{"report_id":"895f6390-8456-4a18-8473-8ba5c70ffb78","version":0,"status":"done","tags":[],"date":"2026-08-28T20:38:50Z","url":{"schema":"http","addr":"grwbet.com/","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"grwbet.com/","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"title":"Play Betgrw Casino for Canadian Players | Claim C$ 1500 Sign-Up Bonus | Quick Cashouts via Skrill","dom":{"size":112885,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16280)","md5":"35a0e16f8d88c3ec2e5770afcb7784e9","sha1":"e7ccaa0f1ff956c57916f646365586f043a577b3","sha256":"c3a027bdb9172b6a7df2c9d381536edfdb2e5bacf1141d23880da5284076fb6c","sha512":"e93ccde737e645fe732c3de49beadced04172f3d6688dadc7ee0aefa3fcdb874f6deda3a44a6218b69f7fb547be28bdfac35f0d5085875cc3d9c1570521005e7","ssdeep":"1536:i0fsamozjypmHN6BVqiHkKDGrC7BGIqOHCC4BnB:ir5ozOnDGO7BSCgnB","tlshash":"85b30b7693b42dfb2bb7435d948f71517645aa01db4ba3e1f06ec098abc89520c73b0e","dom_hash":"domhash1b20c4852160af3b08edc3ef22ebe90f","first_seen":"2026-08-28T20:38:53.863983Z","last_seen":"2026-08-28T20:38:53.863983Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"grwbet.com/","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T20:38:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"grwbet.com","ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-02","domain_rank":0,"first_seen":"2026-08-28T20:26:11.303013Z","last_seen":"2026-08-28T20:26:11.303013Z","alert_count":36,"request_count":36,"received_data":1261012,"sent_data":18550,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"aThemes Sydney","description":"aThemes Sydney is a powerful business WordPress theme that provides a fast way for companies or freelancers to create an online presence.","website":"https://athemes.com/theme/sydney","common_platform_enumeration":"","icon":"aThemes.svg","categories":["WordPress themes"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"W3 Total Cache","description":"W3 Total Cache (W3TC) improves the SEO and increases website performance and reducing load times by leveraging features like content delivery network (CDN) integration and the latest best practices.","website":"https://www.w3-edge.com/wordpress-plugins/w3-total-cache","common_platform_enumeration":"","icon":"W3 Total Cache.png","categories":["Caching","WordPress plugins"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":1,"received_data":22045,"sent_data":549,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"grwbet.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-30T05:22:09.335625Z","times_seen":951138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/ai-js-js-extra","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88fb3feb4fc7fde23e9f373c8851aa85","sha1":"6c05fe657fa7775d0b3d701d959fd3663dcc6a71","sha256":"6dfd7365e755be09efc571ab803ab764eddab4532ff0af2655d3af1905c521cc","sha512":"bafe66e0060a9cc6389f9bc00d7738c1ed3ce776c9d931306606137a1ede596b6bdc3e4288941eeeda912508b371f738863d40407e0b960996019246e1252b77","ssdeep":"","tlshash":"14d02b03c6c81e7247994ef0485c563714b06020fd51e4810ac9d1804024c11df08000","size":207,"data":"","first_seen":"2026-08-28T20:26:16.290784Z","last_seen":"2026-08-28T20:38:53.901879Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/utils-js-extra","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c51368c59135abd24103dd9ab7707de","sha1":"93d1abe558aad4ac12a32abeba5c4ecd6c916ca1","sha256":"f3d236fc8f015a92e2f5bf61372a72be189f32fdd9ab7f165231b9d46612d281","sha512":"dc947b7ca3627655223492b8497162706a1938b01b3d1b4713e1a5e0a695ac76e750ae988289bf1264477937676be59b6be37df8d8781d8892ff045450d7e89e","ssdeep":"","tlshash":"d0c0123cd3f72d254a836871c2c845ba12ac7d71c0f357781f89790c00fc88193688c1","size":192,"data":"","first_seen":"2026-08-28T20:26:16.28985Z","last_seen":"2026-08-28T20:38:53.903406Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-includes/js/utils.min.js?ver=7.1","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4e1cbba8c1058485fbc5bcf93f484c7","sha1":"d39b9f8ccb52db3cd4664fbb919aea26ddd5d397","sha256":"a2687fe8e299a3aad2d4701478f7a7ea3689ef4f470372e3484cf28b84b019b1","sha512":"fc933f418d32fb0b76cda7c981e6117233f4aae18a356385938dc7280551be75b900c5a00af78c5792bdd9d914ff13cd1454caa9fd5784b17559335d9f06907b","ssdeep":"","tlshash":"e331445531c0b90ec1c612b0911b2b8bb2305e1088747aa4e51ae190fd256db4fa7ff4","size":1864,"data":"","first_seen":"2023-03-08T14:28:12Z","last_seen":"2026-08-30T02:11:11.81341Z","times_seen":7937,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a5263975bf2ef30116c99dfe46749cfd","sha1":"35daaa9d148efa8143a74bc1c966d78d9d950339","sha256":"05b12afe3a0c6c66edb82f510238903990b484af6abef5da50df0f54dbdb347f","sha512":"ca5701ef01eb1c707f0d87bc6f69dc5d6baf3e4f33093a515a119d25018c01bfbbfbc3a5be0e27b6062f6fac9bfea4c2e991714b610e61d7a2a7d7f3e2466aa8","ssdeep":"","tlshash":"55b02b0346c81e7207990ee04458563614706020fd11a4810ac5d1804024c11df08000","size":123,"data":"","first_seen":"2026-08-28T20:26:16.291789Z","last_seen":"2026-08-28T20:38:53.904727Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf73b38c86b12d976097185d6c4228e9","sha1":"e32be3c7da4e664c6747885468c31a230652766b","sha256":"2a7478d86c0734102b22da7e6f6bb8730fcfa582b9f4ea0b3ddc5792217909bf","sha512":"835cf3aa2e3b51533f913d92e48f1be53b6537307166cb2fd3aace356926988a31e3ea5cf9f01ec40acd0d6be6a0aced0cf64da34c78276f7de07368af520834","ssdeep":"","tlshash":"edb0123c13f72d250a832461c2c445b9126c7d71c0b317781f85390c00fc88193688c1","size":103,"data":"","first_seen":"2026-08-28T20:26:16.292788Z","last_seen":"2026-08-28T20:38:53.905557Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b94500fd377704a71cd4b9ef32bc3e12","sha1":"55cd4a10290bfac9016dd6800bec239082413a41","sha256":"45236ab0815f981c373aa6fd171b92b910be12e874fb411a711ca3df92e53bb7","sha512":"da1def8eb819f68d393316b8f4a0ee6e76c6273e0ab7ec8e1ddd0292032b5862030b57d8bef5a6961da1d75483b25ae8179ff6c91e1223b8298489758eb26956","ssdeep":"","tlshash":"cbe0cdf14c03956f959b0c33b470c5555a79e0f55e113243504e353d21d5fa23c29a2d","size":298,"data":"","first_seen":"2026-06-08T02:28:09.980305Z","last_seen":"2026-08-28T20:38:53.90641Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"06f019a6ff09db6b297570940eec1d5d","sha1":"872efe186950ce534aad341e7030fe24f7c672dc","sha256":"53f829ae556bf7011727483015d83a98bcdb4b5796eecb728827c1282c971536","sha512":"0cc41e9797501e654a2b51a1adba4d3593347ada90e0dbdeea3ee89345415ab192007ae9886855447d472d814b8945fcb680ae7fb8942d17af1682a33236d633","ssdeep":"","tlshash":"5