{"report_id":"3735c3a1-8711-4fd2-8b19-0e268f78a017","version":6,"status":"done","tags":[],"date":"2026-01-01T04:31:32Z","url":{"schema":"http","addr":"tmr89.bet/","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"104.21.45.22","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"tmr89.bet/","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"title":"tmr89 ระบบวอลเลทเล่นได้จริง ระบบเสถียร เล่นลื่นทุกอุปกรณ์","dom":{"size":272887,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (47823)","md5":"456eb059f39a2713ee1e5c2b3359468b","sha1":"ecf0f063ef82e1d55885aa38e4580b5bfb593142","sha256":"0202548adff32b177b088fbbf18612886351f307895faa5e7a0ed92805ec3943","sha512":"d2f0d609b2d127a8d2c1830dd1daba0f73079ecc36966efb4a47ee4a1656b5462ddfd3c60472450502bf64ad977e2f55028e1fc15fa13844f227190b14e3754c","ssdeep":"3072:wrkT4dUhczFA2GscVlmD0Vi5XBH7OYgCZCWBGiyGe7GNHUh36fxSpNH8DsyH4fYR:woTY6kCgHy36om","tlshash":"2744d5b33e431429312f45af1187774c30a19ed9f663b4e1fa72901a96f2e9133a2f56","dom_hash":"domhash06564f970670a5165f723026d20a3396","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tmr89.bet/","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"104.21.45.22","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-05T04:31:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"tmr89.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"tmr89.bet","ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":22,"request_count":22,"received_data":1111309,"sent_data":10943,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:3.33.0","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Yoast SEO:26.6","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"eniseysk.com","ip":{"addr":"104.21.70.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2010-04-20","domain_rank":1897794,"first_seen":"2014-12-17T12:09:30Z","last_seen":"2025-11-30T22:33:42.659014Z","alert_count":0,"request_count":2,"received_data":22825,"sent_data":1092,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"7thbc.info","ip":{"addr":"104.21.92.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-19","domain_rank":0,"first_seen":"2025-07-01T05:02:41.83491Z","last_seen":"2025-12-20T05:35:43.081038Z","alert_count":0,"request_count":7,"received_data":146401,"sent_data":3973,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tmr89.bet/","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce71388c2d441cfb9ef0985bc4e5bb71","sha1":"1e74c490ed76f671eb45ab0b45c9c9f5b9b89f0f","sha256":"efb5a648656ae8f944fbf74e5644126464160ab50197a288c8b587e74edd575a","sha512":"8ccd39ea8643980590cf71014ceee6bb774de11bc87aa162d3b1e48b0f6c392399186fabf147e0cbe9990950cf75e5517d78a357b01e6afbdb00472909db3a1d","ssdeep":"","tlshash":"89f0bef14158513f2ae2190a5412b2a63d7300baf3067080d46d9c605274ba9862afaa","size":476,"data":"","first_seen":"2023-03-07T01:02:50Z","last_seen":"2026-04-04T14:51:26.546525Z","times_seen":33621,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"560855b214a9908b8c3187e9f7fdbeeb","sha1":"1179abde869acf456883ca0f695d5bb906992a4e","sha256":"d67e64f3957ec9f36493b3ddf86fe72484d7b0626d3193cc2e7539abb59142f3","sha512":"78f8231dbcb2711410f93372dce90d2b498f8f74b8ff30e8f35c51d2abd18df64938fde77f8dd3faff0b947e39260bff84c9a02a2dbccad4444f10f2efe08b2d","ssdeep":"384:IBoZg/90FRKMrfkaF9kps3sWeSSBJXYxP/UiSBm8lHwSbM2nCk:i/9ZMrd9vs0SBJIxP/UiSB/lHwSbM2Ck","tlshash":"9a62b97d333655b12aa282aa9329a351733111ff7603842c793cece3550de9a3939e79","size":14539,"data":"","first_seen":"2025-08-27T15:08:20.141473Z","last_seen":"2026-04-04T15:08:28.156947Z","times_seen":5982,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e434b0b4f43ec7216073eed1f3ffb51","sha1":"8d8a4ab1ed63889095bdf38ba646319b639feabc","sha256":"dd0ec57abf154d52c161fae92db6014f042417d9660679097ae55287041ec52e","sha512":"20978b9f1afc586c91351ef67791224fb5469004a1ebb5af608a05f643103a358e605d2c54cdba2174bc35c266ec963690d5d1fc3f80a045f4c33fc5f67b9ab7","ssdeep":"","tlshash":"6d110cf3b3dd907fbaae6d66193402cd6a1c90735c100a5bfeac3575cc8042538b1d40","size":922,"data":"","first_seen":"2024-04-08T18:49:14Z","last_seen":"2026-04-04T14:47:19.017691Z","times_seen":176105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.7.2","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbe4b3628220901277c0c4234475e5cb","sha1":"c17291130bc11a7f39ce70fe869bf82946e7be8b","sha256":"10a2cf3d16091fbc89cc987160b62093515cd31f0762a751775999311c7313f4","sha512":"5cb99fff539c035311bc1d4c6188600f48fe8733034ba4c67c8afca0781e4a6cad38fd3523a85eb2f936d21dc9a94d3653733ecffe87881b502c447e9303e867","ssdeep":"","tlshash":"53614248f30074395ad7e3e1523fc84c72bb6424e99aa408b15ad4891dbb4d750e3fee","size":3236,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-04T09:14:25.156137Z","times_seen":1311,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/rocket-preload-links-js-extra","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8db2bdb42a3a7d189ed0697422776076","sha1":"5d671c27ee08a57eb283069dc218ab3347ed26ce","sha256":"434e81f69e4aecf04c70d556a550de2025577d94e47e567ad797dce68504ace8","sha512":"e67093699f488888121db3b71fdbeb1cf25a05a6036cf892414c8e6ffd49dd365dd916b552c8ddd6f02887d5a69afb8c6e03f597a314e29ed93c5aae17d445cb","ssdeep":"","tlshash":"f9215cb6f29d1d4240168efa8f64c637bfcd9d04e477c915e149d199c05df85d08f922","size":1203,"data":"","first_seen":"2026-01-01T04:31:39.297694Z","last_seen":"2026-01-01T04:31:39.297694Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"78fcf22162b18aa913864c54d098192c","sha1":"8a3bb1a5ffe036b8fb8a808d7b239bc00f7d759f","sha256":"af6c93464375a53e8db8d4104bf190e2e2c1b732f2973cb3c03589175e486880","sha512":"56a47a96187b6d5d5d0de55d2e329565cc649df31ad9d423e64d67de6324f365c0981c0c2007b55710d6b4da4bba96e6f60f478e0202d31c1b1d8e53306d37f0","ssdeep":"","tlshash":"f8a0120441ab0a0075814c700022813a65c9a440d085e00c978dc2800020b052734405","size":85,"data":"","first_seen":"2025-12-03T09:54:53.215673Z","last_seen":"2026-04-03T00:27:32.823385Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-04-04T14:45:59.544253Z","times_seen":108716,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","size":5314,"data":"","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-04-04T14:45:59.503379Z","times_seen":107552,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb15a10a641a318f91e7e912e4f9c184","sha1":"bd41f67233facb96976ed7b8e7207d52c03d340e","sha256":"f40767552e5e94b2d5f9a65d7f640cfa7d225298023dbd682095e040809a3d1a","sha512":"49570d36e5b1ae3c3a4965f7d054258ff676326bee0d9399aa990926e9a762f699de1d09078debadc43b363ae51d740ba33f2e8c64bb223a73d3c62872ebb3d2","ssdeep":"192:pDvu5/2Pbq1Ztbat1oeeC9X8UnZ/HuuwJgbClRL/YeFG/uW1evaO3Ve:pTw/4QOx+R8puVY","tlshash":"b60233487946746b3973f0f6218f02ca353a24426ced6854a6e1f8e82d7858d1463f7d","size":8892,"data":"","first_seen":"2023-03-07T01:19:39Z","last_seen":"2026-04-04T14:51:26.500036Z","times_seen":50745,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c96f86cfa0c37715e68a8c49e306cda3","sha1":"174e1ef4f1a5cc457fbb555ddc1b807801f75ba6","sha256":"7dd775a03d6ffa8f888d26f78311c48f21b1b2117380295c06a53abec22e1f76","sha512":"ecc932f4911f87cc689cff6d80e7b83c23ac0b0faf415449e7549fdd0634ed69bb964f64f0b8ec6d6f1a7b27eed0ae3e31f03e88413f6ec2699a63c7cc04a09c","ssdeep":"","tlshash":"a2f055b6729e1d4240168eda8f64c637bfcd9d0868b7c916e249e199c02ef85d08f922","size":464,"data":"","first_seen":"2026-01-01T04:31:39.29905Z","last_seen":"2026-01-01T04:31:39.29905Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-content/plugins/wp-rocket/assets/js/wpr-beacon.min.js","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7292e918daecc3cbe9b88be41439374","sha1":"4267f1c8d6ba9d49bd4de5d9a50753db19c6886e","sha256":"c887b51ed880800ad5057329aa53b8a55d31e34cc6e8406791c1e497355d4bd8","sha512":"af498333004d69a8d3a9eb779baf8a70a1ac08c44e8007a9da00071f73bfce6996375f95c830583e2b4671ed774ab254b075fa8f690bda7cfeacf4cf9fd7e1fe","ssdeep":"768:0sGdmuPXGPWao/BTBxHGWNm8U/gahHTFWRu5YensJLbjlFNcJTewptENIvtELBpg:NGdeo/BTHBQl1FIObn9vtELBpQiS1Q/u","tlshash":"51c2087372be683351cd10ce74203249b6345d49361ad068f9ac6dee71a5ec32a68fbd","size":26004,"data":"","first_seen":"2025-08-27T08:47:57.655165Z","last_seen":"2026-04-04T15:08:28.143563Z","times_seen":2723,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T14:48:47.313064Z","times_seen":638874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce508719eeface4176d82c2f600354fa","sha1":"d5387e85030e0d47d0ce5e3b1368db381055d28d","sha256":"37bd3c5eb64313910aa5b85c4500406626cd42b7c1fd684b5700b041f04bca69","sha512":"8882caeec5eb9fb2d95fdd4d326c601286d2046c42c33ece03145361871b127c85a03bb4e7c236c8fcd1ea313f