cb1f5e75ccdc38128b8d10f90e05a54e81e09bcff9b79f","ssdeep":"192:fmyeCurS/SWrQ/ubbHw//XbfvzLwoOurpEmMTVQqHH2JoYH/Atld9tQYO2kf:fmyenrS/JE/gkzooOYpWT+rJoYKld9O1","tlshash":"05329f956c23cc6ae9780b5c60342dab9e80511a41fef7e95a09a1055fe1efcead18c8","first_seen":"2026-01-03T03:55:01.294002Z","last_seen":"2026-03-23T10:42:29.132099Z","times_seen":2,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":639,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"tobrut88.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tobrut88.com/wp-content/themes/wordpress/images/slider.jpg","fqdn":"tobrut88.com","domain":"tobrut88.com","tld":"com"},"ip":{"addr":"172.67.162.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tobrut88.com/","date":"2026-03-23T10:42:04.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tobrut88.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 12:09:02 GMT","end":"Tue, 02 Jun 2026 13:06:39 GMT"},"fingerprint":{"sha1":"A1:53:C3:1A:6E:FE:7D:F6:8D:AB:2B:74:33:CC:7C:3C:03:1D:ED:DF","sha256":"0D:8A:F7:33:E4:E3:ED:8C:3A:63:57:28:3A:5E:03:07:4B:2E:91:55:A3:F1:40:AF:57:69:CA:9A:93:8E:53:9B"}}},"request":{"raw":"GET /wp-content/themes/wordpress/images/slider.jpg HTTP/1.1\r\nHost: tobrut88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tobrut88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 10:42:04 GMT\r\netag: \"2eaac-6871459d-65fd3f9;;;\"\r\nlast-modified: Fri, 11 Jul 2025 17:10:53 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 191148\r\naccept-ranges: bytes\r\ndate: Mon, 23 Mar 2026 10:42:04 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PD40a2ZBZ2Pg6UbLluoB7XzZ%2B3rhE7kgZCbTDAQxK8VkvpY%2BVnAZ%2FLepG57DA5y7ktVqf3NTHy1rhfej20IDXZkwRDrQVe6YDNO9gg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e0cd3c81fdcde91-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":191148,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1060x440, components 3","md5":"88777cdb53bb94df9504a0403a8a743d","sha1":"0488f51617436caa66b1a74ae48ba34ec77e1a04","sha256":"280bb6af2c73e5768ee7f5674685499489e8e90e54e58005b057d7ea00c97186","sha512":"cdee6b5422059773e4ba89766d3fcf28ffae1709648fd20b1e7c48401b85ac2941c275e3eb218f7ad84d80a3437a13ad0d7b1507711f1df76f06fb3138968ff1","ssdeep":"3072:mCni0dKJ7Smk97yriwN0tJMlbOLt3XVAHBx5+p44Sjw6ZV3e2wzQxW3FqAacXcJB:mNpJ+jwBlbCt3X65+i4qwq3w4WVacXcr","tlshash":"76141263a1850cd221f2f436b7f27a0de29c2a7c111b5bb553601fabba6c7c9f604d58","first_seen":"2026-01-03T03:55:01.300036Z","last_seen":"2026-03-23T10:42:29.133202Z","times_seen":2,"resource_available":false,"data":null}},"time_used":837,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":217,"receive":620,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"tobrut88.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tobrut88.com/wp-content/themes/wordpress/images/Jackpot-Games/ion-casino.jpg","fqdn":"tobrut88.com","domain":"tobrut88.com","tld":"com"},"ip":{"addr":"172.67.162.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tobrut88.com/","date":"2026-03-23T10:42:03.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tobrut88.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 12:09:02 GMT","end":"Tue, 02 Jun 2026 13:06:39 GMT"},"fingerprint":{"sha1":"A1:53:C3:1A:6E:FE:7D:F6:8D:AB:2B:74:33:CC:7C:3C:03:1D:ED:DF","sha256":"0D:8A:F7:33:E4:E3:ED:8C:3A:63:57:28:3A:5E:03:07:4B:2E:91:55:A3:F1:40:AF:57:69:CA:9A:93:8E:53:9B"}}},"request":{"raw":"GET /wp-content/themes/wordpress/images/Jackpot-Games/ion-casino.jpg HTTP/1.1\r\nHost: tobrut88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tobrut88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 10:42:03 GMT\r\netag: \"290f-6871459d-c5c588;;;\"\r\nlast-modified: Fri, 11 Jul 2025 