be07dfafd5b457101e7a1237bce739e293275a3e92a4c402889ce806c38dd31126dd1","size":325,"data":"","first_seen":"2023-03-07T01:19:13Z","last_seen":"2026-08-30T05:31:35.946238Z","times_seen":20353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9fa7df463e2313cf903e8f791a12f9d6","sha1":"3e9a55cc8832277f597787081552df35136cee7d","sha256":"f247c3007e5beed05e0d7a4baf77f897bbec49a9d19698e2963b50c92049cf7b","sha512":"ca98a7ce7da90bf9beb2f1be9f609b2c182a76ab6af49521849a20055f3b65d33782831f32e4c524d16ab1aa8e883c1a03481c9622c59da9123813ff4f07421b","ssdeep":"","tlshash":"84b01257159c3d31bfcc9d2c30a5ce52e22034c6c6950c009f1d044883b1f8543c0827","size":110,"data":"","first_seen":"2026-06-08T02:28:09.979143Z","last_seen":"2026-08-28T20:38:53.908578Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wpglobus-js-extra","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"990436d088f0ab3a590de682a6734819","sha1":"6462e52a44b0726711d22c4bfbad31bf6c4ccf7c","sha256":"5d0f311b9f64d1aef2602138bd285026ea4cdb42ae97c77b85156c0caa6fa4ed","sha512":"6f08f234804f22d1d149eb7e933949ca4f00554f0f2eb813bea9e93aae7a663572f3f9e1dbc7b9dc153dc89f864426928874f6daf52c309af774f7cb8129f242","ssdeep":"","tlshash":"1df09256d5983d31ab889d3834a9ce52e2203486c69508009b1d044883b1b8543c0826","size":641,"data":"","first_seen":"2026-08-28T20:26:16.295916Z","last_seen":"2026-08-28T20:38:53.909188Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/plugins/wpglobus/includes/js/wpglobus.min.js?ver=2.12.2","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b61a1d77ecd0d921ba98d571117813b9","sha1":"c038a0155190eab55d2c239f5da33175853bf4a5","sha256":"d54004825272b45a3681c5370b4bcbb4f17aa5ac7b153e4fb02ce9d3d4bfb986","sha512":"32decb6021112dc7a0c0925e31ff4c3f53e252d159033ded0492c4ce8e3aa024f14ad544ffa89221eb593588e98f0fa618f7f0d740f935de7862ed8581d0fae3","ssdeep":"","tlshash":"29019e9b2038607538d6015c34e73a86e9d228a70a40b8d58f9c787007d6b1f46e555d","size":681,"data":"","first_seen":"2023-03-08T01:30:37Z","last_seen":"2026-08-28T20:38:53.879563Z","times_seen":330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-30T05:22:09.313993Z","times_seen":1039346,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/plugins/advanced-iframe/js/ai.min.js?ver=1","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a87e70ad7c7086374bd650bd11028c5","sha1":"ed94475d710246de32c3a05930c1c24c95b211bb","sha256":"08cd3f421ad2c58339b3467d9259ff7face03d83a1a2d9f642de3ab88fa04a56","sha512":"796341a13f2931ae3eeecc567be3383ede6c458a8c18f7aed2d5400f46ff821ade48b9f50d06048e9b8e50500abfbfcf84effac4be909515d216ab209a12ccf8","ssdeep":"768:S05/UywgdiDSj7yA5nMSc1c7cwc9cpcocicTcDcqDKYJkBI3G19Gd1UH74BoLqr4:ghDqgYJkBIcHUBwceCvK","tlshash":"9243d6b6a550a0ee017b84f1f07727a5782f0f9af2426d618b19056b395cdd802e7fec","size":55351,"data":"","first_seen":"2025-05-19T20:51:42.901366Z","last_seen":"2026-08-28T20:38:53.900089Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/themes/sydney/js/functions.min.js?ver=20240822","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0a65f532de78f5a6462652393dacfa2","sha1":"146cd52d5c45edf28c2079cbee8737e1fc7b0c7b","sha256":"965cc9d52a41c0600a1b6b8fa133bebad31a588ee9d9bc69fe8c75f02d2e47d3","sha512":"a2829819592a3a7b89d9f5ec3f6eb77bf1fbd0a88a37d417caeba4a23670a8f5181c692bf3c518799f719f7d45f8fbe23145e996fc577fdc37af8561e7dc5eef","ssdeep":"192:X/xu3tGPtXeQMQ/Jh2yweyoJise2JtQiycaqUfYGeqGumpJ5CkxY0Sjp/KxXcyJd:X/xICtOQMQ/Jh2yweywiseqNycaXfYG6","tlshash":"fa22a6aa37402d7f04ef59b362af7a893a333895ed4850102439dcda1e75ed24170afd","size":10605,"data":"","first_seen":"2024-09-13T18:40:37Z","last_seen":"2026-08-28T20:38:53.892917Z","times_seen":187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/p3nngbe/script.js","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ffd7e54a2c609bd4abb9c0de9ec13a7","sha1":"a58873743592cc63a531305162628b28c0b06cd5","sha256":"0416e7172d75a1da4229113fa7769e579064719950c7e9a68133a01ca057cfef","sha512":"df4ea32506d79fac67b576772332c4ba56a6d44ff7dfac7761b9d90941351890df82ee340c60f2784594e7e8af5db06513eb6becc2b719514d53b85dd70004bd","ssdeep":"96:5hkivaqIDvWrM+5sH8y1TB/7a+45zAx8QfqNGvCKabPane8Ew3EFBG:5hkQaqdrMANy1TB/u+iAx5ik6Kcce8E4","tlshash":"64a13de1f142b4b62bb99cd191742320b2361bb1f8468494e97d1c975e3d18b647ef2c","size":4689,"data":"","first_seen":"2026-08-21T18:47:14.64891Z","last_seen":"2026-08-28T20:38:53.874773Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://grwbet.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"grwbet.com/wp-content/uploads/2024/12/betgrw_casino_mobile.png","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.386Z","timestamp":1787949502386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/betgrw_casino_mobile.png HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=88rUBFDIWwH%2BXVrtkb0Q0hWlLRre%2F3RkqYUcZUTbKTNQ5wRgUSHZQ%2FiaaDmHNVvt1MEl8PAkUfb%2FKpJWdLbvy%2FoUJaMpHMHV%2F4FP0t3uB7jLRacJEzbla0ZNytMZ\"}]}\r\ncf-ray: a3261e85ea2975ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":538782,"size_decoded":539426,"mime_type":"image/png","magic":"PNG image data, 666 x 1000, 8-bit/color RGBA, non-interlaced","md5":"83cc9979b7a0db84846aa3eb5d99494d","sha1":"3fab335ff7317c7d790e66c59342b30e82301292","sha256":"d03de501c34c1ce2f6f1dda38755839df6ede8320f9b6a7a780e35191dee1cb0","sha512":"44a58cac8ff39ac8993f1e8442433a99908e0271046bb1192a3bbc778e4120110f88c95e12b47249ded328720288952314299fb238698dd551931daeec4e7859","ssdeep":"12288:wzsHMT2xJCoj30nj/t+W8RmhpIy6ZF2rLE:wAHMT2xJCTLt3amhunZSE","tlshash":"83b423b6c84d3096c941a76bb7032d89b9e219f2446cd86f28056da73c7d7c7f877a02","first_seen":"2026-08-28T20:26:16.276387Z","last_seen":"2026-08-28T20:38:53.868595Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/uploads/2025/06/hacksaw-gaming.png","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.407Z","timestamp":1787949502407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/hacksaw-gaming.png HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jpRaB4Tp6gsRs0bLN2wStC%2B6bq4G7XE9AgCatEELxkpPDQc40gyhHvngZwaTdg9Ojy63WoeYVOOoM9bAxGpiBJCraShgMDuNJG58WMwDHvZv7GnI%2F8bN4o%2Fh5Kpf\"}]}\r\ncf-ray: a3261e860a3775ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4967,"size_decoded":5605,"mime_type":"image/png","magic":"PNG image data, 359 x 100, 8-bit