{"report_id":"8620f73e-fa9f-42c1-8a2b-fe67dcef8080","version":0,"status":"done","tags":[],"date":"2026-07-12T20:14:39Z","url":{"schema":"http","addr":"mostbet69702.help","fqdn":"mostbet69702.help","domain":"mostbet69702.help","tld":"help"},"ip":{"addr":"5.61.56.118","port":0,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"mostbet-live.org/","fqdn":"mostbet-live.org","domain":"mostbet-live.org","tld":"org"},"title":"Mostbet Uz - kirish, APK, ro'yxatdan o'tish va to'lovlar","dom":{"size":91076,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (32248)","md5":"a782b11242affd467e65d8ddae676d2c","sha1":"e990a5886f22a1eb8a3bf96b3b66b5e904fbfefa","sha256":"862b14c94dbf05e9c32910c8eee9a1dee302af8990ded809f2523498ad4b2d4b","sha512":"fcc72a4ef2b7e4197a19c8d110ecc8816113e9503f629005bb35cd04c632fb365fec97c5b8dac56f52798b0b7c9b8e364997c29d9c15c102970c9c3415d88949","ssdeep":"1536:89zIkAsB1X1TIIfTOLHTtDZxqB0vzyxo/Srp3kvgUxkOo7Qnsgosfprvw/:U1X1oLvxqB0vzBxIW6","tlshash":"82933ba37288002c1b7743ca92647a9c94655405dd03af8aabbfedbcd7c17d616f331a","dom_hash":"domhashb6a6419616fed82fc1c9013e2f643071","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mostbet69702.help","fqdn":"mostbet69702.help","domain":"mostbet69702.help","tld":"help"},"ip":{"addr":"5.61.56.118","port":0,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T20:14:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":10}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-live.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet69702.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet69702.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet69702.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet69702.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet69702.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mostbet-live.org","ip":{"addr":"172.67.186.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-21","domain_rank":0,"first_seen":"2026-04-25T18:23:12.752087Z","last_seen":"2026-07-11T00:25:37.88324Z","alert_count":55,"request_count":11,"received_data":698272,"sent_data":5684,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:7.0.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Autoptimize:3.1.15.1","description":"Autoptimize is a WordPress plugin that optimises website performance by aggregating, minifying, and compressing HTML, CSS, and JavaScript files.","website":"https://autoptimize.com","common_platform_enumeration":"","icon":"Autoptimize.png","categories":["WordPress plugins","Performance"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Super Cache","description":"WordPress Super Cache is a static caching plugin for WordPress.","website":"https://z9.io/wp-super-cache/","common_platform_enumeration":"","icon":"wp_super_cache.png","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"mostbet69702.help","ip":{"addr":"5.61.56.118","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-03-20","domain_rank":0,"first_seen":"2026-07-11T00:43:49.132236Z","last_seen":"2026-07-11T00:43:49.132236Z","alert_count":5,"request_count":1,"received_data":282,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mostbet-live.org/","fqdn":"mostbet-live.org","domain":"mostbet-live.org","tld":"org"},"ip":{"addr":"172.67.186.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a31ed7ba704741dd1e2b1147a5937409","sha1":"748f2803f223be2a07d30b3dfffff6d6f902b31b","sha256":"ecb8bdda7766c399a2b83a7c0accbadcca700c90be781288e11b11d63b63d853","sha512":"7133f793bd87a7949589d3905a3c3e109b2638f94d1385c8ad964b6a3126dbf787105f5c4f1e2232cce7dc2522beeb21af9f3f923ccbaa5c436e7289f2b4103f","ssdeep":"","tlshash":"aa11c2ab70d43739c1973e33643ed1883a3560859d129180e829d9a475f48a9857bf95","size":1030,"data":"","first_seen":"2026-01-14T08:02:02.619185Z","last_seen":"2026-07-14T23:24:11.953816Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-live.org/","fqdn":"mostbet-live.org","domain":"mostbet-live.org","tld":"org"},"ip":{"addr":"172.67.186.