17:10:53 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10511\r\naccept-ranges: bytes\r\ndate: Mon, 23 Mar 2026 10:42:04 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cLWTRljD8qsXSJ%2FhFXE42G1ZNlfGe9Vnao%2FuXGqpQUTm2FO%2F1SnwyxQePw6V2nh14vAoEQA64S84VejBkOlnjeB%2BZ%2BOIL%2F%2BQNjj1HA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e0cd3c38f69de91-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10511,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x110, components 3","md5":"4faa83c43523a1788814f1614a1ee239","sha1":"7f785fddd11a63c9779139461700c46fd110187d","sha256":"44652ee227531d1e0787a5272e15241b3a3ae36de914dfeb1e1c20247eec6f7d","sha512":"9a6a5cbe5d0aa70b9ddc4963e8fd7f16f9487b0ebb2b23369f5241a2dc40edf21dfa4b3420c60dbf120206e95c93b7e04308b8b365a2b7ed615bd1bfcab7e982","ssdeep":"192:jPSw5e6Z+2n3WvvoDiO4kqczDkltvOKyu5UjRIc+wF2ym:jPSwkv2GnoDiO4kn3kD2d+wZm","tlshash":"7c22bf0aae01ef4bf9316af865fbd77f14251d93a4d4d6150cba9c2b92d702104334b5","first_seen":"2026-03-23T10:42:29.13427Z","last_seen":"2026-03-23T10:42:29.13427Z","times_seen":1,"resource_available":false,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":640,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"tobrut88.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tobrut88.com/","fqdn":"tobrut88.com","domain":"tobrut88.com","tld":"com"},"ip":{"addr":"172.67.162.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-23T10:42:02.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tobrut88.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 12:09:02 GMT","end":"Tue, 02 Jun 2026 13:06:39 GMT"},"fingerprint":{"sha1":"A1:53:C3:1A:6E:FE:7D:F6:8D:AB:2B:74:33:CC:7C:3C:03:1D:ED:DF","sha256":"0D:8A:F7:33:E4:E3:ED:8C:3A:63:57:28:3A:5E:03:07:4B:2E:91:55:A3:F1:40:AF:57:69:CA:9A:93:8E:53:9B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tobrut88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 10:42:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlink: \u003chttps://tobrut88.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://tobrut88.com/wp-json/wp/v2/pages/19\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://tobrut88.com/\u003e; rel=shortlink\r\nserver-timing: amp_sanitizer;dur=\"271.1\",amp_style_sanitizer;dur=\"217.0\",amp_tag_and_attribute_sanitizer;dur=\"45.1\",amp_optimizer;dur=\"39.4\"\r\nvary: Accept-Encoding\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MvaSj4KaIlvrggXg11WwusryLst%2F%2F9%2BhJCWf0ds7rZ9mkXwHHZy8yVYpBd7DR%2BW4GN8k61iAJsbg8vLcs9KpiW0CEVqEnA9VY4f8Sg%3D%3D\"}]}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e0cd3be48225cf6-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":64562,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (29168)","md5":"86e02b27773f9af5fb1014c7e5aa4bc2","sha1":"4b097bf0396af1ee772550a9d7a0fe5227bbb5ce","sha256":"3cc89d5772cd2406d8689963fc09532d5c47f50db346bef2d9d0cead2d15bcb9","sha512":"b1a660b1829f00d2c1c169e2f40191c4d043d6df1eeb201dc1b80c279759b348f77d3ccba3895d0e785b918beb19fe0ee0be1535313590fbd41ac96642b6fc6c","ssdeep":"768:2hnWNk/UXyCk6s52VMnUYvtRhFU5JPyegTcn3lfpi0SwodXWFEA:OW06gB+yevn3Zp7odXWFEA","tlshash":"0c53e83269ac107e2227d31654d5f76e7e14d813cb661b49f5acebc8cb86e62193330d","first_seen":"2026-03-23T10:42:29.135421Z","last_seen":"2026-03-23T10:42:29.135421Z","times_seen":1,"resource_available":true,"data":null}},"time_used":795,"timings":{"blocked":78,"dns":43,"connect":8,"send":0,"wait":639,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"tobrut88.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tobrut88.com/wp-content/themes/wordpress/images/Jackpot-Games/sbobet.jpg","fqdn":"tobrut88.com","domain":"tobrut88.com","tld":"com"},"ip":{"addr":"172.67.162.