colormap, non-interlaced","md5":"9c100e67975f0326d6e2090158b5ac8e","sha1":"5c0764c1c86cd83ac96e9686c73852cc523f6061","sha256":"134dbb0caee6ebfe8c2b1c0a69d4dc3e28a6e782ae6d5e7ab2a95ce9c6d397a5","sha512":"c587f1dc9ed5cb9a4c01c4ca7e8daf8429ecdaae554e41c0a4287d1490a8eea5c21c7af6a68afda70e5428e78314277a915b989af0b04d7dc5e3d6561fcf510f","ssdeep":"96:riYzmKZZznxpBXZm8+c2PntxRDInO/gDjRC5VpK625jBG+j5E+KK9:eVCnVk8ontHDN/g3TJcEr9","tlshash":"32a19e85b62fefd9e5467bb116cacfd60c18bf44180bf810535460c5e24bc1fa686f48","first_seen":"2026-08-28T20:26:16.272101Z","last_seen":"2026-08-28T20:38:53.869589Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/uploads/2025/06/wazdan.png","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.414Z","timestamp":1787949502414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/wazdan.png HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cLMUN2MI8EpQ%2BcHu0Wp%2FQRsTFUQhyI4vAAKeZJ07aJ1ygof5vXfMzIhazlK0l6gqKnIkeLrT9uY6XDCCSTPSyInbAZJu9SXEtIlyfy%2BPQi%2F61b5KGCJt854siN58\"}]}\r\ncf-ray: a3261e861a3b75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3305,"size_decoded":3945,"mime_type":"image/png","magic":"PNG image data, 300 x 100, 8-bit colormap, non-interlaced","md5":"fdfc3f13dcd6a2f4dab2b55f3bfa6e8b","sha1":"a56252bfd39425a32d85a20fd9e2f3b8a38fe197","sha256":"193f8d81c2b00b65fcedad269ae66d906fa53b2d77f078d90464b5462b5bf405","sha512":"135fcaa46af0655252d2e12baef7e0001514d1eb858627bb751fe7feeaf49971d25be0eac2b28c598f810fb45c5513252658b5d85be6c6d6eaa6872b2ecddba4","ssdeep":"","tlshash":"8e614a678c66c0aaa77ee9726f262b58d52408075d9bebc0507a41b60c0c36b3753e7f","first_seen":"2026-08-28T20:26:16.28533Z","last_seen":"2026-08-28T20:38:53.870426Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T20:38:22.088Z","timestamp":1787949502088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6CP44%2BXZd9qpOpKw4X%2FQKFqbfkJU51vTy%2BrFN2lSo52JlN7tcFQTCn3f7wrboVCwA9K0G%2BuehqByKPblx4dmSOTUG24LacEOJGcPX2JDMQJ%2FOk2Obr7EVZqInAum\"}]}\r\npriority: u=0,i\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3261e8459fd75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"aThemes Sydney","description":"aThemes Sydney is a powerful business WordPress theme that provides a fast way for companies or freelancers to create an online presence.","website":"https://athemes.com/theme/sydney","common_platform_enumeration":"","icon":"aThemes.svg","categories":["WordPress themes"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"W3 Total Cache","description":"W3 Total Cache (W3TC) improves the SEO and increases website performance and reducing load times by leveraging features like content delivery network (CDN) integration and the latest best practices.","website":"https://www.w3-edge.com/wordpress-plugins/w3-total-cache","common_platform_enumeration":"","icon":"W3 Total Cache.png","categories":["Caching","WordPress plugins"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":112930,"size_decoded":22386,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16280)","md5":"a85ebead05f3843363e8b96f2bdf9b08","sha1":"1972867776772c8615152714dcfcbab741aa9efd","sha256":"0d540e4f08bc7ec65adf7c276ff2fefb9d3c61d46cff71175c1b8c9ea0429ae9","sha512":"893bd389142663c43f95c8ea094779edcf1e1f88ac01526a20022cb02949c51aee7bbec81663e59e4dfdd7b5a9e92d73e6c68a147783a2be20e9b73cce8e7c57","ssdeep":"1536:Q1fsamozjypUHN6BVqiHkKXGrC7BfckvOHQ63/6nL:Qa5ozORXGO7Bfl6ynL","tlshash":"06b30b7693b42dfb2bb7435d948f71557644aa01db4ba3e1f06ec098abc89520c73b0e","first_seen":"2026-08-28T20:26:16.275412Z","last_seen":"2026-08-28T20:38:53.871593Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":13,"connect":27,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-includes/js/utils.min.js?ver=7.1","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.383Z","timestamp":1787949502383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-includes/js/utils.min.js?ver=7.1 HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F8RQkhrIbJ9V2qgqmLU86q8zAAKl%2FngJMJy1%2F4irigXpSa%2BIzVT2QN2IyGHJHhpZQalF2oYynyjh9Z2PS2URZE0I8UWSQZQ%2FqxIqp6afZBBoZOIwhaMOmiUvzRKU\"}]}\r\npriority: u=2,i=?0\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3261e85ea2775ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1864,"size_decoded":1557,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1829)","md5":"f4e1cbba8c1058485fbc5bcf93f484c7","sha1":"d39b9f8ccb52db3cd4664fbb919aea26ddd5d397","sha256":"a2687fe8e299a3aad2d4701478f7a7ea3689ef4f470372e3484cf28b84b019b1","sha512":"fc933f418d32fb0b76cda7c981e6117233f4aae18a356385938dc7280551be75b900c5a00af78c5792bdd9d914ff13cd1454caa9fd5784b17559335d9f06907b","ssdeep":"","tlshash":"e331445531c0b90ec1c612b0911b2b8bb2305e1088747aa4e51ae190fd256db4fa7ff4","first_seen":"2023-03-08T14:28:12Z","last_seen":"2026-08-30T02:11:11.81341Z","times_seen":7937,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/uploads/2023/11/fat-panda-slot.jpg","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.399Z","timestamp":1787949502399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/fat-panda-slot.jpg HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZErVYaosXqFFGV78AD3S9zVPNeue18aLGI%2BTqDx1OQx7%2BaeJ8KtBdlSnbRtb9GPXuFBJ%2FJoqEvN372JUNnx12PPjy9csVCFE9%2BVxTmLdpHNq9fapU38Ot%2FRYOl03\"}]}\r\ncf-ray: a3261e85fa2f75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118250,"size_decoded":118893,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 900x900, components 3","md5":"473f2705419d5005516ef981a1db11c9","sha1":"63e6a2fc2fff82ca2aaacebdb31a89ec9573875a","sha256":"c8a570cfd6b8a3d75389b87540a3ad5cdb1d232e05129ae5e450c486728e4065","sha512":"9923c07148c3d6e5589d0cbc82422705d875c568771f35b23a6c7e6750703f6e0c145af7f15a44badcaa60a243c5b2f0f62a29b804fd9c40b217934ed7efcb5e","ssdeep":"3072:caVLIdoOLO7F5Xjq6Sb2D60Y2MvVrevUk+sXRRq/ueL:cE0oEmXe6l6x2MN6MSR6","tlshash":"23c312880433a773d9da5773d0ec2f4572906d2a84ec5d0f8bf1e898e2d7760be685a4","first_seen":"2026-08-28T20:26:16.28677Z","last_seen":"2026-08-28T20:38:53.873766Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/p3nngbe/script.js","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.521Z","timestamp":1787949502521,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /p3nngbe/script.js HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-h4cache: HIT\r\nage: 761\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dyKTp7cuFT59vXS9GascTQQiOj1mTE2DxgFdW5BtPJGc5bAIV6p6O1fxSMZlpP2Px73yg0yglYoIFarxEI32JLxZ40QdFXO%2FcPj8xaxIb6yw5LyC6SWql%2FegW4fc\"}]}\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3261e86ca4b75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4689,"size_decoded":3068,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4689), with no line