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"31370ae3f78a60279d29cd25e1eb8657","sha1":"34f454d9855d2dc1d71ab7101bd7a04d1b0199bf","sha256":"6682cf99413df38b7572d2f2eb9c549f33d2a52ceaa9c6a8ff723c02339380dc","sha512":"f4ebeae5d9f13044f3e78185d41c7f95f7a02f36a5fbe67b8768aedd1b9eec5a6d4d06f61f1bf2f9f4fc102fd79dc0e6cd748a4e42f32876c67e1bd701eab10d","ssdeep":"","tlshash":"32a0011a8449927276704000e61f6384a81656a5fb91f06b410b2120b27d843a0141b3","size":84,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-17T10:52:21.488039Z","times_seen":11852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-live.org/","fqdn":"mostbet-live.org","domain":"mostbet-live.org","tld":"org"},"ip":{"addr":"172.67.186.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"44f55f5c5e384bcdd85acd6dd0912ff1","sha1":"29f1264438665e5179c3a5ac800c0fa6f3435884","sha256":"abdac15716809ec4189caa12b975e58638504317c44b7f6b9a85138e25851d02","sha512":"ad87b0919675697e70f17b2c6a70249735611d7e0795d93d650f878e6976b1d6fcd84f0ed2197bce2338f0138f66f2726e30d7b9a1516970eb68569d759e1412","ssdeep":"","tlshash":"36d0a73745550e0e128751d9e94a735783ad049169948c241a2efc49fe682044a60944","size":215,"data":"","first_seen":"2026-07-12T20:12:32.99437Z","last_seen":"2026-07-12T20:16:32.952875Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-live.org/wp-includes/js/wp-emoji-release.min.js?ver=7.0.1","fqdn":"mostbet-live.org","domain":"mostbet-live.org","tld":"org"},"ip":{"addr":"172.67.186.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-07-17T10:43:52.066234Z","times_seen":7547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-live.org/wp-content/cache/autoptimize/js/autoptimize_f2993ca89c3023676ba607ad55343550.js","fqdn":"mostbet-live.org","domain":"mostbet-live.org","tld":"org"},"ip":{"addr":"172.67.186.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd9fd25652868123a84e953084bc5d71","sha1":"decfa4f6b68eef3612d4b072edc34721c8e35b91","sha256":"0b31b41eaef15ceed7517b33ae16a9c9c18ee9a41aef3314f064d84f8296f274","sha512":"abdcf5cc4092678a4fb65b89635c3e9ecdb71ddf12024c8c433a555f85d6834aa1a2cacc8af947a4a898daed6817d5f067696d180ef89d8521e1c66b37525f68","ssdeep":"768:lK60LP3m4qJ+h4MDlLxyK/VahplIWMftV9/HUW6JPdtQLdKQUFv+rpC1I1E4erMF:0rP7Q+hxlLxjafljUkyJxJ","tlshash":"fe63d6847241b0b50ab711259a7fb30ff07a6b156cdac400d05ac9f42e68eeba167ff5","size":68353,"data":"","first_seen":"2025-11-23T07:05:16.592459Z","last_seen":"2026-07-14T23:24:11.943182Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-live.org/wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js?ao_version=3.1.15.1","fqdn":"mostbet-live.org","domain":"mostbet-live.org","tld":"org"},"ip":{"addr":"172.67.186.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","size":9813,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-17T09:57:29.627931Z","times_seen":12295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-live.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"mostbet-live.org","domain":"mostbet-live.org","tld":"org"},"ip":{"addr":"172.67.186.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-17T10:40:00.573361Z","times_seen":974071,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://mostbet-live.org/wp-content/cache/autoptimize/js/autoptimize_f2993ca89c3023676ba607ad55343550.js","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"mostbet-live.org/wp-content/uploads/2026/07/mostbet-uz-rasmiy-sayti-742x400.webp","fqdn":"mostbet-live.org","domain":"mostbet-live.org","tld":"org"},"ip":{"addr":"172.67.186.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mostbet-live.org/","date":"2026-07-12T20:14:12.831Z","timestamp":1783887252831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-live.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 May 2026 17:43:25 GMT","end":"Sat, 15 Aug 2026 18:42:10 GMT"},"fingerprint":{"sha1":"89:5D:82:9C:0A:66:A4:A3:EC:C9:3E:B3:40:B6:7E:5D:77:C9:AD:14","sha256":"BC:89:55:32:02:49:39:6D:76:F0:EA:7D:4C:F9:92:6C:DD:71:B1:9E:4D:7D:D8:8B:E4:E7:94:9F:C1:6C:25:74"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/mostbet-uz-rasmiy-sayti-742x400.webp HTTP/1.1\r\nHost: mostbet-live.