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tobrut88.com/","date":"2026-03-23T10:42:03.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tobrut88.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 12:09:02 GMT","end":"Tue, 02 Jun 2026 13:06:39 GMT"},"fingerprint":{"sha1":"A1:53:C3:1A:6E:FE:7D:F6:8D:AB:2B:74:33:CC:7C:3C:03:1D:ED:DF","sha256":"0D:8A:F7:33:E4:E3:ED:8C:3A:63:57:28:3A:5E:03:07:4B:2E:91:55:A3:F1:40:AF:57:69:CA:9A:93:8E:53:9B"}}},"request":{"raw":"GET /wp-content/themes/wordpress/images/Jackpot-Games/sbobet.jpg HTTP/1.1\r\nHost: tobrut88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tobrut88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 10:42:03 GMT\r\netag: \"26d0-6871459d-c5c58d;;;\"\r\nlast-modified: Fri, 11 Jul 2025 17:10:53 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9936\r\naccept-ranges: bytes\r\ndate: Mon, 23 Mar 2026 10:42:04 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lq9Jh7%2FApFntYqixExXUgpVb28gsFCt4lOCStdOwTcPNpoXVOasfBrl4f7lYWtGomZ21GwhvoR9RsiUcLIawGR0n%2FKniDPW9mJMeCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e0cd3c37f64de91-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9936,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x110, components 3","md5":"b80baabecf5366aab37f44345e1778b6","sha1":"f481fc24f8a065f906568f55bbcd3efe17edbf42","sha256":"a5c8ec5d640e33907753f52ce8b3f0e2f3c72a79a310110f85d017bbdd9446f6","sha512":"46081f8fa0cacd2d6584c98b148a410ca6ac05335de48052a23181fa2c73d7f087ecfb989749f3b493a7403e360b4d02b47f45dd65849e82b5138368b8a86c61","ssdeep":"192:j9wbszy35GHCt6PcFj/Pagi9UbtaNqajU6yfTSb5Qk6qu4ErtjkxgmWk:juNkwEsSzUpaNqYeu9C//BjqgLk","tlshash":"8922af10b5e39f85e1ed843fbcfbc65b141d2c04ed5abf6b683b10da82791768984243","first_seen":"2026-03-23T10:42:29.136394Z","last_seen":"2026-03-23T10:42:29.136394Z","times_seen":1,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":621,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"tobrut88.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tobrut88.com/wp-content/themes/wordpress/images/Jackpot-Games/joker.jpg","fqdn":"tobrut88.com","domain":"tobrut88.com","tld":"com"},"ip":{"addr":"172.67.162.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tobrut88.com/","date":"2026-03-23T10:42:03.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tobrut88.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 12:09:02 GMT","end":"Tue, 02 Jun 2026 13:06:39 GMT"},"fingerprint":{"sha1":"A1:53:C3:1A:6E:FE:7D:F6:8D:AB:2B:74:33:CC:7C:3C:03:1D:ED:DF","sha256":"0D:8A:F7:33:E4:E3:ED:8C:3A:63:57:28:3A:5E:03:07:4B:2E:91:55:A3:F1:40:AF:57:69:CA:9A:93:8E:53:9B"}}},"request":{"raw":"GET /wp-content/themes/wordpress/images/Jackpot-Games/joker.jpg HTTP/1.1\r\nHost: tobrut88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tobrut88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 10:42:03 GMT\r\netag: \"2d34-6871459d-c5c58a;;;\"\r\nlast-modified: Fri, 11 Jul 2025 17:10:53 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11572\r\naccept-ranges: bytes\r\ndate: Mon, 23 Mar 2026 10:42:04 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSFdfyRJ3SAaut8Jxw%2FF%2B7s3bntg%2BJi7RekFkUflTs16o0qsfbWAjMfL46o5M%2FjOd70TbGAOkxV8oqeiO2EinYoqDf7iKi9C%2BEzDkQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e0cd3c38f6bde91-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11572,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x110, components 3","md5":"43de9e7d05fc9f35f64a123e3b05af4d","sha1":"fca51975201355239e510fecb2d90f984f315772","sha256":"e8882d603a6de434c07ea3806d2f0c5bf3e5fca92b6499ad5ef7ebec45a2a1ff","sha512":"82c9537fbe35e0435d6ea77557b7d4a09b9bc4c111a0f1d7cbb6938db01bb081c22773b8a7138e9279acf84bd2b0b19d0cde5262561feac2fbe6e80ea8c136e8","ssdeep":"192:jv8yYPHyVFF/uUTWMucEgCP2HKLh/uan3mqBUbYIL44z6shq1sENLK3i:jvXYPHYFF/HWM13CqKL5P3zC8IL44u+q","tlshash":"5432c002df1107e3e165fa719a33222e475263c760d0d4933f7c8ab958ac4b1ee192fa","first_seen":"2026-03-23T10:42:29.137347Z","last_seen":"2026-03-23T10:42:29.137347Z","times_seen":1,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":641,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"tobrut88.