terminators","md5":"8ffd7e54a2c609bd4abb9c0de9ec13a7","sha1":"a58873743592cc63a531305162628b28c0b06cd5","sha256":"0416e7172d75a1da4229113fa7769e579064719950c7e9a68133a01ca057cfef","sha512":"df4ea32506d79fac67b576772332c4ba56a6d44ff7dfac7761b9d90941351890df82ee340c60f2784594e7e8af5db06513eb6becc2b719514d53b85dd70004bd","ssdeep":"96:5hkivaqIDvWrM+5sH8y1TB/7a+45zAx8QfqNGvCKabPane8Ew3EFBG:5hkQaqdrMANy1TB/u+iAx5ik6Kcce8E4","tlshash":"64a13de1f142b4b62bb99cd191742320b2361bb1f8468494e97d1c975e3d18b647ef2c","first_seen":"2026-08-21T18:47:14.64891Z","last_seen":"2026-08-28T20:38:53.874773Z","times_seen":6,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/themes/sydney/style.css?ver=20230821","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.373Z","timestamp":1787949502373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/themes/sydney/style.css?ver=20230821 HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NJ201W8qYZEDh0oGePciFIGLpf9bpn8MRuGmRqzZJWcIF9aOws00TtjlnaNfK2Law4G6fBN2PfpuZyuG3nqMQKz2QJMhKt%2Bz9smlmecU8QcpRSZ%2B%2FeVIPSeONnqJ\"}]}\r\npriority: u=2,i=?0\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3261e85da2275ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1339,"size_decoded":1463,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (632)","md5":"b1bf0522ea195ac0443d42f7ad4cb0c6","sha1":"0cbb796eb045f02b293e707ab11382c23bf39b79","sha256":"1c2e92dbbe9787e990b911264b96a95472b0fa88b4c9c137c9da1ad34a577848","sha512":"657ec848de64df64e212836cf7f6ba43e8ef0060e943ea5c4787a45218885f28d44d3ae74aedbc1aaa0411d2b0613a5958914ed776b6150515f29196a6c169a8","ssdeep":"","tlshash":"5821880ae724127666d3478b3d77b40adb5fd30497c905f8e45fc599272122e2173f44","first_seen":"2024-12-20T22:14:20.053479Z","last_seen":"2026-08-28T20:38:53.875484Z","times_seen":9,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/uploads/2025/06/bgaming.png","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.402Z","timestamp":1787949502402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/bgaming.png HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xNhqxRPVA%2BVmj2FMWkdoGPVIYLNR7aRq6xXwUgJlHc3ec81uMYszKwf8lsUhs0O6uw6zBri0aj%2BLxTXqqHbpA7rcNueVRtUM4kRDZ%2F0SplcpDeWhAAIaVKhDto%2BA\"}]}\r\ncf-ray: a3261e860a3175ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3937,"size_decoded":4577,"mime_type":"image/png","magic":"PNG image data, 544 x 101, 8-bit colormap, non-interlaced","md5":"b17cad6744d1af8f9f6ad3bc7cefdfe6","sha1":"b3d3df60f6fdfee1216f82d857c1b97077ac3127","sha256":"563c3ea513a5d062ab521954afc1b0abf7c3dcdfe8b44ccd745bdd9fd205cd44","sha512":"2395ca4460403e6e0d4c52e9fd751104f4cd1b0c1de1df6bd5d59afc7e663918a687918cc19fc85099ff7d4a8572c99e2519196d30a588fb2a6a77c19578beed","ssdeep":"","tlshash":"f1817dc70d86cd9af4de03885e7515253e478fd244c27587fac11a16c8426aad3bfa34","first_seen":"2026-08-28T20:26:16.287864Z","last_seen":"2026-08-28T20:38:53.876589Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/uploads/2025/06/microgaming.png","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.406Z","timestamp":1787949502406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/microgaming.png HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2BXMXb%2F52YBzKC%2BwUeNBw8PdT3hDXv8wBDJIn%2FsPBG7IrrGp7NBKDjYuHFjYcVUp63dp522lYSj2mDawwjCX4X2u1yKsp04rnsHb%2BJmMSg1ihjWgVLYfXknv3NIX\"}]}\r\ncf-ray: a3261e860a3675ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15540,"size_decoded":16182,"mime_type":"image/png","magic":"PNG image data, 330 x 100, 8-bit/color RGBA, non-interlaced","md5":"5f3f48d60c5108d975fb51ab89bafdfb","sha1":"00953a1a11d3d56490b5c6f305a593fad82624e6","sha256":"4958f3719edcdbb07f002352948fa426759ca1a054ccbb0b2c98c833a037c827","sha512":"9977eaae884070cf057e8de1c9ffbd5e89c5978da12097f82e1c91c674abbac0f3423c8021604a8c9ce854f8690aa1f233eece17b42e695f61b0b06083a690ac","ssdeep":"384:rGLGq9BD0ge/dXE0DO2chdtNQwxfgv24C+:YnT0XE0DO2f/v24C+","tlshash":"d062d15bc1e3a286357ff39f0112b621c3723bbac68d8e3c5a64357968945e74874c8e","first_seen":"2026-08-28T20:26:16.288899Z","last_seen":"2026-08-28T20:38:53.877564Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/themes/sydney/css/styles.min.css?ver=20240307","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.372Z","timestamp":1787949502372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/themes/sydney/css/styles.min.css?ver=20240307 HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ovIzx9LwAjqlDYG9l1AX%2BDDB9xT2xNfxvIBelUZ%2FAVWXEuDXMdVahyt1tMYerIgP3cwFbtW1Oq0SQOtZKd8%2FH70MwEuHuKJC4oKeMAoN0n20BFhy9sc1ggwY9TN8\"}]}\r\npriority: u=2,i=?0\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3261e85da2175ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49551,"size_decoded":11470,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (49550)","md5":"6a776a2374f8caabc1cbe33638340bc1","sha1":"cd93b7691ee23e297f6a05415753c9cdd56ef6ee","sha256":"811747b42d3ca92dc3d346c5ebe369aad262df880efd01bace272ce815bffdfa","sha512":"cdb181434d9feb2ebb9c57480ed2d198bc660d957a238a1a4d508e1dda229061ecd377ab9f67231563e561161c096eeffb117f976c6e061875aa7756f0817409","ssdeep":"768:TH3nkKHkMkAkj+FdbFSl/bdQG8MqyfCwu5Vp0+j1wVDiqQK7M5bS6bn+lknl2oK:TDGjjCwu5Vp0+j1UiqQKY5bSm3K","tlshash":"c8230a3392a03628a433c73ce3d666b67675d923d71703e5b452a32ac7c76c20663e4d","first_seen":"2024-12-20T22:14:20.04639Z","last_seen":"2026-08-28T20:38:53.87855Z","times_seen":8,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/plugins/wpglobus/includes/js/wpglobus.min.js?ver=2.12.2","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.391Z","timestamp":1787949502391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/plugins/wpglobus/includes/js/wpglobus.min.js?ver=2.12.2 HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G4uUecZwWK%2F2nEkHFisp11Pe3jPLa4NzouohegvbtWSwXWF0TAtUBhWpJxRyRdDun%2BKRURNFkOZayjACrfGp7tUeOoM%2BTRVs%2FT6tvbsFCwAzEccvtX%2BmWXCFhXIh\"}]}\r\npriority: u=3,i=?0\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3261e85fa2c75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":681,"size_decoded":1061,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (681), with no line terminators","md5":"b61a1d77ecd0d921ba98d571117813b9","sha1":"c038a0155190eab55d2c239f5da33175853bf4a5","sha256":"d54004825272b45a3681c5370b4bcbb4f17aa5ac7b153e4fb02ce9d3d4bfb986","sha512":"32decb6021112dc7a0c0925e31ff4c3f53e252d159033ded0492c4ce8e3aa024f14ad544ffa89221eb593588e98f0fa618f7f0d740f935de7862ed8581d0fae3","ssdeep":"","tlshash":"29019e9b2038607538d6015c34e73a86e9d228a70a40b8d58f9c787007d6b1f46e555d","first_seen":"2023-03-08T01:30:37Z","last_seen":"2026-08-28T20:38:53.879563Z","times_seen":330,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/uploads/2025/06/evolution-gaming.png","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.405Z","timestamp":1787949502405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/evolution-gaming.png HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C7eLJI%2BVxP8hKXptkZQog7hkVkIoBDtP89wn3UeYXJngNcJEvzus%2B1y%2FGZzguWq0ylK1wdIqAgscV5DzuO2%2Byss65P4i%2BlVP%2B5YDZCADRV1WS%2F6VHpUif8uB%2FN3v\"}]}\r\ncf-ray: a3261e860a3575ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8016,"size_decoded":8664,"mime_type":"image/png","magic":"PNG image data, 302 x 100, 8-bit colormap, non-interlaced","md5":"87c38b778b45e80a46248b15a02261e6","sha1":"8e1ac2942e148c2fb490a4b0782142a5e1c04dcf","sha256":"e00549367503ce249b734a8e361c7e63f44934c4f1c6a278f3c22317483ff562","sha512":"0dbc3888945aed78c7b7746892d0e6c15c5b9cd8c5207b17d2b46cc68bef70057a522a88b5ad4a37e4e68f6b67dbaec58371e8368c31cf035bf368f2dabc1ed0","ssdeep":"192:MS9DuWMuec7JmY7lxJMKbqwcjVUku4UqLOSIXQYt0QWy+L:M47/eIbdM5D606k","tlshash":"40f1be9aeafc26179c4ab3357c5123d7e0b3169f080f97b844894ae01a2bf3656179d3","first_seen":"2026-08-28T20:26:16.281366Z","last_seen":"2026-08-28T20:38:53.880226Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/p3nngbe/api/send?t=171672715","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.814Z","timestamp":1787949502814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"POST /p3nngbe/api/send?t=171672715 HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nx-umami-website-id: 8bb6d2a5-c3bb-415d-aace-d8d1d021664d\r\nx-umami-hostname: grwbet.com\r\nReferer: https://grwbet.com/\r\nContent-Length: 291\r\nOrigin: https://grwbet.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wpglobus-language-old=ff; wpglobus-language=ff\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":291,"data":"{\"type\":\"event\",\"payload\":{\"website\":\"8bb6d2a5-c3bb-415d-aace-d8d1d021664d\",\"screen\":\"1280x1024\",\"language\":\"en-US\",\"title\":\"Play Betgrw Casino for Canadian Players | Claim C$ 1500 Sign-Up Bonus | Quick Cashouts via Skrill\",\"hostname\":\"grwbet.com\",\"url\":\"https://grwbet.com/\",\"referrer\":\"\"}}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:23 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uMcksaawqQteLHWyOac4IxLJJJle9Q0z5GmQXVaya7zQ%2B9tcBO1grdRvMzVnz0fTGLqzo2sZBd86YgHRfRf7IeuuUHv%2FppGPatyGNqHRPIJqEOVE0b9k81axwCcV\"}]}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3261e889a6e75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":439,"size_decoded":944,"mime_type":"application/json","magic":"JSON text data","md5":"6bb09f70649f196677504cb7a1493af8","sha1":"6b6ae8f2f3ea550b1311e9b82dfe79b75acb566f","sha256":"905d544870800a1af030206c8fc26cdba212ad746d6a74d121bccbe892bfb5ee","sha512":"e6e98c915383dfd64a2d8252183f22b80653204ba6ce8f4f68b176e527c0e2c2e0650b227da039e1ef18f28539be6a0a257d15ee3adcf340801c0b156df84d74","ssdeep":"","tlshash":"57f02361751b878c3105a9844e485b85cf79c1a2cbfb20f151e251248865dd73417290","first_seen":"2026-08-28T20:38:53.881024Z","last_seen":"2026-08-28T20:38:53.881024Z","times_seen":1,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/plugins/wpglobus/includes/css/wpglobus.css?ver=2.12.2","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.375Z","timestamp":1787949502375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/plugins/wpglobus/includes/css/wpglobus.css?ver=2.12.2 HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9gWszQRMfV4qCSU%2Fv5RMYMR4EJ9CJA%2BT3t3q%2BHfoy2OQ5nPd56KcquZjZt0X5Beo1HaOvMR7oGYvoImtM7Jfb8acVxu3aNh60EQdSQ6dNz3XrhXTM6BDMZv26Cwr\"}]}\r\npriority: u=2,i=?0\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3261e85da2375ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1555,"size_decoded":1226,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1555), with no line terminators","md5":"182bed899808c71172170b1d011676ab","sha1":"7ac1ba66ba91626dbc9d755f058371cc4860d9e0","sha256":"a5cd471b570566d2f7e1d9a811f6c0d34d5742b4f62e9c32cd74b0f827665f70","sha512":"ae266423712022af97660ebbd66fb9372f5d5ec599a27602dfcdb848ad5f04bd0f11bfc884d290088b1f5d92cca6132612892875f91150e7c2ddd89e2119d4a2","ssdeep":"","tlshash":"6d31ae9bc0cc8e2910f3e2ed89dc3729c6a3858bdb814e296db1a73c57ce25400f3609","first_seen":"2023-04-11T14:16:30Z","last_seen":"2026-08-28T20:38:53.882996Z","times_seen":333,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.379Z","timestamp":1787949502379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r8TQPHkuXjUV8JWFjLdmuWKIzTmgZD2BFos8QAEb%2FKwjDRhKDa2R1emY%2FHnJFHiFW0ElIFWtTIGrm0VVWASfyV2rjjxJ9xxtbatOGHUrDDF38xYIYm4OsJLLK23n\"}]}\r\npriority: u=2,i=?0\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3261e85da2475ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":32912,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-30T05:22:09.313993Z","times_seen":1039346,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/uploads/2024/12/betgrw-logo.png","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.802Z","timestamp":1787949502802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/betgrw-logo.png HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nCookie: wpglobus-language-old=ff; wpglobus-language=ff\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jWe2eSFhQ4gkiDyy9%2FH30jl5YVNZZR%2FznXGG9HPo2lxyD633gU5QNsBFNIDcWtzoHse%2B2CIMf1wYTaxSj5osR9zNYpyeXwSIjMwDjHa9pYp0QV%2FFI5Tkm7NmvsDE\"}]}\r\ncf-ray: a3261e888a6a75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10726,"size_decoded":11369,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"60b5201198ffdb34fd9717d1ff65c5e6","sha1":"7ffa8f1a14bd48f66fcf6b656195cfced0747b4b","sha256":"8700f2b4a17fde0749909faca861dd2c5b2b36a98d708d15df81d6b74146df2d","sha512":"3b62822c4f2c8eaab44743e7712ad56cf5ba023511d6f757ecfb4bde433a853c17fbd2acaec37a9ca4a7cec22dbf698ded5bd39d8c612bebb87d260145106d79","ssdeep":"192:DAke5V+fRpIDmt7B2G+waJqXaEgdLScfywICa4ejDnIOwh/DZwFkG:be5V+fRLt7YGUOR3T4ejDIvhdE","tlshash":"4322af11e544e80960307e4967be13e36ab25043fc9757e3e4abcd622624f9d8b8d1ed","first_seen":"2026-08-28T20:26:16.27736Z","last_seen":"2026-08-28T20:38:53.885541Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/abhayalibre/v18/e3tmeuGtX-Co5MNzeAOqinEQfEnX.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.729Z","timestamp":1787949502729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/abhayalibre/v18/e3tmeuGtX-Co5MNzeAOqinEQfEnX.