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-live.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:14:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 05:34:50 GMT\r\npriority: u=5,i\r\netag: \"6a4f32fa-1509a\"\r\nexpires: Mon, 13 Jul 2026 20:11:56 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 136\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H2lN2SVFC7DCUfpaDUH5%2BW1eaPKCznVd4Snhi76BsPLtqvltbsHYTVgpN00cQxPpJmX4wd3a%2B23BhYgNTexuoBPHUog9no%2BXtdI3vyJORL%2BU5WNWVKENU%2FpkvKcZeCdVSAlt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b6823f908be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 86170\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86170,"size_decoded":86958,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3864a6596204bab27421f5c34dff33c8","sha1":"550cb0efbe277e409caa91dbf5ff7bacef897ca9","sha256":"8278adef47fe868bd19c4a827178aa34cc8ccdc2cc9e8aa3220242b2c30e29d0","sha512":"a6f80462678cb8725bb5886299850f764c0080d1d0fa31fca80ae0538158c3f61df79f8f97ec9acb6cefe01f10ce8ddfd948e9f3d24e79b97eed48d1d551054d","ssdeep":"1536:va5eA3Opgz0uyrVNU/T6KCZ2slYkvRyLNdGtG3yi352sIlAigIT2pl23Ga:vaMIuO0uEVe76PYqNvULDUGio2A+c2f","tlshash":"908312c1d7d8270a54997fb0654ed87be04b933639f49a148fa38362aa384f3446b7d2","first_seen":"2026-04-25T18:23:16.370616Z","last_seen":"2026-07-14T23:24:11.946873Z","times_seen":28,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-live.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet69702.help/","fqdn":"mostbet69702.help","domain":"mostbet69702.help","tld":"help"},"ip":{"addr":"5.61.56.118","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:14:08.894Z","timestamp":1783887248894,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet69702.help","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 02:53:38 GMT","end":"Tue, 18 Aug 2026 02:53:37 GMT"},"fingerprint":{"sha1":"2F:C1:97:6A:29:B1:5B:B9:85:66:DC:20:00:F2:F0:E5:C6:6C:3B:D9","sha256":"B8:11:B5:1B:93:7F:30:80:8C:B2:1B:95:C8:79:87:5A:50:84:99:5B:E2:F7:14:0A:98:1D:E8:1D:06:19:45:2A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mostbet69702.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 12 Jul 2026 20:14:09 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: https://mostbet-live.org/\r\nStrict-Transport-Security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":111,"connect":31,"send":0,"wait":35,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet69702.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet69702.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet69702.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet69702.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet69702.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-live.org/wp-content/cache/autoptimize/css/autoptimize_dc42beb7fadbd98fd0c79d9171191e7e.css","fqdn":"mostbet-live.org","domain":"mostbet-live.org","tld":"org"},"ip":{"addr":"172.67.186.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mostbet-live.org/","date":"2026-07-12T20:14:12.689Z","timestamp":1783887252689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-live.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 May 2026 17:43:25 GMT","end":"Sat, 15 Aug 2026 18:42:10 GMT"},"fingerprint":{"sha1":"89:5D:82:9C:0A:66:A4:A3:EC:C9:3E:B3:40:B6:7E:5D:77:C9:AD:14","sha256":"BC:89:55:32:02:49:39:6D:76:F0:EA:7D:4C:F9:92:6C:DD:71:B1:9E:4D:7D:D8:8B:E4:E7:94:9F:C1:6C:25:74"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/css/autoptimize_dc42beb7fadbd98fd0c79d9171191e7e.css HTTP/1.1\r\nHost: mostbet-live.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-live.