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tobrut88.com/wp-content/uploads/2025/07/cropped-favicon-192x192.png","fqdn":"tobrut88.com","domain":"tobrut88.com","tld":"com"},"ip":{"addr":"172.67.162.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tobrut88.com/","date":"2026-03-23T10:42:04.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tobrut88.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 12:09:02 GMT","end":"Tue, 02 Jun 2026 13:06:39 GMT"},"fingerprint":{"sha1":"A1:53:C3:1A:6E:FE:7D:F6:8D:AB:2B:74:33:CC:7C:3C:03:1D:ED:DF","sha256":"0D:8A:F7:33:E4:E3:ED:8C:3A:63:57:28:3A:5E:03:07:4B:2E:91:55:A3:F1:40:AF:57:69:CA:9A:93:8E:53:9B"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/cropped-favicon-192x192.png HTTP/1.1\r\nHost: tobrut88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tobrut88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 10:42:04 GMT\r\netag: \"3748-68712f30-64658cd;;;\"\r\nlast-modified: Fri, 11 Jul 2025 15:35:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 14152\r\naccept-ranges: bytes\r\ndate: Mon, 23 Mar 2026 10:42:05 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4T9BJp4rQWX7EmJAlaAmtZQXpEVhtyxzxJE3GdyzLBQvOmsX5UP9xWn%2BwsPmbp3Bl6jn9ydG9vfttwpj8EDnq2nqRU9f%2B8bT%2FtLb2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e0cd3c9c809de91-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14152,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"798a37e251c0a6e7a8e2a22f221192de","sha1":"9c30102265563a1f024d7476bab78c46081e87a9","sha256":"c9cd42d0bfef5c6b256a5b7d551f70399494c64e5f2d586a6f89608b20168745","sha512":"90daefd40b417833769d99ed968f966856ff95a862e16318cce83504669ea6e2064643726b6f580504ec8758da412cd4579143af7131f89ac0d7c5d0a06ab1e9","ssdeep":"192:PSK2VpXfWBm+5F4IYzoICxcTIYD1CRaNWBZ7s/usAXnwxtt3U76E96OedaJTc627:mpXfEDFYLiYUg0Y/vx3kGE96Oka5U","tlshash":"1d52d11dec273159643af860cc473e13d3e07654a6b5c373c0956d6fe8bab412e6a0aa","first_seen":"2026-03-23T10:42:29.138537Z","last_seen":"2026-03-23T10:42:29.138537Z","times_seen":1,"resource_available":false,"data":null}},"time_used":837,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":836,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"tobrut88.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tobrut88.com/wp-content/themes/wordpress/images/favicon.png","fqdn":"tobrut88.com","domain":"tobrut88.com","tld":"com"},"ip":{"addr":"172.67.162.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tobrut88.com/","date":"2026-03-23T10:42:04.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tobrut88.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 12:09:02 GMT","end":"Tue, 02 Jun 2026 13:06:39 GMT"},"fingerprint":{"sha1":"A1:53:C3:1A:6E:FE:7D:F6:8D:AB:2B:74:33:CC:7C:3C:03:1D:ED:DF","sha256":"0D:8A:F7:33:E4:E3:ED:8C:3A:63:57:28:3A:5E:03:07:4B:2E:91:55:A3:F1:40:AF:57:69:CA:9A:93:8E:53:9B"}}},"request":{"raw":"GET /wp-content/themes/wordpress/images/favicon.png HTTP/1.1\r\nHost: tobrut88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tobrut88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 10:42:04 GMT\r\netag: \"5b3-6871459d-65fd3f6;;;\"\r\nlast-modified: Fri, 11 Jul 2025 17:10:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 1459\r\naccept-ranges: bytes\r\ndate: Mon, 23 Mar 2026 10:42:05 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u2S9MS52ZwZKWooQyaQoxf2tEkYTje%2Fzs7r09GMzdN0rSBT%2B4GVTEV2ovI0PYdtUSBNe4%2BSPq0aMe9UppHOmGVzXXm8w7%2F8T3REPkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e0cd3c9c80ade91-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1459,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"0447145b135fe01e75c698df655850b0","sha1":"a921c5464efa8f83a038af30a2c92a4e1750a55e","sha256":"5113b6975d40fda321ee077f8581b05ffb8381e5e961b18a90d8824a64f7b758","sha512":"d9201dbac48ad6128009fb3f218950e42d543d7752b67458a47f56a15956ebe84a24834858d3eb230da5aabece437bebe66d18c88dddd1e38cfb5283c906f058","ssdeep":"","tlshash":"8431c731274874bd7a80f057aafa0083d69a048e41f85641e479a4d0fad5e4f7611e23","first_seen":"2026-03-23T10:42:29.139486Z","last_seen":"2026-03-23T10:42:29.139486Z","times_seen":1,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"tobrut88.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tobrut88.com/wp-content/themes/wordpress/images/jackpot.webp","fqdn":"tobrut88.com","domain":"tobrut88.com","tld":"com"},"ip":{"addr":"172.67.162.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tobrut88.com/","date":"2026-03-23T10:42:04.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tobrut88.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 12:09:02 GMT","end":"Tue, 02 Jun 2026 13:06:39 GMT"},"fingerprint":{"sha1":"A1:53:C3:1A:6E:FE:7D:F6:8D:AB:2B:74:33:CC:7C:3C:03:1D:ED:DF","sha256":"0D:8A:F7:33:E4:E3:ED:8C:3A:63:57:28:3A:5E:03:07:4B:2E:91:55:A3:F1:40:AF:57:69:CA:9A:93:8E:53:9B"}}},"request":{"raw":"GET /wp-content/themes/wordpress/images/jackpot.webp HTTP/1.1\r\nHost: tobrut88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tobrut88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 10:42:04 GMT\r\netag: \"518c-6871459d-65fd3f7;;;\"\r\nlast-modified: Fri, 11 Jul 2025 17:10:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20876\r\naccept-ranges: bytes\r\ndate: Mon, 23 Mar 2026 10:42:04 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=np8sKUk4vWLdOBDljgMHd54cAhU9TQl09rNAG3%2F9IgHDNHVrsWGCoLyBSobR%2F%2BFbF2p296pWmmimlJexkS%2BfLELq64QZXg39w46fsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e0cd3c85fe5de91-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20876,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e32f4a39b707d406489409147b703432","sha1":"af9da33548d946899dc896bdc1fa33671c959bf1","sha256":"1f1804ba0416e99555f9efeb666232a5473577cf2ddc2f3675dbe0cfa8828ba8","sha512":"815f8dfa7dd423531991aa17781ac1f5397d59cfe821e64540780a7dad14dcdc7cd4b1c487e6232a403cf7cc37f9f2d47e1f67947c1ca968addbc13cac569372","ssdeep":"384:NEtiyIl8zfn3gNbeAMzv+9yoTuFEGysBqlpn6sl8sU:Nq1IlMvSeT7+pRGysqp58H","tlshash":"f992e1fa15980c89d791ecf5d1a27b3fb84e522907026543e71c96b052ebf9cc41f172","first_seen":"2025-05-09T16:52:53.428997Z","last_seen":"2026-03-23T10:42:29.140352Z","times_seen":3,"resource_available":false,"data":null}},"time_used":834,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":630,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"tobrut88.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-anim-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tobrut88.com/","date":"2026-03-23T10:42:03.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:13 GMT","end":"Mon, 18 May 2026 18:20:12 GMT"},"fingerprint":{"sha1":"0E:1A:26:72:B9:66:7B:27:2A:5F:B6:6E:78:84:9D:3E:9E:B3:DA:E4","sha256":"70:BA:BE:7A:0B:05:93:D0:F5:50:53:8C:8C:0A:29:F5:F0:31:E8:9C:EA:0B:27:0F:21:52:9E:47:AA:34:E5:4A"}}},"request":{"raw":"GET /v0/amp-anim-0.1.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://tobrut88.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tobrut88.