3611e82c9c3c0a2a508d3dacc232098eb49c75","ssdeep":"","tlshash":"1ab012c1a0ac8b98fc761c10023041727005bd86d7315447e00c418c822250073a4113","size":96,"data":"","first_seen":"2025-12-04T06:24:37.796816Z","last_seen":"2026-04-04T15:20:54.70916Z","times_seen":830,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"acd93f5ae850d1d4ee8b15a9ff8ff0d2","sha1":"a22cc7f550184209205cde91d034dcd9c38b8f5d","sha256":"0ddcbc56de13d1e31bfdc5f92fffa847380e01b9a68d4cdf52f42e189cecb69a","sha512":"43d12327166c635908d8d413006106888acfbcd334666dcc74d4eeb843f023319d865ff5cfc57a8c59f33969377ecf58730be436df95c235bbe6d46574393f7e","ssdeep":"","tlshash":"bf3143a6f0fe70b7fa6f00a68037c286f430b63f3a4d4051e15d94ba2cb8c594453967","size":1755,"data":"","first_seen":"2025-12-04T06:24:37.798544Z","last_seen":"2026-04-04T14:18:44.304083Z","times_seen":443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-04-04T14:47:18.950328Z","times_seen":217943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T14:48:47.354409Z","times_seen":685505,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"046405de007ff73e52d17dab2af75258","sha1":"887cfb8a9de27005875f6e1c1d1ead43bd0865c8","sha256":"533e264cc615ee4601da8d2c1dee4a8987319e53d4d7162272f067fbbf250020","sha512":"280ff860a90ccffbef838f17a64c02abff9a806fd359a8e110e5d3e44b5a4961fd38637e242e431a7593d8ced74946bbf1450b6202341483bf89ab70d07660eb","ssdeep":"768:e44yLMNvgnDwYB+IlnHB9/bNlJyI3G7OaXiQx9kpETpUwnOQdZMvUtVo0uKHp+3:Ir6pyYG7OH2pHZMvUtzO3","tlshash":"dbb2b3ce7140706386eba1f8519f1a2652336026a20755cdbc3eeec55e68e9532b3f3d","size":25202,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-04T13:39:39.074783Z","times_seen":15317,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/astra-theme-js-js-extra","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5770f33ec53b78f93972914802858189","sha1":"18d8fd4022ef8cd4afff6ef9af3be294e600ccf4","sha256":"5644c04f547cd1b85f58566f60e39fd5a65ea380c6a274aa5dc16a3cec89250b","sha512":"86dfb1db07cc2b302b9ca5673c3a7faec6bd976e15aec902b04ebea265ec2282e099dc2f64e3ca2f8a059c49d411771320209527745fc411fc4d5305f656f22b","ssdeep":"","tlshash":"f4011204c1ab0a00b5818c700026813a65c9a440d085e00c978dc2800060b052734405","size":815,"data":"","first_seen":"2026-01-01T04:31:39.300909Z","last_seen":"2026-01-08T05:37:07.798815Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/rocket_lazyload_css-js-after","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3aa566a71951671b5650f66d446922ee","sha1":"c9b998ce59bb6e3d65e02cb91a53877c3f0030a8","sha256":"ac3cb330ef5888551953816199518095bfc0cb57fec454c483f088ea7ff9357e","sha512":"716ef4ed89a473b3ac2beb70e59d3cc1125442836913f125b994e081c0d5333aef44d2c2a83a03904ce3d0bfb1fea7c342d1469a874251b47792e3229a18545d","ssdeep":"","tlshash":"3e5131a6f0fe70b7ba6f00b68037c286f430a63bfa4d4051e15d94ba2cb8c594453967","size":2509,"data":"","first_seen":"2026-01-01T04:31:39.30174Z","last_seen":"2026-01-08T05:37:07.814875Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/rocket_lazyload_css-js-extra","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"673c0edc2c3edd9538d99aeaafd087d6","sha1":"3abc5da622bf6ad7d3867cb89940f3c9c9e92762","sha256":"3c78f2e3ec073da6d03534cc07e9d5a57cc40fc1cd398e485406ce63500eb306","sha512":"83e4ed7923f290bb9e12275fb77b0c752f0cb55e6ba42c71b0473d8b57c022bd3953d20c94ca4213cc55ff46cd315e223b8d6ce8f27c776fa821039b0e19eea7","ssdeep":"","tlshash":"b80112c1e0ac8b98fc761c30023041727045bd86d7315447e00c418c822250073a4113","size":846,"data":"","first_seen":"2026-01-01T04:31:39.302662Z","last_seen":"2026-01-08T05:37:07.822207Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.7.2","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d5125a49a5eb897d4dd60c98ca58e2f","sha1":"84c04d496cffbde9c05f679a4950e3bd03ef616a","sha256":"9e426b06ebb2fe02a8f495c8d6e2b5aea53f3446cac8aa0fd2cc0bebe366676a","sha512":"da884e15970181c70d2884591e851a4db0d51d481125268958f532ff406deabf08c716cf879fab9e298cbc520c55094eb07fb95d468fead68f535c8f480885fd","ssdeep":"1536:cCLOaWbzhwMhU1naVPhEhcHqkeSYPEMCEjZBywqIAm6YIzo+ajpy4UX8ulaij86I:esyxWNVNlx7gs7F23K","tlshash":"46d3d89230529cb646cf506bb417020db7221dadb402b4aebafd8cdb9674dc63376376","size":134630,"data":"","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-04-04T00:49:16.855255Z","times_seen":417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"tmr89.bet/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmr89.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 13:22:20 GMT","end":"Sun, 01 Feb 2026 14:20:52 GMT"},"fingerprint":{"sha1":"EE:EE:4E:1C:3B:8E:C5:DF:B9:32:AD:12:54:9C:80:42:5F:D4:B7:08","sha256":"AB:FC:E7:98:FD:BE:B2:2F:89:9E:F3:2B:E5:15:48:82:1E:B1:2D:65:7C:2D:A4:F8:89:F8:C5:74:94:C3:7C:B6"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: tmr89.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tmr89.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 78196\r\nlast-modified: Mon, 10 Nov 2025 12:19:30 GMT\r\netag: \"6911d852-13174\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CLhVBrYq4Fgl8AhOA6SzzEHltShmIp7C7MiMl7us1WadB0qsoskCmaJ%2F385OwR3PN3xY7tsZwicrqz2XhC7laXUfArH4fZhHHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b6f491a483c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78196,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261","md5":"e8a427e15cc502bef99cfd722b37ea98","sha1":"a9922842a120a7f1eaced667480c5e185a106d69","sha256":"d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef","sha512":"113775748a4166c07e58c26cf6db7fed473732dc6124b8ee0f0dcc0d6439eb2ab2c5d9e01c67324fdf9de4105349cf30cc5796a0b0e0ce9a08f337b9d4e10b7b","ssdeep":"1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU","tlshash":"3273121cf567643ef6a8e05f3c38256d4fd5c724e2e68a06748db808c4ce71d90879b6","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-04-04T14:50:33.147725Z","times_seen":119675,"resource_available":false,"data":null}},"time_used":940,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":749,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"tmr89.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmr89.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 13:22:20 GMT","end":"Sun, 01 Feb 2026 14:20:52 GMT"},"fingerprint":{"sha1":"EE:EE:4E:1C:3B:8E:C5:DF:B9:32:AD:12:54:9C:80:42:5F:D4:B7:08","sha256":"AB:FC:E7:98:FD:BE:B2:2F:89:9E:F3:2B:E5:15:48:82:1E:B1:2D:65:7C:2D:A4:F8:89:F8:C5:74:94:C3:7C:B6"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: tmr89.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tmr89.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 02 Nov 2025 06:23:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6906f8ee-15601\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ENjYQFts7%2F6h2G2WY2hPDRrrpIHhRXHQyDf0n4SdBcUB6P%2BmZtco2qnVaEovO2iw%2F4vIrzoi%2FVqzNihzypuDnRMrFNv%2F25grkQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b6f491a88453181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T14:48:47.354409Z","times_seen":685505,"resource_available":true,"data":null}},"time_used":771,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":767,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"tmr89.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmr89.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 13:22:20 GMT","end":"Sun, 01 Feb 2026 14:20:52 GMT"},"fingerprint":{"sha1":"EE:EE:4E:1C:3B:8E:C5:DF:B9:32:AD:12:54:9C:80:42:5F:D4:B7:08","sha256":"AB:FC:E7:98:FD:BE:B2:2F:89:9E:F3:2B:E5:15:48:82:1E:B1:2D:65:7C:2D:A4:F8:89:F8:C5:74:94:C3:7C:B6"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: tmr89.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tmr89.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 02 Nov 2025 06:23:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6906f8ee-3509\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WVb8JFF4LlNCa0IPDLy0qA71ynVcybFKvUaoS%2BVx6DqC8HsA0bdvZj7ndXsIcXwhcJaZKJykW62m232h5me3rbTLCbFW%2FkQ%2BbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b6f491a88463181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T14:48:47.313064Z","times_seen":638874,"resource_available":true,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":640,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"tmr89.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmr89.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 13:22:20 GMT","end":"Sun, 01 Feb 2026 14:20:52 GMT"},"fingerprint":{"sha1":"EE:EE:4E:1C:3B:8E:C5:DF:B9:32:AD:12:54:9C:80:42:5F:D4:B7:08","sha256":"AB:FC:E7:98:FD:BE:B2:2F:89:9E:F3:2B:E5:15:48:82:1E:B1:2D:65:7C:2D:A4:F8:89:F8:C5:74:94:C3:7C:B6"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1 HTTP/1.1\r\nHost: tmr89.