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://grwbet.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21232\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:43:31 GMT\r\nexpires: Thu, 26 Aug 2027 10:43:31 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 13:44:36 GMT\r\ncontent-type: font/woff2\r\nage: 208491\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21232,"size_decoded":22045,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21232, version 1.0","md5":"476229c30f7e0970087e00454cc8fc11","sha1":"1af7c542522f2e78583ba21f087eb2e0673259e0","sha256":"4c36e530004dc8118872aedf92281acfdfa3ac8aa6a277324237603201367b6f","sha512":"8f6796ec8ca05b0f41f5f78f4102412dc1e307838cc0500ae4540c4d541f65dceb1729954665e7a43c0eb38884c54ebb65fc63020338350dbc5e43e88bdc062b","ssdeep":"384:Y2amHXTKqcTzQBZhKF6ncK0ehaoUOkfV0cOjweSSSEyoktXfyZoEuTA:Y2RHXTKqcCZh2QcmSQpseDyyPuTA","tlshash":"9492e1c1131fd811d944b0b89cb9632c66f6909af234af65d30786ee42d7bdbf501243","first_seen":"2023-05-07T21:28:46Z","last_seen":"2026-08-28T20:38:53.887824Z","times_seen":929,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":3,"connect":33,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/fonts/f22c0f00b4369f1e08c313a8b9d41ba4.css","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.370Z","timestamp":1787949502370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/fonts/f22c0f00b4369f1e08c313a8b9d41ba4.css HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZuwXxs3OuGfXW80SlVthtUFLaPPAU36yJ7Umr39hMTyIg7E44%2Bhnk0QUvS%2BdlgtIiT5cwxOvAbqcTzX2GeMlWmumknn7KzH2GRXeAXYvzGD4tKUK43JqzJETTPqF\"}]}\r\npriority: u=2,i=?0\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3261e85da1f75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1191,"size_decoded":1151,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"447de6ad79acbd39d58f04810e31a138","sha1":"03bf7bfb5b7c7bb6c50894795cfef3d6e277d83c","sha256":"edd899f8a6f0225b65fb4076950a07a2437ea9ec961ac76defeaebef07a277ad","sha512":"aac82e5d37b8dca409618da3921192f9877c51506d3115be459757940702193ecc9dec4c7f917e3d1d6493ad71670a43c734eefe399860c3878b32d117701a3e","ssdeep":"","tlshash":"5b21e4d1845a9504bb930cd022ddfe39ed0e315d6840d8757aff0988ac97ca5635674d","first_seen":"2025-09-18T05:45:25.442795Z","last_seen":"2026-08-28T20:38:53.889109Z","times_seen":87,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/uploads/2023/11/starlight-princess-slot.jpg","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.398Z","timestamp":1787949502398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/starlight-princess-slot.jpg HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kH%2F26x6BALAJQzJIwGK7vxA9IGl5D9GIzh4mNJsaNEsYbgX2aqPdAcKLgXGVoBHd3Gf5EH5Gl8EVYxqdUXvy9cKEBsGuWLEq78ET%2B1TkOn7OTv89p0OpeUUS56GB\"}]}\r\ncf-ray: a3261e85fa2e75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66010,"size_decoded":66647,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 400x400, components 3","md5":"562ce38ab29739802bcf179e4d2f7039","sha1":"5434a249d1152c759fbc239a595941979846589f","sha256":"e140b10f0c0c753766393e2ef679daab088c75bdf192a367c5dd4952b999201e","sha512":"f67a6cbf8e5a21b671bc622af6ec0ae0e2a0f69fd64ace72efae414f2b9e639131d869dfb00d3d8bef7a3c3b4370bffcb0fee4f6d859eedfdb66ca0d4ed79a65","ssdeep":"1536:kiMFe5XbeVR3fW8ZFLborI333+xnivEm/4HDUpQqR+17l:0CreVciZ338nRI4HD7Dh","tlshash":"af5302d0d4a38ec672ee11bb343d825c0bd2fd651b98f967c7de2485ad99242dc948f0","first_seen":"2026-08-28T20:26:16.262015Z","last_seen":"2026-08-28T20:38:53.889711Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/uploads/2025/06/playson.png","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.403Z","timestamp":1787949502403,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/playson.png HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ogA3CdGYF2EL0K%2Fb72et23DTq7gY4L7qH4buoUDASj4V6gQiWcU%2BlMIpKhYY8mQnsyUjiCfga7Zun5l%2B%2Fof1%2FYygj0oCz7Lx%2FLBmBtV45OaBYIuT0ojoDEWqsNA\"}]}\r\ncf-ray: a3261e860a3275ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6899,"size_decoded":7543,"mime_type":"image/png","magic":"PNG image data, 489 x 100, 8-bit colormap, non-interlaced","md5":"6259789545733254c786d8e2839f1dbe","sha1":"96ef598b5670b94557d6732f28acc2d4ffdf2e2a","sha256":"74aa690afe06d5577755a060644344e3af92ae2bc41ebf88f7ac732ff3d3bb5c","sha512":"442f112e57aa06d3abb3c4e1b006887f9898fddba420f923c654aeaba2232288076579e5c60e256622dc4975b258069f819d4317d3bdd9fa431de592b91e9f36","ssdeep":"192:7jU0FgrDC4rnwTKcaU/0SJUEXPppAfSZiCyJ0:7juC4rwT3aU/0SKUUfkw0","tlshash":"6ae19ea61de1626db602f8b2e7fbd4c4f1cbced848912c521a456a0d89ccc1e2d93826","first_seen":"2026-08-28T20:26:16.257654Z","last_seen":"2026-08-28T20:38:53.89037Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/uploads/2025/06/belatra-games-logo.png","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.410Z","timestamp":1787949502410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/belatra-games-logo.png HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PJmTrWuqeIRCbcdWTU7z%2BmcLBtO5ScEQI254eDqeJUmrOhnuRB2uYcrSXTGLreiqhE1oWTjkfk4B%2FQ3dVUUxicDxav6l4bS1c%2F3gRTvMrdbzxyAP4o6A6xZIalw1\"}]}\r\ncf-ray: a3261e861a3975ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9380,"size_decoded":10018,"mime_type":"image/png","magic":"PNG image data, 250 x 78, 8-bit/color RGBA, non-interlaced","md5":"eb65e0c9554397edfb7550c00f8188fd","sha1":"e485e0dea14c928264adc944ee3e8f02c40ae6c7","sha256":"4d6fdf81ce6f8803c45f2731a79cc78240a061c0cb14345d8ec9fbbd801d3680","sha512":"c45a368c5a0c16470dfb02ab5a582127c657825380c99f7ce36d346ef9afe44e90788ddda199e62ee0f88d88f5cffee383410fe360b810bcf0afe069f8a0595c","ssdeep":"192:am+nCxgFQBgTtwW0GHhGehZOriy+TJd7TBeYoJSx0:qwgFagiW0eG32yAJp9eYY","tlshash":"6b12afe080cd56306810fde9ee5da660952f72929d3f36d01fccf446fa06169d88bb66","first_seen":"2026-08-28T20:26:16.273367Z","last_seen":"2026-08-28T20:38:53.890986Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/uploads/2024/12/betgrw-logo.png","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.801Z","timestamp":1787949502801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/betgrw-logo.png HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nCookie: wpglobus-language-old=ff; wpglobus-language=ff\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RmZ2tvn15fVVv1znEJTJ4MuaUP7HVtTWE6%2FKucUXbHxnmX5%2BSOUylAHfLs4G5Jv9q8v462lc%2BLBCwnJUcOwouYnK3NTGi4bZQ96J3WbjWyCoVO8oHAiWZYEo89KT\"}]}\r\ncf-ray: a3261e888a6975ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10726,"size_decoded":11367,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"60b5201198ffdb34fd9717d1ff65c5e6","sha1":"7ffa8f1a14bd48f66fcf6b656195cfced0747b4b","sha256":"8700f2b4a17fde0749909faca861dd2c5b2b36a98d708d15df81d6b74146df2d","sha512":"3b62822c4f2c8eaab44743e7712ad56cf5ba023511d6f757ecfb4bde433a853c17fbd2acaec37a9ca4a7cec22dbf698ded5bd39d8c612bebb87d260145106d79","ssdeep":"192:DAke5V+fRpIDmt7B2G+waJqXaEgdLScfywICa4ejDnIOwh/DZwFkG:be5V+fRLt7YGUOR3T4ejDIvhdE","tlshash":"4322af11e544e80960307e4967be13e36ab25043fc9757e3e4abcd622624f9d8b8d1ed","first_seen":"2026-08-28T20:26:16.27736Z","last_seen":"2026-08-28T20:38:53.885541Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/uploads/2025/06/gamzix.png","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.411Z","timestamp":1787949502411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/gamzix.png HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gqGuRjmDwTMwO0QdXbkRokXHqztfDItkb5lF5XQaKhSKi%2BMBeAOkfJFlcR2%2BzNZJEKqGTSrxIKngh1N24gg%2F%2FTLsCiNKLF8ojxev26gWRZi9QR3YNVnwkgExsKfC\"}]}\r\ncf-ray: a3261e861a3a75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10675,"size_decoded":11315,"mime_type":"image/png","magic":"PNG image data, 454 x 100, 8-bit/color RGBA, non-interlaced","md5":"a2405d02ddbdeab008e2521b459f67d9","sha1":"bd96b2bd0b749c7d27a417c20987875ec9e1fd6c","sha256":"f1edee4df386835f7768a8f880b137d1821c99fb3861709c1f58dd4b0e254086","sha512":"85b2d66b1e4062767cf1eda0809906530309205ab9b13b09ddcd1e333ff8842c9088bb96352309ab13a4ab9a1bb80d269fca83f45c93a84d3bef735197b61264","ssdeep":"192:y8pEs0/qFnGKlxvGZfb9tD/VOSEo3ADiK6EkEsIvFEuEJo:y8pEt/eGqMZfZtDDEok6EfsOFEuR","tlshash":"3722bfc0620f176ad230a6e728864fa798560cce5d7c8efb6077d7712c6f8bc856056b","first_seen":"2026-08-28T20:26:16.268169Z","last_seen":"2026-08-28T20:38:53.892224Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/p3nngbe/script.js","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.384Z","timestamp":1787949502384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /p3nngbe/script.js HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-h4cache: HIT\r\nage: 761\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fEY%2FK7CbqncZox4rv0AONKv%2FnHyUoOdVNpakH%2F04ZyLSRNlBTdxuYWvfQpp5kg5p5bERH8LxkuVGbxpi%2FMa2h%2FP0Z%2FOKKiYnYH%2FyLLYHpzjXYYy%2Fflm2FqIAIZp8\"}]}\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3261e85ea2875ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4689,"size_decoded":3080,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4689), with no line terminators","md5":"8ffd7e54a2c609bd4abb9c0de9ec13a7","sha1":"a58873743592cc63a531305162628b28c0b06cd5","sha256":"0416e7172d75a1da4229113fa7769e579064719950c7e9a68133a01ca057cfef","sha512":"df4ea32506d79fac67b576772332c4ba56a6d44ff7dfac7761b9d90941351890df82ee340c60f2784594e7e8af5db06513eb6becc2b719514d53b85dd70004bd","ssdeep":"96:5hkivaqIDvWrM+5sH8y1TB/7a+45zAx8QfqNGvCKabPane8Ew3EFBG:5hkQaqdrMANy1TB/u+iAx5ik6Kcce8E4","tlshash":"64a13de1f142b4b62bb99cd191742320b2361bb1f8468494e97d1c975e3d18b647ef2c","first_seen":"2026-08-21T18:47:14.64891Z","last_seen":"2026-08-28T20:38:53.874773Z","times_seen":6,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/themes/sydney/js/functions.min.js?ver=20240822","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.389Z","timestamp":1787949502389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/themes/sydney/js/functions.min.js?ver=20240822 HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2B0T2MD1oqizAEEi6ljws%2BKpSl16WRcR5Sw2dC4H7BBAcLq6eLSo0bl66pKBUmloaFZ6Qm0gtI67BXRWFSW1P9MsHo0oAu%2B4LD4zxfxMSbEWn%2Be66WxDAuoEQX9o\"}]}\r\npriority: u=3,i=?0\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3261e85ea2a75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10605,"size_decoded":3924,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10605), with no line terminators","md5":"b0a65f532de78f5a6462652393dacfa2","sha1":"146cd52d5c45edf28c2079cbee8737e1fc7b0c7b","sha256":"965cc9d52a41c0600a1b6b8fa133bebad31a588ee9d9bc69fe8c75f02d2e47d3","sha512":"a2829819592a3a7b89d9f5ec3f6eb77bf1fbd0a88a37d417caeba4a23670a8f5181c692bf3c518799f719f7d45f8fbe23145e996fc577fdc37af8561e7dc5eef","ssdeep":"192:X/xu3tGPtXeQMQ/Jh2yweyoJise2JtQiycaqUfYGeqGumpJ5CkxY0Sjp/KxXcyJd:X/xICtOQMQ/Jh2yweywiseqNycaXfYG6","tlshash":"fa22a6aa37402d7f04ef59b362af7a893a333895ed4850102439dcda1e75ed24170afd","first_seen":"2024-09-13T18:40:37Z","last_seen":"2026-08-28T20:38:53.892917Z","times_seen":187,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/uploads/2025/06/novomatic.png","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.400Z","timestamp":1787949502400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/novomatic.png HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DmxhsVw62xHwWwE6w%2Bfge0tcXhUmHJxmhXUPgEy6e4ptZsKQkvXgZ9zDVogMKYisnzJHLR5BBZF34Z2cr45d6%2Btky3JWtJfYfEdUDOjhlMypu%2BP5zVVB%2BbciTqjz\"}]}\r\ncf-ray: a3261e85fa3075ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15748,"size_decoded":16388,"mime_type":"image/png","magic":"PNG image data, 746 x 100, 8-bit colormap, non-interlaced","md5":"f9ef0c92fab8f64765c7db77c66c8f3a","sha1":"5b7f39c5b12eb1663425fd931432f3b34ab1599e","sha256":"489eb926b48a54bc5afd024d4fcd7cfde7840c18f782662ac677f58f88429fde","sha512":"ad42eb1085930d8898dc7fd88f07166deaa06975d4f52b4146c906bef475dc10388640571c6b7c9aa3e3391f0784173876408b0c3b0567ac40f6d75d81008c83","ssdeep":"384:8Swsa6TWdUPoLmMrlRCImmlsxGVktdzpvSiolTMFHobS:8Sws1TFArlRCImml4MktdzUiolTMNo+","tlshash":"8c62d095a24ac95eca5f1c9dc69bfc41f9ac943da08eac4be4c8e8317043da18252f07","first_seen":"2026-08-28T20:26:16.278368Z","last_seen":"2026-08-28T20:38:53.893445Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/uploads/2025/06/ka-gaming.png","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.409Z","timestamp":1787949502409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/ka-gaming.png HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Di7Yt5EVzNEkzePAx9bd7ZjbkffloSMhT%2FEJra8VUR3SC7FczeV4eWNqP4bnCVlMOl%2FpI4DYKilwJ8IdHxAfWDAI09p2WQ6krOTIvz0TvUck2h0a2emz4wn%2BdqDk\"}]}\r\ncf-ray: a3261e860a3875ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13152,"size_decoded":13790,"mime_type":"image/png","magic":"PNG image data, 306 x 100, 8-bit/color