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:14:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 Jul 2026 13:37:44 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"6a4fa428-39dff\"\r\nexpires: Mon, 13 Jul 2026 20:11:55 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 136\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WHg9qZ76oxU3EogCpculcfqhRDm%2FqRbbybVGRU15uUIFTWLZWe8er34qB5dl4TpgHK%2FNyXNlJh1S8N66aPkLsiKKUUGLtlRHVyxP5q3dG%2FyIJB2uK6L3JMmAsh5iZxBNVNbO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b6815f668be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237055,"size_decoded":44887,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65109)","md5":"77051b5dd0c0ea756d44bb4e48158fb0","sha1":"1d50df32b8942f8f9ac483b0ba343e4c522c6467","sha256":"6c5c37e524f3a585affac8e78113a1b67cac1853b100c03e206bc575a74c7b81","sha512":"cfa9c71057814d2fde2f970ba3bab52300cf1c432bd9cb22c5de57da3bee45465ed9969b97d2ac0138d0145b06e1ebf2d01c4d117501a8d0f22cc909b58b18b2","ssdeep":"1536:V6ACWf65WQXcN9Bm0iB/QtI8UYXl17aYPir0V3GnGlrw96QXA4:V6Ajf65WQXcfW/9YXCXniw9V","tlshash":"513418f419e425e89327cb3b9771f2585d1491a2c39047f5e2faca1c4beabe6017360e","first_seen":"2026-04-25T18:23:16.366966Z","last_seen":"2026-07-14T13:23:04.180244Z","times_seen":25,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-live.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-live.org/wp-content/cache/autoptimize/js/autoptimize_f2993ca89c3023676ba607ad55343550.js","fqdn":"mostbet-live.org","domain":"mostbet-live.org","tld":"org"},"ip":{"addr":"172.67.186.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mostbet-live.org/","date":"2026-07-12T20:14:12.697Z","timestamp":1783887252697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-live.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 May 2026 17:43:25 GMT","end":"Sat, 15 Aug 2026 18:42:10 GMT"},"fingerprint":{"sha1":"89:5D:82:9C:0A:66:A4:A3:EC:C9:3E:B3:40:B6:7E:5D:77:C9:AD:14","sha256":"BC:89:55:32:02:49:39:6D:76:F0:EA:7D:4C:F9:92:6C:DD:71:B1:9E:4D:7D:D8:8B:E4:E7:94:9F:C1:6C:25:74"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_f2993ca89c3023676ba607ad55343550.js HTTP/1.1\r\nHost: mostbet-live.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-live.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:14:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 09 Jul 2026 13:37:44 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: \"6a4fa428-10b01\"\r\nexpires: Mon, 13 Jul 2026 20:11:55 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 136\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WAXhf0E7JzSH2ABeYXLC6%2FVuH0K0Ze02Hi9eBHGVFn18CyDnB5PRQ%2FBhIGlLDOTCZYU5YgBKiQHyRFrl5cZnbZe0sUc2yaPcwZrBSZr8NVqnR4MrhKDR9v3UwnmKg0xJ2M8F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b6815f6b8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68353,"size_decoded":15422,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51923)","md5":"dd9fd25652868123a84e953084bc5d71","sha1":"decfa4f6b68eef3612d4b072edc34721c8e35b91","sha256":"0b31b41eaef15ceed7517b33ae16a9c9c18ee9a41aef3314f064d84f8296f274","sha512":"abdcf5cc4092678a4fb65b89635c3e9ecdb71ddf12024c8c433a555f85d6834aa1a2cacc8af947a4a898daed6817d5f067696d180ef89d8521e1c66b37525f68","ssdeep":"768:lK60LP3m4qJ+h4MDlLxyK/VahplIWMftV9/HUW6JPdtQLdKQUFv+rpC1I1E4erMF:0rP7Q+hxlLxjafljUkyJxJ","tlshash":"fe63d6847241b0b50ab711259a7fb30ff07a6b156cdac400d05ac9f42e68eeba167ff5","first_seen":"2025-11-23T07:05:16.592459Z","last_seen":"2026-07-14T23:24:11.943182Z","times_seen":68,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-live.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-live.org/wp-includes/js/wp-emoji-release.min.js?ver=7.0.1","fqdn":"mostbet-live.org","domain":"mostbet-live.org","tld":"org"},"ip":{"addr":"172.67.186.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mostbet-live.org/","date":"2026-07-12T20:14:13.003Z","timestamp":1783887253003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-live.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 May 2026 17:43:25 GMT","end":"Sat, 15 Aug 2026 18:42:10 GMT"},"fingerprint":{"sha1":"89:5D:82:9C:0A:66:A4:A3:EC:C9:3E:B3:40:B6:7E:5D:77:C9:AD:14","sha256":"BC:89:55:32:02:49:39:6D:76:F0:EA:7D:4C:F9:92:6C:DD:71:B1:9E:4D:7D:D8:8B:E4:E7:94:9F:C1:6C:25:74"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.0.1 HTTP/1.1\r\nHost: mostbet-live.