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tmr89.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 05 Aug 2022 18:38:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62ed63b2-6272\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xHGJN0sCa6FABlJu6YZh4GPvh1iKwKKENfC9YvHdcPdN3cMtiXwNaibnPFMIm9XswYYWK6s7g7u9HgOMrDGGmUU%2FpD9KEmyHzQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b6f491a88483181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25202,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25115)","md5":"046405de007ff73e52d17dab2af75258","sha1":"887cfb8a9de27005875f6e1c1d1ead43bd0865c8","sha256":"533e264cc615ee4601da8d2c1dee4a8987319e53d4d7162272f067fbbf250020","sha512":"280ff860a90ccffbef838f17a64c02abff9a806fd359a8e110e5d3e44b5a4961fd38637e242e431a7593d8ced74946bbf1450b6202341483bf89ab70d07660eb","ssdeep":"768:e44yLMNvgnDwYB+IlnHB9/bNlJyI3G7OaXiQx9kpETpUwnOQdZMvUtVo0uKHp+3:Ir6pyYG7OH2pHZMvUtzO3","tlshash":"dbb2b3ce7140706386eba1f8519f1a2652336026a20755cdbc3eeec55e68e9532b3f3d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-04T13:39:39.074783Z","times_seen":15317,"resource_available":true,"data":null}},"time_used":637,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":636,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"tmr89.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-01T04:31:08.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmr89.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 13:22:20 GMT","end":"Sun, 01 Feb 2026 14:20:52 GMT"},"fingerprint":{"sha1":"EE:EE:4E:1C:3B:8E:C5:DF:B9:32:AD:12:54:9C:80:42:5F:D4:B7:08","sha256":"AB:FC:E7:98:FD:BE:B2:2F:89:9E:F3:2B:E5:15:48:82:1E:B1:2D:65:7C:2D:A4:F8:89:F8:C5:74:94:C3:7C:B6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tmr89.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 01 Jan 2026 04:31:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlink: \u003chttps://tmr89.bet/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://tmr89.bet/wp-json/wp/v2/pages/20\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://tmr89.bet/\u003e; rel=shortlink\r\nlast-modified: Thu, 01 Jan 2026 01:16:08 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=awuvwRlXF6lcUX%2FKgOjiAXcn%2F9Er3MHm9zFsj6yXAm0Ue1T4IPw3%2FmF215UplKKK%2FWGPTMn9QSf5VhpgWfcuqevM3oa8coE%3D\"}]}\r\nage: 11701\r\nx-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b6f4910a87856bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:3.33.0","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Yoast SEO:26.6","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271608,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (47866), with CRLF, LF line terminators","md5":"8353b18896c0d91f341ec80fc2079f16","sha1":"30c20a5fee449755b6396da02f1e657c3c0ebf0f","sha256":"69abbe4250a81262ffef3592ba1effdc8f3e63b9df9ddb2648284ec224373093","sha512":"87342e9520e59da8de9af1d21f1eff708700e0931ada737bc9a04a3209a3c76d9ca1c51beea804e3dc043e9aef66a8386c7f64054eb81cb001e8294e217e07c8","ssdeep":"3072:SMkT4dUhczFA2GscVlmD0Vi5XBH7BLG2Z4FGiK7GNHUNP6yTSpNH8VSwH+Be0Yiy:SjTYlr4fHmP6do","tlshash":"2344d4b33e431429312f45af1187774c30a19ed9e663b4e1fa72901b96f2e9033a2f56","first_seen":"2026-01-01T04:31:39.274182Z","last_seen":"2026-01-01T04:31:39.274182Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1247,"timings":{"blocked":29,"dns":4,"connect":1,"send":0,"wait":1188,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"tmr89.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eniseysk.com/wp-content/astra-local-fonts/sarabun/DtVjJx26TKEr37c9aBVJnw.woff2","fqdn":"eniseysk.com","domain":"eniseysk.com","tld":"com"},"ip":{"addr":"104.21.70.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eniseysk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:23:05 GMT","end":"Thu, 12 Mar 2026 15:21:44 GMT"},"fingerprint":{"sha1":"7F:CF:D1:48:AB:F0:7A:8C:39:A3:B4:3E:35:51:82:79:B6:37:FE:FC","sha256":"C9:7C:51:B6:4E:BD:91:1B:6D:20:32:01:6B:FE:B6:E4:80:0D:CE:DB:81:37:31:2A:78:3A:9C:B7:8A:99:93:27"}}},"request":{"raw":"GET /wp-content/astra-local-fonts/sarabun/DtVjJx26TKEr37c9aBVJnw.woff2 HTTP/1.1\r\nHost: eniseysk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tmr89.bet/\r\nOrigin: https://tmr89.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 11396\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Oct 2025 07:41:54 GMT\r\netag: \"68de2cc2-2c84\"\r\nexpires: Fri, 01 Jan 2027 04:31:11 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DnH9yJRCpJfqIgy2K7HGZToQikarrcPoOfSsu2Ow8fYbSXSJ1uKwYODW40droQ%2B0gdfqoid8IXtUdpM9Z1D17KRqC6VQos1TB1rVfQ%3D%3D\"}]}\r\ncf-ray: 9b6f491a9eb64e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11396,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11396, version 1.0","md5":"651078015294f075970d47e7628d0618","sha1":"f14b93137fa8f09414d9715aad752718677a3b6d","sha256":"04548534510686923239aeda26dd40fa57bf6cc55166204ef52b483bcf9e4228","sha512":"f129885011802b65fabf7c6a4d28c696a4bd6344cdb47638d358abe3213f0f86a6171a547b5d346ec6d6fab11d4c2a0e3c299f527a65ad45196bcb810cc8560d","ssdeep":"192:AXzsd2cptnEIqYj0g9UV9GhTy1ser8QHdf6mhJ2z4L+acEfRXmVoDi:2u2cpRTqZg9e4y1rrbxhemcEJ7Di","tlshash":"de32b037c5098e78d482b73eb4f0ebf0545ac865e8dac0158f95be416a7ab3007ba5d4","first_seen":"2025-04-24T12:29:13.363335Z","last_seen":"2026-04-03T19:20:55.906643Z","times_seen":747,"resource_available":false,"data":null}},"time_used":1050,"timings":{"blocked":41,"dns":26,"connect":4,"send":0,"wait":764,"receive":188,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmr89.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 13:22:20 GMT","end":"Sun, 01 Feb 2026 14:20:52 GMT"},"fingerprint":{"sha1":"EE:EE:4E:1C:3B:8E:C5:DF:B9:32:AD:12:54:9C:80:42:5F:D4:B7:08","sha256":"AB:FC:E7:98:FD:BE:B2:2F:89:9E:F3:2B:E5:15:48:82:1E:B1:2D:65:7C:2D:A4:F8:89:F8:C5:74:94:C3:7C:B6"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: tmr89.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tmr89.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 13276\r\nlast-modified: Mon, 10 Nov 2025 12:19:30 GMT\r\netag: \"6911d852-33dc\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hC2%2Bx904DcYyroN0IMIWnXfLvst%2Fya%2FQthf0iVFJWs%2FWgp4vE8joXnI2UurWvp5CiAG7MS%2FF6IEGoqePPl940fYSjwbJpON0PA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b6f491a483b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13276,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13276, version 331.-31261","md5":"f0f8230116992e521526097a28f54066","sha1":"0447c6b10bbf73f97b23dcfd6e6a48510822cb6e","sha256":"8afc6e5e842baab16010c2ce6fcf48ec4ded8e1579a37c1f1bc027e120d04951","sha512":"8d16904f9bff3e0660c960bfc63cfbb649fa656f1e0b24112578da414cdd141bc2ef766612dff765b58497c260e013cbd333c3a75ab2bd2ee861be4c8a538f36","ssdeep":"192:VWXmua5PVVX/EWyrSEnAxzot9ACR1uTa+3u4FcOorKgtwiPDlfjfYbnNPGwmpn:buaGrTAxkt9xKTi4gHtwiRoo5","tlshash":"0452d154054d49cae0086c730246e2a26ff0b4998fb1e9e29c6616836eb2ff40fd7f06","first_seen":"2023-04-05T11:05:25Z","last_seen":"2026-04-04T14:56:22.463549Z","times_seen":38052,"resource_available":false,"data":null}},"time_used":792,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":792,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"tmr89.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"7thbc.info/wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2","fqdn":"7thbc.info","domain":"7thbc.info","tld":"info"},"ip":{"addr":"104.21.92.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7thbc.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 05:53:32 GMT","end":"Wed, 11 Feb 2026 06:50:05 GMT"},"fingerprint":{"sha1":"74:C7:55:14:7C:97:2D:E1:CB:5E:8A:5E:1D:7A:BE:7D:78:35:9B:B8","sha256":"A8:C1:0B:A2:50:5F:29:B0:54:39:63:62:E0:3E:5E:0F:55:16:BC:2C:F5:A0:62:CF:C2:5B:8A:8C:4C:98:A0:95"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2 HTTP/1.1\r\nHost: 7thbc.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tmr89.bet/\r\nOrigin: https://tmr89.