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 1675\r\ndate: Mon, 23 Mar 2026 10:42:03 GMT\r\nexpires: Mon, 23 Mar 2026 10:42:03 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"abff27f00e178db5\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3802,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3688)","md5":"55b12ea4a5e5ddcefab1d262fbc0d8b2","sha1":"bcc63b9b719ee9ec94c0859d4e9876f05cef77a7","sha256":"e8a02555e6fe00cf4382691d569b602f62a67b6fffa922334f4348f2782b61e7","sha512":"bf62b120d5b5ad6b8dfb44e98ed42b9cf9f04719b18433aff98fa4b4e079f4a9c2bcfd3dc5d611710d184f32cba77187a56370ab76815ca4c7f8e680db0f7281","ssdeep":"","tlshash":"4971b8b872c5b5365bd63cd2446b5405fa3964363407c868b168dfcf293a85624b6f3c","first_seen":"2026-03-18T09:15:17.862394Z","last_seen":"2026-04-05T07:23:33.620947Z","times_seen":102,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":75,"dns":21,"connect":23,"send":0,"wait":32,"receive":1,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tobrut88.com/wp-content/themes/wordpress/images/icon/hot-games.svg","fqdn":"tobrut88.com","domain":"tobrut88.com","tld":"com"},"ip":{"addr":"172.67.162.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tobrut88.com/","date":"2026-03-23T10:42:03.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tobrut88.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 12:09:02 GMT","end":"Tue, 02 Jun 2026 13:06:39 GMT"},"fingerprint":{"sha1":"A1:53:C3:1A:6E:FE:7D:F6:8D:AB:2B:74:33:CC:7C:3C:03:1D:ED:DF","sha256":"0D:8A:F7:33:E4:E3:ED:8C:3A:63:57:28:3A:5E:03:07:4B:2E:91:55:A3:F1:40:AF:57:69:CA:9A:93:8E:53:9B"}}},"request":{"raw":"GET /wp-content/themes/wordpress/images/icon/hot-games.svg HTTP/1.1\r\nHost: tobrut88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tobrut88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 10:42:04 GMT\r\netag: \"a82-6871459d-259e777;br\"\r\nlast-modified: Fri, 11 Jul 2025 17:10:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1118\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 23 Mar 2026 10:42:04 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cB6slMApawViH72fht%2Bipm1QQcmXUeAtrDtyt1cvI7KF%2FeFGFfO%2Fl6qKVJ6lz9ZXA%2BsGnxnkVmedKD5glNhje3nGEJ4anwW1cTsOPg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e0cd3c3bf70de91-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2690,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"40a04484dc426d21b19436656c9b9770","sha1":"42c3eeb59518f9a002c3536a2556fa41351f1e2e","sha256":"bac0a1bec5262943990d955385352a4999d570cf5886ef2038d428a5befd13f1","sha512":"6a72e4aa5f34ec84cebe9fad068318222f656b4d3f064494868426eb51cbcf68791f4d9d2b527856879ddd7e97ce872e76eda43ed0fab8c97aef81bc245929fe","ssdeep":"","tlshash":"44514a1f03119beabaad4129ed78044eb290d9cbd4b4b0c4a76b2416e48d4e6bd4d7fc","first_seen":"2025-04-15T05:23:13.066493Z","last_seen":"2026-03-23T10:42:29.141942Z","times_seen":21,"resource_available":false,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":652,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"tobrut88.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tobrut88.com/wp-content/themes/wordpress/images/logo.png","fqdn":"tobrut88.com","domain":"tobrut88.com","tld":"com"},"ip":{"addr":"172.67.162.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tobrut88.com/","date":"2026-03-23T10:42:03.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tobrut88.