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-live.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:14:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 03:54:06 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a506cde-58e0\"\r\nexpires: Mon, 13 Jul 2026 20:11:56 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 136\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gnw0ClmCJzqXu%2B7qee6pxWFjtegnwVjBdsrMWqsVa1B%2BSesbmxuB4NIr219nwtHZjjCaoyINn7MGrQZHC0tLLxxVDg5X3vmb7wiaZPAvCfdCHLAtQAmmv6p1gLwolknj7dtT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b6834fba8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22752,"size_decoded":6285,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-07-17T10:43:52.066234Z","times_seen":7547,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-live.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-live.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"mostbet-live.org","domain":"mostbet-live.org","tld":"org"},"ip":{"addr":"172.67.186.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mostbet-live.org/","date":"2026-07-12T20:14:12.690Z","timestamp":1783887252690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-live.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 May 2026 17:43:25 GMT","end":"Sat, 15 Aug 2026 18:42:10 GMT"},"fingerprint":{"sha1":"89:5D:82:9C:0A:66:A4:A3:EC:C9:3E:B3:40:B6:7E:5D:77:C9:AD:14","sha256":"BC:89:55:32:02:49:39:6D:76:F0:EA:7D:4C:F9:92:6C:DD:71:B1:9E:4D:7D:D8:8B:E4:E7:94:9F:C1:6C:25:74"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: mostbet-live.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-live.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:14:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Nov 2025 12:54:50 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"6920611a-15601\"\r\nexpires: Mon, 13 Jul 2026 20:11:55 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 136\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nLFQY4VpOgpnA6Amw2FykIv44ahBucJ8jE4DL%2FD9QjHIMgDak4soZ7ANvEKs3O3eP2kekB4OZpwWIvv4ZKwodKJqAFtOfrRzYuqy8cImhVD73Ut63quUIAtul9yWB7WetG7M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b6815f678be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87553,"size_decoded":31430,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-17T10:40:00.573361Z","times_seen":974071,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-live.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-live.org/wp-content/themes/reboot/assets/fonts/wpshop-core.ttf","fqdn":"mostbet-live.org","domain":"mostbet-live.org","tld":"org"},"ip":{"addr":"172.67.186.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mostbet-live.org/","date":"2026-07-12T20:14:12.692Z","timestamp":1783887252692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-live.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 May 2026 17:43:25 GMT","end":"Sat, 15 Aug 2026 18:42:10 GMT"},"fingerprint":{"sha1":"89:5D:82:9C:0A:66:A4:A3:EC:C9:3E:B3:40:B6:7E:5D:77:C9:AD:14","sha256":"BC:89:55:32:02:49:39:6D:76:F0:EA:7D:4C:F9:92:6C:DD:71:B1:9E:4D:7D:D8:8B:E4:E7:94:9F:C1:6C:25:74"}}},"request":{"raw":"GET /wp-content/themes/reboot/assets/fonts/wpshop-core.ttf HTTP/1.1\r\nHost: mostbet-live.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mostbet-live.