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40128\r\nserver: cloudflare\r\nlast-modified: Wed, 21 May 2025 16:30:30 GMT\r\netag: \"682dffa6-9cc0\"\r\nexpires: Fri, 01 Jan 2027 04:31:11 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AXWpoT%2BKCnDTjLS%2FfPOzkvSS0PTdHUkimsPkw4tvFh3tRHuJOIEc0QyMCUytxI2T1m7E5WTA8xoEjQEZMcRBLRRXURdETKl7\"}]}\r\ncf-ray: 9b6f491b080256c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32768,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"5e8c321944b3e95d7b647a0cfa69cb39","sha1":"9aa298c2f5bc6af8f43af786b7d88ff914f61fa6","sha256":"499437402607baedefecdb2d2e20364a5fa4c23a19e68b5de86866fdc86b8b6e","sha512":"6b3c717d5938060aabf045e4e7b3a64af3f30ac22f2d6bac299ee19aaa8fc765f176df52b474912c0eecd481e7e626483d3f772af4406a60888d97735b065107","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+M:VcI/iEEEtXdFJj+0GPwHbP+M","tlshash":"c3e2f2358f18df1dc11aba703821f5acb8082b908f9e141b471ac3b7085e9f2b4c65dd","first_seen":"2025-05-05T11:33:07.610487Z","last_seen":"2026-04-03T05:14:24.132957Z","times_seen":235,"resource_available":false,"data":null}},"time_used":1180,"timings":{"blocked":101,"dns":69,"connect":1,"send":0,"wait":765,"receive":195,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmr89.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 13:22:20 GMT","end":"Sun, 01 Feb 2026 14:20:52 GMT"},"fingerprint":{"sha1":"EE:EE:4E:1C:3B:8E:C5:DF:B9:32:AD:12:54:9C:80:42:5F:D4:B7:08","sha256":"AB:FC:E7:98:FD:BE:B2:2F:89:9E:F3:2B:E5:15:48:82:1E:B1:2D:65:7C:2D:A4:F8:89:F8:C5:74:94:C3:7C:B6"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1\r\nHost: tmr89.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tmr89.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Dec 2025 03:49:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692fb35a-161d\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yBeqQw7LV2HPeLFzL2NG1FYSC80h5v9smVMg%2FY58AMGT0VJMINHhRaHANo6zXgFoQDTLcATRGGDX6ZS%2FzZjIYpiazdskrrMmPg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b6f491a98493181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-04-04T14:45:59.544253Z","times_seen":108716,"resource_available":true,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"tmr89.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-content/uploads/2025/11/cropped-tmr89-logo-32x32.png","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:11.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmr89.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 13:22:20 GMT","end":"Sun, 01 Feb 2026 14:20:52 GMT"},"fingerprint":{"sha1":"EE:EE:4E:1C:3B:8E:C5:DF:B9:32:AD:12:54:9C:80:42:5F:D4:B7:08","sha256":"AB:FC:E7:98:FD:BE:B2:2F:89:9E:F3:2B:E5:15:48:82:1E:B1:2D:65:7C:2D:A4:F8:89:F8:C5:74:94:C3:7C:B6"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/cropped-tmr89-logo-32x32.png HTTP/1.1\r\nHost: tmr89.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tmr89.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 01 Jan 2026 04:31:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 1231\r\nlast-modified: Wed, 05 Nov 2025 17:28:13 GMT\r\netag: \"690b892d-4cf\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j3WwiBzFV3ciqICCJAT4h31SBdF9rUjVbVw7qq8J2bqZO%2FtxOPiPpCZOkXqxn5rXwsR9WofnBEeTMy1v0NG9I03jOS5B2mw8fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b6f4923a8d03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"070306fbc877e6a2e41cfbd1d9be71be","sha1":"47430cc24c01f1872e328bca4bf27fdcf0498f9a","sha256":"9462f51b621f4fa97ecdc15df4d0a295f0a3f4091f5bdd017468bae3099193c3","sha512":"e1cee2f07fb56ee9248c0a5c40955a5eff5da28dbceb4759b1e83f9c28595f38a8793e621419c240cd279984e5e29f88477cde32feb62ddfb4d18533d93ed0de","ssdeep":"","tlshash":"05210dd3c6c75d58c8194216837559addf60c21613439cd59260d72d4f051f8d633f97","first_seen":"2026-01-01T04:31:39.282873Z","last_seen":"2026-01-01T04:31:39.282873Z","times_seen":1,"resource_available":false,"data":null}},"time_used":657,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":656,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"tmr89.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eniseysk.com/wp-content/astra-local-fonts/sarabun/DtVjJx26TKEr37c9aAFJn2QN.woff2","fqdn":"eniseysk.com","domain":"eniseysk.com","tld":"com"},"ip":{"addr":"104.21.70.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eniseysk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:23:05 GMT","end":"Thu, 12 Mar 2026 15:21:44 GMT"},"fingerprint":{"sha1":"7F:CF:D1:48:AB:F0:7A:8C:39:A3:B4:3E:35:51:82:79:B6:37:FE:FC","sha256":"C9:7C:51:B6:4E:BD:91:1B:6D:20:32:01:6B:FE:B6:E4:80:0D:CE:DB:81:37:31:2A:78:3A:9C:B7:8A:99:93:27"}}},"request":{"raw":"GET /wp-content/astra-local-fonts/sarabun/DtVjJx26TKEr37c9aAFJn2QN.woff2 HTTP/1.1\r\nHost: eniseysk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tmr89.bet/\r\nOrigin: https://tmr89.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 9868\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Oct 2025 07:41:54 GMT\r\netag: \"68de2cc2-268c\"\r\nexpires: Fri, 01 Jan 2027 04:31:11 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NofeiF0KIHfmMnBkgcRF5Gr5at1Tar0xO1od0chUs6bZByVkSSKy%2F8nIy62HadXs2bn9hwRkuYaVvM0Cy2R3EC4%2FrRta%2B21jR9TzZQ%3D%3D\"}]}\r\ncf-ray: 9b6f491a9eb54e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9868,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9868, version 1.0","md5":"7d95714498a024618d183a88e668f9cf","sha1":"04e7185bf7f4589328c4fcbe3b41989c0e6684b5","sha256":"444ccfffc6e9201b86993a233a42481bee7fe485fe5f330d956f22356249b392","sha512":"cfaa4fc70ab11c8ac5a626b20178f18219e7b003e22c7e7f312a295606807af1409a7d3090b249624172b7bfb96e13e7fd95febcb3d1749519720c2a82c69c88","ssdeep":"192:tWTFgbMkO2D/JLj3ejS9ZD9+Y4LmxRe2+G7WP1MtODyhvWihCS:tOibMkO2dHejS9sme5yG4Oin3","tlshash":"6812bffe8dbe403e8ac094fadda72190f89889f6ad2181fd1a35178124cf5503b67f46","first_seen":"2025-05-10T00:20:07.735619Z","last_seen":"2026-04-03T19:20:55.910466Z","times_seen":275,"resource_available":false,"data":null}},"time_used":1094,"timings":{"blocked":38,"dns":26,"connect":1,"send":0,"wait":806,"receive":197,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"7thbc.info/wp-content/uploads/elementor/google-fonts/fonts/sarabun-dtvmjx26tker37c9yk5silss6w.woff2","fqdn":"7thbc.info","domain":"7thbc.info","tld":"info"},"ip":{"addr":"104.21.92.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7thbc.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 05:53:32 GMT","end":"Wed, 11 Feb 2026 06:50:05 GMT"},"fingerprint":{"sha1":"74:C7:55:14:7C:97:2D:E1:CB:5E:8A:5E:1D:7A:BE:7D:78:35:9B:B8","sha256":"A8:C1:0B:A2:50:5F:29:B0:54:39:63:62:E0:3E:5E:0F:55:16:BC:2C:F5:A0:62:CF:C2:5B:8A:8C:4C:98:A0:95"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/sarabun-dtvmjx26tker37c9yk5silss6w.woff2 HTTP/1.1\r\nHost: 7thbc.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tmr89.bet/\r\nOrigin: https://tmr89.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 11596\r\nserver: cloudflare\r\nlast-modified: Wed, 21 May 2025 16:30:59 GMT\r\netag: \"682dffc3-2d4c\"\r\nexpires: Fri, 01 Jan 2027 04:31:11 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9w%2FU5us%2F5AgTah%2FR0bUCQGS80vHpPNMZ%2BzJHACJP0SnypOcEp3nyqjfh1uAmJuDGDABgP2ApHLeZrRrKPWl6OoOUBxDqfcMl\"}]}\r\ncf-ray: 9b6f491b080356c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11596, version 1.0","md5":"ef146f9c480eb3eb933d935f3b00247c","sha1":"1fc160e2cb800cf8540cead1cbaa62209dcfa17f","sha256":"b7e814f0f8a07648c77837917ff896c819d44ed4688a83f49b9cb29fdf7898fb","sha512":"17068f5cf7451bafd5fc1ecbec4f4f23b278fa3a59344719e3e36d7b4860ef075f4fc6a53b32197d7086893f538d73815426bd895523c5f90aac11c3533364fb","ssdeep":"192:SuGl/xTbGoZBa6ClO7R9ofsWDHsLtLwHD4w5gUrVK+yK2wxBAQAqGnNzO:DGlYoW6UO7zdoypEr5XHBrxyQAqCzO","tlshash":"d032b065e96d1b43cad722fd01eff588ac9497487f2877b7770435aac4b18913c02782","first_seen":"2025-04-24T12:29:13.324174Z","last_seen":"2026-04-03T19:19:32.298135Z","times_seen":592,"resource_available":false,"data":null}},"time_used":1039,"timings":{"blocked":-1,"dns":66,"connect":3,"send":0,"wait":740,"receive":181,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmr89.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 13:22:20 GMT","end":"Sun, 01 Feb 2026 14:20:52 GMT"},"fingerprint":{"sha1":"EE:EE:4E:1C:3B:8E:C5:DF:B9:32:AD:12:54:9C:80:42:5F:D4:B7:08","sha256":"AB:FC:E7:98:FD:BE:B2:2F:89:9E:F3:2B:E5:15:48:82:1E:B1:2D:65:7C:2D:A4:F8:89:F8:C5:74:94:C3:7C:B6"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: tmr89.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tmr89.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 02 Nov 2025 06:23:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6906f8ee-53d8\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7xmMAYaB40smCFi3S534i9LDPR1NQDHtp%2FrE2mTc%2F0TtPu0Xr8nrR3VlBfxueZ7xzWQwgunKU0rvnv9M3IqDRxK2zAVW6X5XFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b6f491a88473181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-04-04T14:47:18.950328Z","times_seen":217943,"resource_available":true,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":570,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"tmr89.