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 12:09:02 GMT","end":"Tue, 02 Jun 2026 13:06:39 GMT"},"fingerprint":{"sha1":"A1:53:C3:1A:6E:FE:7D:F6:8D:AB:2B:74:33:CC:7C:3C:03:1D:ED:DF","sha256":"0D:8A:F7:33:E4:E3:ED:8C:3A:63:57:28:3A:5E:03:07:4B:2E:91:55:A3:F1:40:AF:57:69:CA:9A:93:8E:53:9B"}}},"request":{"raw":"GET /wp-content/themes/wordpress/images/logo.png HTTP/1.1\r\nHost: tobrut88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tobrut88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 10:42:03 GMT\r\netag: \"5992-6871459d-65fd3f8;;;\"\r\nlast-modified: Fri, 11 Jul 2025 17:10:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 22930\r\naccept-ranges: bytes\r\ndate: Mon, 23 Mar 2026 10:42:04 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oqHj%2Bui9HmzQ%2BJ3aal%2FVgHlEvAuRROL4DKtJV0M5QJQ3bGoSX7cqwhcMNezji702hUCsrwJLFU468CxOtopBjWHxMYtc0UOBqDF13w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e0cd3c36f5fde91-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22930,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 535 x 130, 8-bit/color RGBA, non-interlaced","md5":"89a75a2aded772b1fa44aa37fc95ccfc","sha1":"bc188d4dd69a86ee752c8f61657d0a2e843d47c3","sha256":"eb652037ea6ba703c4bca6a2b24c56fbd978bfe2ac835e3439a4d13a40499e70","sha512":"c9cb27446a87f89fcafddc226665e685686e244e2850be378f4358bc55503e02ba8a1ed7434e6be056c3f6cec48b1d264e1d61c2c45eab49a8a28e8bb4de00bd","ssdeep":"384:5MtmbLoAdfWYurlnEa13KClcwTOIp5aMJAaTRSO8C15m0ZdgKN3s4G:PvXdfOlnl6ClcwTO4QHO8CXm0cKdVG","tlshash":"e5a2e07bdca7ac54c3813633c95780297966b23339bc5f86c918084faf9d0604e7a53b","first_seen":"2026-03-23T10:42:29.143184Z","last_seen":"2026-03-23T10:42:29.143184Z","times_seen":1,"resource_available":false,"data":null}},"time_used":815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"tobrut88.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tobrut88.com/wp-content/themes/wordpress/images/Jackpot-Games/wm-casino.jpg","fqdn":"tobrut88.com","domain":"tobrut88.com","tld":"com"},"ip":{"addr":"172.67.162.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tobrut88.com/","date":"2026-03-23T10:42:03.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tobrut88.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 12:09:02 GMT","end":"Tue, 02 Jun 2026 13:06:39 GMT"},"fingerprint":{"sha1":"A1:53:C3:1A:6E:FE:7D:F6:8D:AB:2B:74:33:CC:7C:3C:03:1D:ED:DF","sha256":"0D:8A:F7:33:E4:E3:ED:8C:3A:63:57:28:3A:5E:03:07:4B:2E:91:55:A3:F1:40:AF:57:69:CA:9A:93:8E:53:9B"}}},"request":{"raw":"GET /wp-content/themes/wordpress/images/Jackpot-Games/wm-casino.jpg HTTP/1.1\r\nHost: tobrut88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tobrut88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 10:42:03 GMT\r\netag: \"26e1-6871459d-c5c58e;;;\"\r\nlast-modified: Fri, 11 Jul 2025 17:10:53 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9953\r\naccept-ranges: bytes\r\ndate: Mon, 23 Mar 2026 10:42:04 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lyT7LC9xdde03BGsZuGnOOj4rGNa8n2Wn16rcG8d7yyHkSYc1XF%2FPt3lzx4xspuKwvihcG9vloaETX2cY1TG0EKue8S1r16Lmoekeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e0cd3c38f68de91-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9953,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x110, components 3","md5":"f85b71e07a3df3ef68c3c3fbc0d2a0b0","sha1":"75eac41162d8a3babbbabd6788f68ebfdf2255f2","sha256":"af2938a149b7513fdfe52a4a3a5b0d5c7bffb01f1b2e0aa92cda335fc400dda7","sha512":"3691c832141c5de97013e8310dad3432a88caf462c4f00117b9ca8c3c141cb3fa9f95af6e2994667470d24400e588ce615b9b5ebcb722605a2ed3cc64c73023f","ssdeep":"192:/fLmE0UbSDA0kw+ADM+NoETdmIrbPhXnCde+ksRvebCz8E/7V7sFH:/fLv0Umrkw+ET/fs/ksRWeX/7VAH","tlshash":"5922ae8125e187445f9afaa71df7f01d0f40227098eacbe31eb9488269726fd051a2cf","first_seen":"2026-03-23T10:42:29.144897Z","last_seen":"2026-03-23T10:42:29.144897Z","times_seen":1,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"tobrut88.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}