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:14:12 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 25 Dec 2025 12:56:48 GMT\r\npriority: u=2,i=?0\r\netag: \"694d3490-e52c\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 136\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=88%2F3VpzStvNviI%2BKUTIBTWlKZnXD%2B5i4D53nId3MHxBzktFM6Yqoe50QNxuds7bnjGu1K9XOkrbLyoqJKTrWjBdoeUD2XY%2FYZc1HL1uRU3%2BD6MthaoCKs2l%2Fm5UFmJq2ohLM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b6815f688be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 58668\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58668,"size_decoded":59434,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, wpshop-core","md5":"2fcda07cf0f6e04e36a23362734caea2","sha1":"c596aa516e5cf216fdc514679b4a6abe337eed13","sha256":"973408bd1a1da181c7eaa9293c0cd095f3836a76b626bc76af21e1cd96b5dcde","sha512":"42b1bb8dc70bd0b65d2586a6a11131db5f604d8e16c1669efe4687f26f1e65705bcc02e911e88e07fb8d3a27999d76b62cbc6a31b7069772dd8edf50a5cd52a4","ssdeep":"1536:I5LQRM0CsPnjQegTDHjNWOPRaEXhHRfI4TgrAw0L5Tq2wsuQugFB9yjxwBGDx0Eb:uLQRM0CsPnUTDHjsOPsEXhHRfnTiAw0s","tlshash":"9c43295ab34bff1fdb6aad3ba80162a20ee9d425931fb14b59851d03460dcb84c8c7c9","first_seen":"2023-04-07T13:41:48Z","last_seen":"2026-07-16T05:14:49.481671Z","times_seen":1047,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-live.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-live.org/wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js?ao_version=3.1.15.1","fqdn":"mostbet-live.org","domain":"mostbet-live.org","tld":"org"},"ip":{"addr":"172.67.186.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mostbet-live.org/","date":"2026-07-12T20:14:12.696Z","timestamp":1783887252696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-live.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 May 2026 17:43:25 GMT","end":"Sat, 15 Aug 2026 18:42:10 GMT"},"fingerprint":{"sha1":"89:5D:82:9C:0A:66:A4:A3:EC:C9:3E:B3:40:B6:7E:5D:77:C9:AD:14","sha256":"BC:89:55:32:02:49:39:6D:76:F0:EA:7D:4C:F9:92:6C:DD:71:B1:9E:4D:7D:D8:8B:E4:E7:94:9F:C1:6C:25:74"}}},"request":{"raw":"GET /wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js?ao_version=3.1.15.1 HTTP/1.1\r\nHost: mostbet-live.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-live.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:14:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Apr 2026 15:51:56 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: \"69d1339c-2655\"\r\nexpires: Mon, 13 Jul 2026 20:11:55 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 136\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e7UbGUYTnduzBc%2BK1MuBLfeHLGMevnEN8e8PABhQ2iNxKSxenN%2BQDzV0V15FovWE9dz5BasXMvkBIdtQHsqO3CPgdlk29MOdE1%2BGNeTvoDuMcyUnXiGluF2g2zDI28SybM3%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b6815f6a8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9813,"size_decoded":4930,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7862)","md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-17T09:57:29.627931Z","times_seen":12295,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-live.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-live.org/wp-content/uploads/2024/01/mostbet_favicon.png","fqdn":"mostbet-live.org","domain":"mostbet-live.org","tld":"org"},"ip":{"addr":"172.67.186.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mostbet-live.org/","date":"2026-07-12T20:14:12.821Z","timestamp":1783887252821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-live.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 May 2026 17:43:25 GMT","end":"Sat, 15 Aug 2026 18:42:10 GMT"},"fingerprint":{"sha1":"89:5D:82:9C:0A:66:A4:A3:EC:C9:3E:B3:40:B6:7E:5D:77:C9:AD:14","sha256":"BC:89:55:32:02:49:39:6D:76:F0:EA:7D:4C:F9:92:6C:DD:71:B1:9E:4D:7D:D8:8B:E4:E7:94:9F:C1:6C:25:74"}}},"request":{"raw":"GET /wp-content/uploads/2024/01/mostbet_favicon.png HTTP/1.1\r\nHost: mostbet-live.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-live.