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmr89.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 13:22:20 GMT","end":"Sun, 01 Feb 2026 14:20:52 GMT"},"fingerprint":{"sha1":"EE:EE:4E:1C:3B:8E:C5:DF:B9:32:AD:12:54:9C:80:42:5F:D4:B7:08","sha256":"AB:FC:E7:98:FD:BE:B2:2F:89:9E:F3:2B:E5:15:48:82:1E:B1:2D:65:7C:2D:A4:F8:89:F8:C5:74:94:C3:7C:B6"}}},"request":{"raw":"GET /wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js HTTP/1.1\r\nHost: tmr89.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tmr89.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Nov 2025 12:19:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6911d858-22bc\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ia7LXzPUWxvtfJLdLSsVbqNme2DOxJjFZaw0VCwwKsJ4LJ0yX7hcgBrNi2W7KZE%2BxVf%2ByAv85g3BNyg8SFY0byy4tgUFpDQwcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b6f491a984d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8892,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8892), with no line terminators","md5":"fb15a10a641a318f91e7e912e4f9c184","sha1":"bd41f67233facb96976ed7b8e7207d52c03d340e","sha256":"f40767552e5e94b2d5f9a65d7f640cfa7d225298023dbd682095e040809a3d1a","sha512":"49570d36e5b1ae3c3a4965f7d054258ff676326bee0d9399aa990926e9a762f699de1d09078debadc43b363ae51d740ba33f2e8c64bb223a73d3c62872ebb3d2","ssdeep":"192:pDvu5/2Pbq1Ztbat1oeeC9X8UnZ/HuuwJgbClRL/YeFG/uW1evaO3Ve:pTw/4QOx+R8puVY","tlshash":"b60233487946746b3973f0f6218f02ca353a24426ced6854a6e1f8e82d7858d1463f7d","first_seen":"2023-03-07T01:19:39Z","last_seen":"2026-04-04T14:51:26.500036Z","times_seen":50745,"resource_available":true,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"tmr89.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"7thbc.info/wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2","fqdn":"7thbc.info","domain":"7thbc.info","tld":"info"},"ip":{"addr":"104.21.92.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7thbc.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 05:53:32 GMT","end":"Wed, 11 Feb 2026 06:50:05 GMT"},"fingerprint":{"sha1":"74:C7:55:14:7C:97:2D:E1:CB:5E:8A:5E:1D:7A:BE:7D:78:35:9B:B8","sha256":"A8:C1:0B:A2:50:5F:29:B0:54:39:63:62:E0:3E:5E:0F:55:16:BC:2C:F5:A0:62:CF:C2:5B:8A:8C:4C:98:A0:95"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2 HTTP/1.1\r\nHost: 7thbc.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://tmr89.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tmr89.bet/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40128\r\nserver: cloudflare\r\nlast-modified: Wed, 21 May 2025 16:30:30 GMT\r\netag: \"682dffa6-9cc0\"\r\nexpires: Fri, 01 Jan 2027 04:31:11 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nlza87Ws2gsOLvLZxsqeckNBLi9ETHx50Adw4wB15%2BMIQAQKuUJU0x4i5osTVaStu1tbjkNHo1HivtwGklugmdkXah%2F2yV%2FL\"}]}\r\ncf-ray: 9b6f491b681856c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32768,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"5e8c321944b3e95d7b647a0cfa69cb39","sha1":"9aa298c2f5bc6af8f43af786b7d88ff914f61fa6","sha256":"499437402607baedefecdb2d2e20364a5fa4c23a19e68b5de86866fdc86b8b6e","sha512":"6b3c717d5938060aabf045e4e7b3a64af3f30ac22f2d6bac299ee19aaa8fc765f176df52b474912c0eecd481e7e626483d3f772af4406a60888d97735b065107","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+M:VcI/iEEEtXdFJj+0GPwHbP+M","tlshash":"c3e2f2358f18df1dc11aba703821f5acb8082b908f9e141b471ac3b7085e9f2b4c65dd","first_seen":"2025-05-05T11:33:07.610487Z","last_seen":"2026-04-03T05:14:24.132957Z","times_seen":235,"resource_available":false,"data":null}},"time_used":908,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":708,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-content/uploads/2025/11/cropped-tmr89-logo-1-300x100.png.webp","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:11.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmr89.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 13:22:20 GMT","end":"Sun, 01 Feb 2026 14:20:52 GMT"},"fingerprint":{"sha1":"EE:EE:4E:1C:3B:8E:C5:DF:B9:32:AD:12:54:9C:80:42:5F:D4:B7:08","sha256":"AB:FC:E7:98:FD:BE:B2:2F:89:9E:F3:2B:E5:15:48:82:1E:B1:2D:65:7C:2D:A4:F8:89:F8:C5:74:94:C3:7C:B6"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/cropped-tmr89-logo-1-300x100.png.webp HTTP/1.1\r\nHost: tmr89.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tmr89.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10278\r\nlast-modified: Thu, 06 Nov 2025 04:05:17 GMT\r\netag: \"690c1e7d-2826\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vug5HEGFEesUp0VEyPd0o1gfW5y9XIzS%2BepG0fEChzaI82rjMmmMMH9OtKPvT4ULj9iAUBdO%2BpxylNfyyEix20IuQY8bJZNxqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b6f491ec89e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10278,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5214fa04d6f28cb01bf22e1735c76014","sha1":"c8136155a723398749120b453105297269b0fe4c","sha256":"e0e750a475f2362ec88f4a3168769804c059b5ad5067fe88f289aa24da2ba79c","sha512":"6dabefd228e7091ba8c65e9856def0b3802c60da05398f4d2c66de8c61ba94379a0e01b59515c9860049f2ca253ddda93ad550e95e6adc7e1f61a80f89c6b47e","ssdeep":"192:pH7gjD/pVKNZgZL3QoM219M3XPqdf7RzER4rmjOIlJchL2H5RQIu:h7q/PKNZ6LAFBPc75rmhli8ZiD","tlshash":"8f22bff3020ed31cd09f2cbb19de8c45e247a58fcb6168629967707a5c43349a1173bc","first_seen":"2026-01-01T04:31:39.286574Z","last_seen":"2026-01-01T04:31:39.286574Z","times_seen":1,"resource_available":false,"data":null}},"time_used":826,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":825,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"tmr89.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-content/uploads/2025/11/tmr89-key.png.webp","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:11.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmr89.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 13:22:20 GMT","end":"Sun, 01 Feb 2026 14:20:52 GMT"},"fingerprint":{"sha1":"EE:EE:4E:1C:3B:8E:C5:DF:B9:32:AD:12:54:9C:80:42:5F:D4:B7:08","sha256":"AB:FC:E7:98:FD:BE:B2:2F:89:9E:F3:2B:E5:15:48:82:1E:B1:2D:65:7C:2D:A4:F8:89:F8:C5:74:94:C3:7C:B6"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/tmr89-key.png.webp HTTP/1.1\r\nHost: tmr89.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tmr89.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 56008\r\nlast-modified: Wed, 05 Nov 2025 17:24:54 GMT\r\netag: \"690b8866-dac8\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9GrONOZLspH2dNjW6d28%2FOGpgxmDV8u5IKqHJimGvBiNOvzMIeObLIMPpnjPq9YxbV0Q3PTRQZZ3ugoHJEnY9VENI5IAd7kaYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b6f491ec89f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56008,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x434, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6b840eb842d5136e267b7f0557cf99e3","sha1":"e6a0fa01207d371f2c0b90e919d5429b7e411b81","sha256":"e52ffb57b62d1101068bf7090122efc03901be38c8ce02272cf45c1a36fbbaee","sha512":"54a2ac549577dcbae3d92f52d8ba4c4fd7c20c727d93382f0b9e89656c68c7885729fa115b12ebf62f3209f104e0d24b766887e9651e0eb93b90d23554cc611c","ssdeep":"1536:YqlsvOIBuMcBxbYSCR6H6g6ju2HdTnX686C7NBGfB9:1i7cbbY3eYj59TX6VKD2B9","tlshash":"4343021942cc5df85aa416ba4b3a792ecf776300821ca12a7af5bb4368c17d452ff423","first_seen":"2026-01-01T04:31:39.287604Z","last_seen":"2026-01-01T04:31:39.287604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":998,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":798,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"tmr89.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-content/uploads/2025/11/%E0%B8%A3%E0%B8%A7%E0%B8%A1%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B9%81%E0%B8%88%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81-tmr89-%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%E0%B8%A7%E0%B8%AD%E0%B8%A5%E0%B9%80%E0%B8%A5%E0%B8%97-%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87-%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%9B%E0%B8%B4%E0%B8%94-%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%84.png.webp","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:11.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmr89.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 13:22:20 GMT","end":"Sun, 01 Feb 2026 14:20:52 GMT"},"fingerprint":{"sha1":"EE:EE:4E:1C:3B:8E:C5:DF:B9:32:AD:12:54:9C:80:42:5F:D4:B7:08","sha256":"AB:FC:E7:98:FD:BE:B2:2F:89:9E:F3:2B:E5:15:48:82:1E:B1:2D:65:7C:2D:A4:F8:89:F8:C5:74:94:C3:7C:B6"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/%E0%B8%A3%E0%B8%A7%E0%B8%A1%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B9%81%E0%B8%88%E0%B8%81%E0%B8%AB%E0%B8%99%E0%B8%B1%E0%B8%81-tmr89-%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%E0%B8%A7%E0%B8%AD%E0%B8%A5%E0%B9%80%E0%B8%A5%E0%B8%97-%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87-%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%9B%E0%B8%B4%E0%B8%94-%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%84.png.webp HTTP/1.1\r\nHost: tmr89.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tmr89.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 64860\r\nlast-modified: Wed, 05 Nov 2025 17:25:15 GMT\r\netag: \"690b887b-fd5c\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AhLFfPxBE67kDzKp%2B%2F3xn2Hw9lELPk2mO%2BcHTw4jBfXFEqClffrHn3XUONQfvWSBti79mOppXpPrJqEtq7yKSLVKeD5bZL%2BUKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b6f491ec8a03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64860,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x434, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c68a17cb2438b3db145ee5ff1b427ac0","sha1":"ab10f652fa0e51881bd9a96ac306bd1c31b15104","sha256":"8a6300d66d62a7a8c7a430afca499a8c91aeab728ec98d5bc7b7d176b4c8c2ce","sha512":"1070f632fb5050f6d6430727c926878e80bc644e563d71866539a34dfc8b6c22cd710b2a756f972133a2bcf7812b266a1a140a46b68569814923b1364d653ba4","ssdeep":"1536:fqvRr6UbyyWRl0hCx+1AhwmwGiaoLDuDSqEoRhfYvnD8MTyFBdttp:C5rZb1Wf0h7o5iDLD6hfYvnDd8","tlshash":"475312ebd4fa6fa11493334650f7fb60c5fca8f963a0b091097aac29c1952d48e0538e","first_seen":"2026-01-01T04:31:39.288683Z","last_seen":"2026-01-01T04:31:39.288683Z","times_seen":1,"resource_available":false,"data":null}},"time_used":940,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":753,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"tmr89.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmr89.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 13:22:20 GMT","end":"Sun, 01 Feb 2026 14:20:52 GMT"},"fingerprint":{"sha1":"EE:EE:4E:1C:3B:8E:C5:DF:B9:32:AD:12:54:9C:80:42:5F:D4:B7:08","sha256":"AB:FC:E7:98:FD:BE:B2:2F:89:9E:F3:2B:E5:15:48:82:1E:B1:2D:65:7C:2D:A4:F8:89:F8:C5:74:94:C3:7C:B6"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1\r\nHost: tmr89.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tmr89.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Dec 2025 03:49:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692fb35a-14c2\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f3njsE2jNvoEabhs4ubHmo9kAVzqJDcqv%2FOlONcpFkKXA3TlQY3bDXWGZp3RKrnG4H5CqnMvQLdePslk5FC%2BF44LXa9xmqhcBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b6f491a984a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-04-04T14:45:59.503379Z","times_seen":107552,"resource_available":true,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"tmr89.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"7thbc.info/wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2","fqdn":"7thbc.info","domain":"7thbc.info","tld":"info"},"ip":{"addr":"104.21.92.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7thbc.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 05:53:32 GMT","end":"Wed, 11 Feb 2026 06:50:05 GMT"},"fingerprint":{"sha1":"74:C7:55:14:7C:97:2D:E1:CB:5E:8A:5E:1D:7A:BE:7D:78:35:9B:B8","sha256":"A8:C1:0B:A2:50:5F:29:B0:54:39:63:62:E0:3E:5E:0F:55:16:BC:2C:F5:A0:62:CF:C2:5B:8A:8C:4C:98:A0:95"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2 HTTP/1.1\r\nHost: 7thbc.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://tmr89.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tmr89.bet/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40128\r\nserver: cloudflare\r\nlast-modified: Wed, 21 May 2025 16:30:30 GMT\r\netag: \"682dffa6-9cc0\"\r\nexpires: Fri, 01 Jan 2027 04:31:11 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QBHtw00HsdBKApMGmp4cCH%2B1seDrtm8loX89TjIPLWwc%2BCo48vVOnCeDOavd8pFz%2F0zN4UeqrElwUVIYTbz5MavrlHre1Mxm\"}]}\r\ncf-ray: 9b6f491b581456c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32768,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"5e8c321944b3e95d7b647a0cfa69cb39","sha1":"9aa298c2f5bc6af8f43af786b7d88ff914f61fa6","sha256":"499437402607baedefecdb2d2e20364a5fa4c23a19e68b5de86866fdc86b8b6e","sha512":"6b3c717d5938060aabf045e4e7b3a64af3f30ac22f2d6bac299ee19aaa8fc765f176df52b474912c0eecd481e7e626483d3f772af4406a60888d97735b065107","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+M:VcI/iEEEtXdFJj+0GPwHbP+M","tlshash":"c3e2f2358f18df1dc11aba703821f5acb8082b908f9e141b471ac3b7085e9f2b4c65dd","first_seen":"2025-05-05T11:33:07.610487Z","last_seen":"2026-04-03T05:14:24.132957Z","times_seen":235,"resource_available":false,"data":null}},"time_used":914,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":714,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-content/astra-local-fonts/sarabun/DtVjJx26TKEr37c9aBVJnw.woff2","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmr89.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 13:22:20 GMT","end":"Sun, 01 Feb 2026 14:20:52 GMT"},"fingerprint":{"sha1":"EE:EE:4E:1C:3B:8E:C5:DF:B9:32:AD:12:54:9C:80:42:5F:D4:B7:08","sha256":"AB:FC:E7:98:FD:BE:B2:2F:89:9E:F3:2B:E5:15:48:82:1E:B1:2D:65:7C:2D:A4:F8:89:F8:C5:74:94:C3:7C:B6"}}},"request":{"raw":"GET /wp-content/astra-local-fonts/sarabun/DtVjJx26TKEr37c9aBVJnw.woff2 HTTP/1.1\r\nHost: tmr89.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tmr89.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 11396\r\nlast-modified: Thu, 06 Nov 2025 04:04:59 GMT\r\netag: \"690c1e6b-2c84\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GTZmDlxWcMWJluF%2FWXl5yhHtUinI4NMwr5i8L%2FFF8v%2Fo6ugQ%2F%2B5imqyNTzfRpUbi9r9ENNCthN6JxdJUypDKzH6yLZOOlLSwjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b6f491a38383181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11396,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11396, version 1.0","md5":"651078015294f075970d47e7628d0618","sha1":"f14b93137fa8f09414d9715aad752718677a3b6d","sha256":"04548534510686923239aeda26dd40fa57bf6cc55166204ef52b483bcf9e4228","sha512":"f129885011802b65fabf7c6a4d28c696a4bd6344cdb47638d358abe3213f0f86a6171a547b5d346ec6d6fab11d4c2a0e3c299f527a65ad45196bcb810cc8560d","ssdeep":"192:AXzsd2cptnEIqYj0g9UV9GhTy1ser8QHdf6mhJ2z4L+acEfRXmVoDi:2u2cpRTqZg9e4y1rrbxhemcEJ7Di","tlshash":"de32b037c5098e78d482b73eb4f0ebf0545ac865e8dac0158f95be416a7ab3007ba5d4","first_seen":"2025-04-24T12:29:13.363335Z","last_seen":"2026-04-03T19:20:55.906643Z","times_seen":747,"resource_available":false,"data":null}},"time_used":799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":798,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"tmr89.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"7thbc.info/wp-content/uploads/elementor/google-fonts/fonts/sarabun-dtvjjx26tker37c9abvjnw.woff2","fqdn":"7thbc.info","domain":"7thbc.info","tld":"info"},"ip":{"addr":"104.21.92.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7thbc.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 05:53:32 GMT","end":"Wed, 11 Feb 2026 06:50:05 GMT"},"fingerprint":{"sha1":"74:C7:55:14:7C:97:2D:E1:CB:5E:8A:5E:1D:7A:BE:7D:78:35:9B:B8","sha256":"A8:C1:0B:A2:50:5F:29:B0:54:39:63:62:E0:3E:5E:0F:55:16:BC:2C:F5:A0:62:CF:C2:5B:8A:8C:4C:98:A0:95"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/sarabun-dtvjjx26tker37c9abvjnw.woff2 HTTP/1.1\r\nHost: 7thbc.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tmr89.bet/\r\nOrigin: https://tmr89.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 11396\r\nserver: cloudflare\r\nlast-modified: Wed, 21 May 2025 16:30:59 GMT\r\netag: \"682dffc3-2c84\"\r\nexpires: Fri, 01 Jan 2027 04:31:11 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RpozXiy01VSpbIT5xuafdl%2F%2F%2B%2F6fsHZTsFTYLVgDmUV5yZDp6GFpgbIikuMbFOb5InaHkyyD%2Fo1PCaob5mdlNTkSN97fC8%2Fk\"}]}\r\ncf-ray: 9b6f491b080156c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11396,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11396, version 1.0","md5":"651078015294f075970d47e7628d0618","sha1":"f14b93137fa8f09414d9715aad752718677a3b6d","sha256":"04548534510686923239aeda26dd40fa57bf6cc55166204ef52b483bcf9e4228","sha512":"f129885011802b65fabf7c6a4d28c696a4bd6344cdb47638d358abe3213f0f86a6171a547b5d346ec6d6fab11d4c2a0e3c299f527a65ad45196bcb810cc8560d","ssdeep":"192:AXzsd2cptnEIqYj0g9UV9GhTy1ser8QHdf6mhJ2z4L+acEfRXmVoDi:2u2cpRTqZg9e4y1rrbxhemcEJ7Di","tlshash":"de32b037c5098e78d482b73eb4f0ebf0545ac865e8dac0158f95be416a7ab3007ba5d4","first_seen":"2025-04-24T12:29:13.363335Z","last_seen":"2026-04-03T19:20:55.906643Z","times_seen":747,"resource_available":false,"data":null}},"time_used":1170,"timings":{"blocked":98,"dns":69,"connect":3,"send":0,"wait":767,"receive":187,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.7.2","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmr89.