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:14:12 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 21 Nov 2025 12:54:50 GMT\r\npriority: u=6,i=?0\r\netag: \"6920611a-4dc\"\r\nexpires: Mon, 13 Jul 2026 20:11:56 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 136\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8W0zgFZDjnV%2Bvr6RnOeu%2B779Vk8jN4upy%2F8ZeAbQCHooT9dzHMyEsEfBjgw1mju4E4lfCbtwJFn1IcAsnBi0Qi8f4z%2FnFnqL7ThNUs70%2BXpcYIAlJVK9fsd57KPwQL1hd%2FuX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b6822f8d8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1244\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1244,"size_decoded":2033,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"962abd792392453549a1621284f0e7e2","sha1":"43cc56671a491b82aa812df97ab3f7c58415642f","sha256":"d71d3c93748ed13b66e33216389478cb6e0a7a1c60762e91f929cc3add46353c","sha512":"a19aaf25d8f08df805fb222c3cfc883e116da982c0ada92e5455da3e659a68457d2eb0c6b316a80ee464b319b3d091cf2cfc0c0b09e8d7b6d7ac61f75a3c302d","ssdeep":"","tlshash":"6021baef354b888cc6cb859334b7f55ab5d99de127ee8c2a302fc165643434d64b5140","first_seen":"2025-10-04T09:20:19.769942Z","last_seen":"2026-07-14T23:24:11.945018Z","times_seen":68,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-live.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-live.org/","fqdn":"mostbet-live.org","domain":"mostbet-live.org","tld":"org"},"ip":{"addr":"172.67.186.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:14:09.146Z","timestamp":1783887249146,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-live.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 May 2026 17:43:25 GMT","end":"Sat, 15 Aug 2026 18:42:10 GMT"},"fingerprint":{"sha1":"89:5D:82:9C:0A:66:A4:A3:EC:C9:3E:B3:40:B6:7E:5D:77:C9:AD:14","sha256":"BC:89:55:32:02:49:39:6D:76:F0:EA:7D:4C:F9:92:6C:DD:71:B1:9E:4D:7D:D8:8B:E4:E7:94:9F:C1:6C:25:74"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mostbet-live.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 20:14:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Cookie\r\ncache-control: max-age=3, must-revalidate\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CFaYW2UERYML6jPzKN%2BQDOH%2B6wW%2FCMmF9ACQpWhqZgyTvmh9UyvMpkesbAbnPeFCWWb1NWeQ6EmyQ4fCitngu6TQkgd1tYk4DdPUwbKTEH6kd%2B7iYEFw4zErPO7LnvCN6upj\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1a2b67ed8e532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress:7.0.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Autoptimize:3.1.15.1","description":"Autoptimize is a WordPress plugin that optimises website performance by aggregating, minifying, and compressing HTML, CSS, and JavaScript files.","website":"https://autoptimize.com","common_platform_enumeration":"","icon":"Autoptimize.png","categories":["WordPress plugins","Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Super Cache","description":"WordPress Super Cache is a static caching plugin for WordPress.","website":"https://z9.io/wp-super-cache/","common_platform_enumeration":"","icon":"wp_super_cache.png","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":90661,"size_decoded":23958,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (32730)","md5":"97ec690c5a45dcbd3b824fb4b7cca971","sha1":"a50806bce5b564b9a3d9b47a03708f0329261b56","sha256":"5c19358a238254796a71bd50ec319b4f9581f4ccd773520ac13b2e6421c02e86","sha512":"dc502d9d9104983bf64d86d483f8a9b1c05f725e1779479782def0cc797989a415fb458d79e9bc9fe738126e90cc2a96d5673dda862cf634205dce8742c4b098","ssdeep":"1536:U6AKfAsBdX/9IIfTllLAOfswxg0gOcWTAo8zBE4YmI9VJyk0VN3BDW5KGUYbg+Wm:zdX/LLtxg0B94uhr","tlshash":"cf932da3f285002c1b77438a53663b9e94555809d9036f89a6eeadbcdbc07d633f3309","first_seen":"2026-07-12T20:12:32.985224Z","last_seen":"2026-07-12T20:16:32.940097Z","times_seen":5,"resource_available":true,"data":null}},"time_used":3353,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":206,"receive":0,"ssl":3143},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-live.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-live.org/wp-content/uploads/2023/08/mostbet.png","fqdn":"mostbet-live.org","domain":"mostbet-live.org","tld":"org"},"ip":{"addr":"172.67.186.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mostbet-live.org/","date":"2026-07-12T20:14:12.703Z","timestamp":1783887252703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-live.