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 13:22:20 GMT","end":"Sun, 01 Feb 2026 14:20:52 GMT"},"fingerprint":{"sha1":"EE:EE:4E:1C:3B:8E:C5:DF:B9:32:AD:12:54:9C:80:42:5F:D4:B7:08","sha256":"AB:FC:E7:98:FD:BE:B2:2F:89:9E:F3:2B:E5:15:48:82:1E:B1:2D:65:7C:2D:A4:F8:89:F8:C5:74:94:C3:7C:B6"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.7.2 HTTP/1.1\r\nHost: tmr89.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tmr89.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 05 Aug 2022 18:38:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62ed63b2-ca4\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5OnzAlvf9dNvJe%2F%2FqU9OjjhIVb4sqLCXM7U0hKKTUEbSJUAyup9f692sgd2sNFnLdQoyDH2RbEyQkgEAmPtlGdpFq6dwhQ93VQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b6f491a984c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3236,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3235)","md5":"dbe4b3628220901277c0c4234475e5cb","sha1":"c17291130bc11a7f39ce70fe869bf82946e7be8b","sha256":"10a2cf3d16091fbc89cc987160b62093515cd31f0762a751775999311c7313f4","sha512":"5cb99fff539c035311bc1d4c6188600f48fe8733034ba4c67c8afca0781e4a6cad38fd3523a85eb2f936d21dc9a94d3653733ecffe87881b502c447e9303e867","ssdeep":"","tlshash":"53614248f30074395ad7e3e1523fc84c72bb6424e99aa408b15ad4891dbb4d750e3fee","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-04T09:14:25.156137Z","times_seen":1311,"resource_available":true,"data":null}},"time_used":647,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":646,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"tmr89.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-content/uploads/2021/11/bg-slider-mobile-1.jpg","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmr89.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 13:22:20 GMT","end":"Sun, 01 Feb 2026 14:20:52 GMT"},"fingerprint":{"sha1":"EE:EE:4E:1C:3B:8E:C5:DF:B9:32:AD:12:54:9C:80:42:5F:D4:B7:08","sha256":"AB:FC:E7:98:FD:BE:B2:2F:89:9E:F3:2B:E5:15:48:82:1E:B1:2D:65:7C:2D:A4:F8:89:F8:C5:74:94:C3:7C:B6"}}},"request":{"raw":"GET /wp-content/uploads/2021/11/bg-slider-mobile-1.jpg HTTP/1.1\r\nHost: tmr89.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tmr89.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nlink: \u003chttps://tmr89.bet/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-encoding: br\r\nage: 5\r\nx-cache: HIT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=79qRp5it1gNhSImW3wQXukGBXfnoSCc%2FwcNJwgd6af1uWeEZj2x25%2FKbbYD4njWTvgWrv9f%2FkUyaqtOiMSsxn3HEG0PCQOMxTg%3D%3D\"}]}\r\ncf-ray: 9b6f491ab84f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Yoast SEO:26.6","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Elementor:3.33.0","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66194,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (31275), with CRLF, LF line terminators","md5":"687f05f69730781df79a49979ae1d9c5","sha1":"6368ce9e9c9b65b11c4591b16aa5f79e01e9ce11","sha256":"2192c7afc3702be98cb1da3718aafe1f4699dbff2710e77f8ce712da547833ea","sha512":"af3067c986091dca63dbc9ddfc5c9e6a82a3c17069d022c901c826acce4cb2a9af5277e9cf88a636c37a54cbdd466880f165e889ac420185d993fa07788f5195","ssdeep":"1536:ht+DU+ZypcrAjgPpH7gFAepGUHj+N5fyX:ht+DFUWrWgxH8hX","tlshash":"bf53d631f3a144ba3a6b477d956bf208652c9513d64ea7e5b0bdd0a885c8bd310f230f","first_seen":"2026-01-01T04:31:39.290758Z","last_seen":"2026-01-01T04:31:39.290758Z","times_seen":1,"resource_available":false,"data":null}},"time_used":801,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":801,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"tmr89.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-content/plugins/wp-rocket/assets/js/wpr-beacon.min.js","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmr89.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 13:22:20 GMT","end":"Sun, 01 Feb 2026 14:20:52 GMT"},"fingerprint":{"sha1":"EE:EE:4E:1C:3B:8E:C5:DF:B9:32:AD:12:54:9C:80:42:5F:D4:B7:08","sha256":"AB:FC:E7:98:FD:BE:B2:2F:89:9E:F3:2B:E5:15:48:82:1E:B1:2D:65:7C:2D:A4:F8:89:F8:C5:74:94:C3:7C:B6"}}},"request":{"raw":"GET /wp-content/plugins/wp-rocket/assets/js/wpr-beacon.min.js HTTP/1.1\r\nHost: tmr89.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tmr89.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Nov 2025 12:19:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6911d858-6594\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TQLNX%2FH3PXbmcTKybjBMIhmFrskkiGiRh7zX5e7gzMwXI7zlvpbG7YbetSEaj5WfotBQsw%2F69MuuFkEPFDSc03SwOQN6lpm%2FwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b6f491a984e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26004,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14464)","md5":"c7292e918daecc3cbe9b88be41439374","sha1":"4267f1c8d6ba9d49bd4de5d9a50753db19c6886e","sha256":"c887b51ed880800ad5057329aa53b8a55d31e34cc6e8406791c1e497355d4bd8","sha512":"af498333004d69a8d3a9eb779baf8a70a1ac08c44e8007a9da00071f73bfce6996375f95c830583e2b4671ed774ab254b075fa8f690bda7cfeacf4cf9fd7e1fe","ssdeep":"768:0sGdmuPXGPWao/BTBxHGWNm8U/gahHTFWRu5YensJLbjlFNcJTewptENIvtELBpg:NGdeo/BTHBQl1FIObn9vtELBpQiS1Q/u","tlshash":"51c2087372be683351cd10ce74203249b6345d49361ad068f9ac6dee71a5ec32a68fbd","first_seen":"2025-08-27T08:47:57.655165Z","last_seen":"2026-04-04T15:08:28.143563Z","times_seen":2723,"resource_available":true,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"tmr89.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-content/uploads/2025/11/cropped-tmr89-logo-192x192.png","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:11.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmr89.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 13:22:20 GMT","end":"Sun, 01 Feb 2026 14:20:52 GMT"},"fingerprint":{"sha1":"EE:EE:4E:1C:3B:8E:C5:DF:B9:32:AD:12:54:9C:80:42:5F:D4:B7:08","sha256":"AB:FC:E7:98:FD:BE:B2:2F:89:9E:F3:2B:E5:15:48:82:1E:B1:2D:65:7C:2D:A4:F8:89:F8:C5:74:94:C3:7C:B6"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/cropped-tmr89-logo-192x192.png HTTP/1.1\r\nHost: tmr89.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tmr89.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 01 Jan 2026 04:31:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 6053\r\nlast-modified: Wed, 05 Nov 2025 17:28:13 GMT\r\netag: \"690b892d-17a5\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GKEeOBbbqt6h34Er9y%2F9qtd%2FM3f47P5UykOelXW%2Fwq98%2BdS8hOLVhvKq2%2BNabmxaJflmkWHYJIDD3%2FBD4Ki4s3nfokSBBLqTGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b6f4923a8cf3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6053,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"102c5fb7cc8968954d4e125e8ea6280a","sha1":"238509a405650f2cd0b75d79d5f840a0153e2271","sha256":"2fac73126930f7da9f9f8659e81bdcaaea9873c4e5ceca4da0c386ff2407a987","sha512":"c4c0fac82f2d06df5a492761e9c9d03d26f4ba26e011c58c3c016e9e20661c4324bb2085567cb3ab1a288743012f94cb3c3d4325ff7f15598ae7477680204ebf","ssdeep":"96:tE/IOe5P5pN/Mtdk5REg9+8cbWNVo0aX68TEkP6EjkOzjssJ4HiX:K/3ePpN/MtcREg9+/Z0aXhT768kYjsSX","tlshash":"8ac19eec6928fd4f8c066ffa4391403eaab1e0bb785500e87136df5e40166c52b8e5bd","first_seen":"2026-01-01T04:31:39.292259Z","last_seen":"2026-01-01T04:31:39.292259Z","times_seen":1,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"tmr89.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.44.0","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmr89.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 13:22:20 GMT","end":"Sun, 01 Feb 2026 14:20:52 GMT"},"fingerprint":{"sha1":"EE:EE:4E:1C:3B:8E:C5:DF:B9:32:AD:12:54:9C:80:42:5F:D4:B7:08","sha256":"AB:FC:E7:98:FD:BE:B2:2F:89:9E:F3:2B:E5:15:48:82:1E:B1:2D:65:7C:2D:A4:F8:89:F8:C5:74:94:C3:7C:B6"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.44.0 HTTP/1.1\r\nHost: tmr89.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tmr89.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 103532\r\nlast-modified: Mon, 10 Nov 2025 12:19:30 GMT\r\netag: \"6911d852-1946c\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YNfOrtJyx1LyuYDPRuckp5TjlQUWfU%2BGNh1G7cShPaVgvME2qr9AYaQO1OOsuGMXHgwiYAMT8JGPCUmoBfuLKkV6zHSnVb8L6Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b6f491a38393181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103532,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 103532, version 1.0","md5":"b63aa7d0ecaa2b145d13c719e54f4945","sha1":"078cf7df1fad22736c9ff479cb68a85cfd370893","sha256":"ab58800d46d800e6046d5d6797876d50d0afc8201a2268e64973601d657fce07","sha512":"42b97d4c103e831fc883ba643f9c2f6b818622271082b470fc281d07bda0559deb6f139eabc48b3a5e6698c488688313548d401ef600ab07f38abeffc87f9d44","ssdeep":"3072:cGmpcmj/jpq3oszE4Z+dO70/84Qi2MpTN:cpppOoszhZW/84Q0BN","tlshash":"0da3124ff088565ed6e3051e875bac23a11e277985f03756b75e3e74a0afc884838c3a","first_seen":"2025-09-16T02:53:10.391318Z","last_seen":"2026-04-04T10:36:54.256995Z","times_seen":11513,"resource_available":false,"data":null}},"time_used":1200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":803,"receive":397,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"tmr89.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmr89.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 13:22:20 GMT","end":"Sun, 01 Feb 2026 14:20:52 GMT"},"fingerprint":{"sha1":"EE:EE:4E:1C:3B:8E:C5:DF:B9:32:AD:12:54:9C:80:42:5F:D4:B7:08","sha256":"AB:FC:E7:98:FD:BE:B2:2F:89:9E:F3:2B:E5:15:48:82:1E:B1:2D:65:7C:2D:A4:F8:89:F8:C5:74:94:C3:7C:B6"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: tmr89.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tmr89.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 81612\r\nlast-modified: Mon, 10 Nov 2025 12:19:30 GMT\r\netag: \"6911d852-13ecc\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CSGI54xU2dj%2BlgIkReaMlJXEvl4lh9PAf9E16WPJ%2FjVUbI4vDpppqSH8%2BZYNolWjfx%2FazI48Hd2W8hoNjRUhPgKxp5WU2euFzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b6f491a483a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81612,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 81612, version 1.0","md5":"b4d6b90f14c0441aac364e194978408e","sha1":"142696d43851c8eba0f54c7b94c5f6ebd09703e6","sha256":"6b2680fab784d245cbb23d3b51e8d18740e8fc1c7c1c8eadcf0b2b7612125ff8","sha512":"feab357b65d7302cc6ca2afc86b84851c9b307ba68659fe9e6f7191ff38bdd1d38658e503124b6940f77f5c216b4400c23b8babcd6c13fac2313fa91e5269f09","ssdeep":"1536:mU9FSafiVK4eoDE9kuqu3GbcJuGiZmvfgFrsrr4l1ESfkmS3a+:mYFURoZCMLngsEl1DYK+","tlshash":"678312531fb0ab4ed86e9b3a171d7c3ba4cb2e224b4a704c1d5504068b7ba6d35f45c7","first_seen":"2024-03-11T23:30:43Z","last_seen":"2026-04-04T14:45:27.707772Z","times_seen":58756,"resource_available":false,"data":null}},"time_used":980,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":781,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"tmr89.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"7thbc.info/wp-content/uploads/elementor/google-fonts/fonts/sarabun-dtvjjx26tker37c9aafjn2qn.woff2","fqdn":"7thbc.info","domain":"7thbc.info","tld":"info"},"ip":{"addr":"104.21.92.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7thbc.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 05:53:32 GMT","end":"Wed, 11 Feb 2026 06:50:05 GMT"},"fingerprint":{"sha1":"74:C7:55:14:7C:97:2D:E1:CB:5E:8A:5E:1D:7A:BE:7D:78:35:9B:B8","sha256":"A8:C1:0B:A2:50:5F:29:B0:54:39:63:62:E0:3E:5E:0F:55:16:BC:2C:F5:A0:62:CF:C2:5B:8A:8C:4C:98:A0:95"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/sarabun-dtvjjx26tker37c9aafjn2qn.woff2 HTTP/1.1\r\nHost: 7thbc.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tmr89.bet/\r\nOrigin: https://tmr89.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 9868\r\nserver: cloudflare\r\nlast-modified: Wed, 21 May 2025 16:30:59 GMT\r\netag: \"682dffc3-268c\"\r\nexpires: Fri, 01 Jan 2027 04:31:11 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BJ7A0pI4NwoUpth%2F67gYivGiivLfGS0FhUtJ5hXZSxfGrer3CSfSiA3BfE3zD2Va4w0hYyJ7cyF%2BqWpDOrpZI03%2BMUIl7%2FJ%2F\"}]}\r\ncf-ray: 9b6f491b080056c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9868,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9868, version 1.0","md5":"7d95714498a024618d183a88e668f9cf","sha1":"04e7185bf7f4589328c4fcbe3b41989c0e6684b5","sha256":"444ccfffc6e9201b86993a233a42481bee7fe485fe5f330d956f22356249b392","sha512":"cfaa4fc70ab11c8ac5a626b20178f18219e7b003e22c7e7f312a295606807af1409a7d3090b249624172b7bfb96e13e7fd95febcb3d1749519720c2a82c69c88","ssdeep":"192:tWTFgbMkO2D/JLj3ejS9ZD9+Y4LmxRe2+G7WP1MtODyhvWihCS:tOibMkO2dHejS9sme5yG4Oin3","tlshash":"6812bffe8dbe403e8ac094fadda72190f89889f6ad2181fd1a35178124cf5503b67f46","first_seen":"2025-05-10T00:20:07.735619Z","last_seen":"2026-04-03T19:20:55.910466Z","times_seen":275,"resource_available":false,"data":null}},"time_used":1134,"timings":{"blocked":99,"dns":68,"connect":3,"send":0,"wait":739,"receive":180,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"7thbc.info/wp-content/uploads/elementor/google-fonts/fonts/sarabun-dtvmjx26tker37c9yk5sik8s6zdx.woff2","fqdn":"7thbc.info","domain":"7thbc.info","tld":"info"},"ip":{"addr":"104.21.92.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7thbc.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 05:53:32 GMT","end":"Wed, 11 Feb 2026 06:50:05 GMT"},"fingerprint":{"sha1":"74:C7:55:14:7C:97:2D:E1:CB:5E:8A:5E:1D:7A:BE:7D:78:35:9B:B8","sha256":"A8:C1:0B:A2:50:5F:29:B0:54:39:63:62:E0:3E:5E:0F:55:16:BC:2C:F5:A0:62:CF:C2:5B:8A:8C:4C:98:A0:95"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/sarabun-dtvmjx26tker37c9yk5sik8s6zdx.woff2 HTTP/1.1\r\nHost: 7thbc.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tmr89.bet/\r\nOrigin: https://tmr89.bet\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 9812\r\nserver: cloudflare\r\nlast-modified: Wed, 21 May 2025 16:30:59 GMT\r\netag: \"682dffc3-2654\"\r\nexpires: Fri, 01 Jan 2027 04:31:11 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0424eX1TzIigdnFQw80hD5Y3Kldgd2eqX656%2BMuEfs5B%2BkgiHvwGd7mt%2Bwuu0tkxF7SWnmNMt%2BeUogxcUGfhpkI1t20gw%2BgS\"}]}\r\ncf-ray: 9b6f491b080456c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9812,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9812, version 1.0","md5":"1ace28bd66da7374ff2db95a572461af","sha1":"dcf9d66360254a1fbae34d1a628f6ca396750357","sha256":"1ca031c8d598e7435f653e44f592fe0ac64e9e402066719fe061fdfe833cca1e","sha512":"fa44f3973217982246fbee7085e6496bfa4beb38e69c3dd938a3a60aed634d8c92aff7e35a30da4af5cff8743d20024c69b768d6e4dd934a7985db04cd8e6512","ssdeep":"192:geOWVDl7mmCpp3wgthOkydjs23ES7wc1zXfzNv0J04NBl1dG2kMxTXyUNefIEm:8V2r8cZXfzK04NG2bNewj","tlshash":"e012b00d02cd25d2ca2c832550cb0f748454db6768fbf448a69e70bae298d92b55cf74","first_seen":"2025-05-10T00:20:07.746843Z","last_seen":"2026-04-03T11:17:55.892722Z","times_seen":146,"resource_available":false,"data":null}},"time_used":965,"timings":{"blocked":101,"dns":67,"connect":3,"send":0,"wait":741,"receive":1,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tmr89.bet/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.7.2","fqdn":"tmr89.bet","domain":"tmr89.bet","tld":"bet"},"ip":{"addr":"172.67.208.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tmr89.bet/","date":"2026-01-01T04:31:10.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmr89.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 13:22:20 GMT","end":"Sun, 01 Feb 2026 14:20:52 GMT"},"fingerprint":{"sha1":"EE:EE:4E:1C:3B:8E:C5:DF:B9:32:AD:12:54:9C:80:42:5F:D4:B7:08","sha256":"AB:FC:E7:98:FD:BE:B2:2F:89:9E:F3:2B:E5:15:48:82:1E:B1:2D:65:7C:2D:A4:F8:89:F8:C5:74:94:C3:7C:B6"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handlers.min.js?ver=3.7.2 HTTP/1.1\r\nHost: tmr89.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tmr89.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 01 Jan 2026 04:31:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 05 Aug 2022 18:38:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62ed63b2-20de6\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1dLVJVCbZPVy%2FhINJgsI7xqH%2FB%2F%2FRXXYELX6FpQs7nADYlSy0Zd85o%2FTVt6czUolXfpuqx0QIxQSImlTa8x7n%2B1F3jV0ilgm1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b6f491a984b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134630,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65493)","md5":"3d5125a49a5eb897d4dd60c98ca58e2f","sha1":"84c04d496cffbde9c05f679a4950e3bd03ef616a","sha256":"9e426b06ebb2fe02a8f495c8d6e2b5aea53f3446cac8aa0fd2cc0bebe366676a","sha512":"da884e15970181c70d2884591e851a4db0d51d481125268958f532ff406deabf08c716cf879fab9e298cbc520c55094eb07fb95d468fead68f535c8f480885fd","ssdeep":"1536:cCLOaWbzhwMhU1naVPhEhcHqkeSYPEMCEjZBywqIAm6YIzo+ajpy4UX8ulaij86I:esyxWNVNlx7gs7F23K","tlshash":"46d3d89230529cb646cf506bb417020db7221dadb402b4aebafd8cdb9674dc63376376","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-04-04T00:49:16.855255Z","times_seen":417,"resource_available":true,"data":null}},"time_used":794,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":789,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"tmr89.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}