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 May 2026 17:43:25 GMT","end":"Sat, 15 Aug 2026 18:42:10 GMT"},"fingerprint":{"sha1":"89:5D:82:9C:0A:66:A4:A3:EC:C9:3E:B3:40:B6:7E:5D:77:C9:AD:14","sha256":"BC:89:55:32:02:49:39:6D:76:F0:EA:7D:4C:F9:92:6C:DD:71:B1:9E:4D:7D:D8:8B:E4:E7:94:9F:C1:6C:25:74"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/mostbet.png HTTP/1.1\r\nHost: mostbet-live.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-live.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:14:12 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 21 Nov 2025 12:54:49 GMT\r\npriority: u=5,i\r\netag: \"69206119-6639\"\r\nexpires: Mon, 13 Jul 2026 20:11:55 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 136\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kk2batPrwCi88tGMu%2B5AuO2%2BxLHZHGQp3lXLFwRV%2BxvZ1CYQcFfUDF6UJarY3jurIpEGdd7RBY9k3DQ%2BDANwBV1a2s6Ia6JY8IVQbGPzK84m3KnFiChEoa2%2Fb06Gr0d0TWRS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b6816f6c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26169\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26169,"size_decoded":26955,"mime_type":"image/png","magic":"PNG image data, 1033 x 201, 8-bit colormap, non-interlaced","md5":"10076f4770fb44fd75b37323f85a83a6","sha1":"bf6fd1f0e0bd7a11487aad8fe17abb164aed9898","sha256":"d8f8a143acf555565ed813a7d031189a234c5ef0df8a5b18060b016c565dee63","sha512":"14e933a3d273727d170b2ad1ba33a495530ecdf215e64e518bb5426da75d36b9c2b233daef69e51d63241806e15f7f812005ab22f14edcc32e539aad4cb3ca02","ssdeep":"768:ZrYqAxnLlIc8XcS2GMytU9vBP5JypphORc3D:nw6cLG9EBPPypphORcz","tlshash":"42c2e0b9289ed5a3cbf400f0aef11a7623a0b9289f34e71b5536c34ed6701442dc963d","first_seen":"2025-10-04T09:20:19.773053Z","last_seen":"2026-07-14T23:24:11.953073Z","times_seen":68,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-live.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mostbet-live.org/wp-content/uploads/2024/01/mostbet_favicon.png","fqdn":"mostbet-live.org","domain":"mostbet-live.org","tld":"org"},"ip":{"addr":"172.67.186.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mostbet-live.org/","date":"2026-07-12T20:14:12.824Z","timestamp":1783887252824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mostbet-live.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 May 2026 17:43:25 GMT","end":"Sat, 15 Aug 2026 18:42:10 GMT"},"fingerprint":{"sha1":"89:5D:82:9C:0A:66:A4:A3:EC:C9:3E:B3:40:B6:7E:5D:77:C9:AD:14","sha256":"BC:89:55:32:02:49:39:6D:76:F0:EA:7D:4C:F9:92:6C:DD:71:B1:9E:4D:7D:D8:8B:E4:E7:94:9F:C1:6C:25:74"}}},"request":{"raw":"GET /wp-content/uploads/2024/01/mostbet_favicon.png HTTP/1.1\r\nHost: mostbet-live.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mostbet-live.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:14:12 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 21 Nov 2025 12:54:50 GMT\r\npriority: u=6,i=?0\r\netag: \"6920611a-4dc\"\r\nexpires: Mon, 13 Jul 2026 20:11:56 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 136\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BmNdNjPchldi2IeRj15oQtZ65KHN9Igyn6f4KoqY%2B%2BT8T4XEvBJNT%2BodpTzYW4H1Ust%2FtksPn5xennTXG0KSlif3a0%2FDaNbWcxopxMKD8PHW7yWZUbInKwrXtTmE3pB9HlB%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2b6822f8e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1244\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1244,"size_decoded":2035,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"962abd792392453549a1621284f0e7e2","sha1":"43cc56671a491b82aa812df97ab3f7c58415642f","sha256":"d71d3c93748ed13b66e33216389478cb6e0a7a1c60762e91f929cc3add46353c","sha512":"a19aaf25d8f08df805fb222c3cfc883e116da982c0ada92e5455da3e659a68457d2eb0c6b316a80ee464b319b3d091cf2cfc0c0b09e8d7b6d7ac61f75a3c302d","ssdeep":"","tlshash":"6021baef354b888cc6cb859334b7f55ab5d99de127ee8c2a302fc165643434d64b5140","first_seen":"2025-10-04T09:20:19.769942Z","last_seen":"2026-07-14T23:24:11.945018Z","times_seen":68,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mostbet-live.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"mostbet-live.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}