RGBA, non-interlaced","md5":"0fec2b9017361a39d1f97e1234355caf","sha1":"72a2007ad8e706ec57cb97cb17358763938a4c91","sha256":"51bb57ddbcb25859e15e0d135bc8a85b799a06d60a1b285bd63bc39f06ef8ab0","sha512":"f825d6486494312e5e9603aacce55b2e58e87aeb8426b27a2f7be1f7d4ae6dc8272f40da6437ebb21675a9e0292bc3e343e1f11a42d84fb1253d5ccd01962741","ssdeep":"384:fhGwXpO8Du7g4fwVVFx6ILgzqt+sKKt4oAa8hbN:fky7Du04f6FIC+PRdN","tlshash":"6e42bf5f303e73a893fa91f23527724f872050c94462ab3ad0e76d9a9c282d55fb4499","first_seen":"2026-08-28T20:26:16.263841Z","last_seen":"2026-08-28T20:38:53.8948Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.380Z","timestamp":1787949502380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FthK4uFwnehYjqM%2FIJnp92pdIJLQ%2FT1VVDjskmTzSIC24zRy5yN6anlQf%2BMUCanV337ZjNdpOmqfA0PPoQQ4TzhwCP9hs4d%2FkWyjB7FBk2bjrv18eMA%2BUOtSCeAl\"}]}\r\npriority: u=2,i=?0\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3261e85ea2575ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":5878,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-30T05:22:09.335625Z","times_seen":951138,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/uploads/2024/12/betgrw-logo.png","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.397Z","timestamp":1787949502397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/betgrw-logo.png HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u71Xe5gWWhFmJhz9QlqHrO4hT37Bp8xWNpkS6ehPjMDMCG6UaR%2BLDXJuWhXimkkUe4nqAN7dBZUAiqS5%2BVpj9iSuMsr8k3Eojig3UUeQvNeEJg9CA2S2nZAYVobk\"}]}\r\ncf-ray: a3261e85fa2d75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10726,"size_decoded":11362,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"60b5201198ffdb34fd9717d1ff65c5e6","sha1":"7ffa8f1a14bd48f66fcf6b656195cfced0747b4b","sha256":"8700f2b4a17fde0749909faca861dd2c5b2b36a98d708d15df81d6b74146df2d","sha512":"3b62822c4f2c8eaab44743e7712ad56cf5ba023511d6f757ecfb4bde433a853c17fbd2acaec37a9ca4a7cec22dbf698ded5bd39d8c612bebb87d260145106d79","ssdeep":"192:DAke5V+fRpIDmt7B2G+waJqXaEgdLScfywICa4ejDnIOwh/DZwFkG:be5V+fRLt7YGUOR3T4ejDIvhdE","tlshash":"4322af11e544e80960307e4967be13e36ab25043fc9757e3e4abcd622624f9d8b8d1ed","first_seen":"2026-08-28T20:26:16.27736Z","last_seen":"2026-08-28T20:38:53.885541Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/uploads/2025/06/felix.png","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.413Z","timestamp":1787949502413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/felix.png HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qGVJDrvB9dkOeWOWrkrmO9MQydq6WU0bjBnzJ8LIJWzFZU3Kq6gkOvESjzDw8tMZ2yhVlVe7ITXlQ8ztkwjmUBoYHy4brnxfJ7%2F0jlXNivYq%2BPtlAQnIlxhdPXY%2F\"}]}\r\ncf-ray: a3261e861a3c75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13229,"size_decoded":13867,"mime_type":"image/png","magic":"PNG image data, 381 x 100, 8-bit colormap, non-interlaced","md5":"1e574afb9ed342310d6e671c4e5688ff","sha1":"d76134babc57ba8eb36c6e778554c5345997b313","sha256":"ba7643839be1a9eeaee7e6878b68e148742b68bf0458cfe23b02d0c5d93578de","sha512":"aac29ebfd6aa06fdaea173586f3a7c9717b85ed6a4e75112014e9b29c0b518504cc3c01d20c1c19c6b6b1e1d574b9a7d793a6068b5398c821cda96232e7743c4","ssdeep":"192:7TB07ddNNgGuwiTxt0DBfmeK4ECLbEf6to3KSk/J7gRM0KZd04/tYJ7VGLEgy:71gdbgjTsBeezLb/mDstX0y/2xVGLq","tlshash":"0552cf5664f73a274f32f86b7d7637301fdace0cd886491399e7622508b4324b990ea7","first_seen":"2026-08-28T20:26:16.269269Z","last_seen":"2026-08-28T20:38:53.896666Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/uploads/2025/06/pragmatic-play.png","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.401Z","timestamp":1787949502401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/pragmatic-play.png HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q3lmMquj6hADecQnsqsysrRYLcbwXS4z9d7U98MK4Y9Wpe9v91izDEfnpLyI1WwqJMum6p7Oisw0%2BA0Ux8x2WHMLDt2woGuVveZ9sJoaJKwQN44GAINlI72C%2Fyxc\"}]}\r\ncf-ray: a3261e860a3375ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8797,"size_decoded":9433,"mime_type":"image/png","magic":"PNG image data, 300 x 100, 8-bit/color RGBA, non-interlaced","md5":"9a46a31fb5291f500aee8eebfb0559a3","sha1":"03118abc26e1479d42876552aced90099faf9a0e","sha256":"7f83fae800c058fca96f98e0bfb9f248bfc47bd8ba018c8735e43c40c257246a","sha512":"f889be27fec94e541d63ae493887e2b1fda6682e1f56fb70577907ffc0e23505245461b1b99edda5882361e29619818b77e6a22ed8823280374c70fa2322fc08","ssdeep":"192:L5qKJCTDbo0RV72EyXlyyJrCQzbBfK6u2dIk+KMWB7GvNAig4:lvJebNP+1yoOaxK6uUSWcNBg4","tlshash":"7d02bfb99e054cf7e77a49343133d0d2acaa8b2039724d05c577169162eb9bad4c82af","first_seen":"2026-08-28T20:26:16.266094Z","last_seen":"2026-08-28T20:38:53.897546Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/uploads/2025/06/yggdrasil-gaming.png","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.415Z","timestamp":1787949502415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/yggdrasil-gaming.png HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2BkzK70DtqnACyfizTowLDwHrt1FTiTx1LZHrluT2Hb5xk3O2FMxiTzBVFvGeXW%2FdT%2B8he8kGhfh%2B4TgQy%2Fgo4N3pweNKnlznMpwLmImAfm%2BIaNRE43aWLuOD6Gd\"}]}\r\ncf-ray: a3261e861a3d75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7379,"size_decoded":8023,"mime_type":"image/png","magic":"PNG image data, 417 x 100, 8-bit/color RGBA, non-interlaced","md5":"3a54ded5d5b7f5a45650d18abb36f4ab","sha1":"515d69debec95ba058577c26d14e3e2fc035860b","sha256":"97640f3453e07c7941978f076f31cc88f2c02d5f04ac760e08457fa3899a17a1","sha512":"712e9110523f5497a8a63e5da9b2c99fa0fdd9b9d41cf7cd2ba21cce0b3cfde55268bad52af162f2585202ce93362758ef0ee9b8b1f07f4279d3d403507bd7b5","ssdeep":"96:z+V/xk3HYQHaEXFBQCgYZQM1zjo1Io493Hy0256jHjvGTQf66XvVMbRUHNg5/gZL:zQk4CqWzE14FuqHi8S6/VMbR2RjNRbr","tlshash":"f0e1afd79254573ec90d76183006eecab968a164f07942301c65cbeb8dae354e44abae","first_seen":"2026-08-28T20:26:16.270309Z","last_seen":"2026-08-28T20:38:53.898581Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/themes/sydney/css/bootstrap/bootstrap.min.css?ver=1","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.368Z","timestamp":1787949502368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/themes/sydney/css/bootstrap/bootstrap.min.css?ver=1 HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UBvBYg08TCSPjTu0DUgFkOH3XjSEnE9eDc01VwufHOvTH5ZDgnaKOrKTq0sWAQ0qTRsTwYXMd6cIB5riMGFDbD4InL%2FEVi9BPeG%2BGZOw%2Fs8wyEJZsm7ALiCPfTWm\"}]}\r\npriority: u=2,i=?0\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3261e85ca1e75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7223,"size_decoded":2699,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (7223), with no line terminators","md5":"b5e3eaf9872939b8f3d06c2cc0f66991","sha1":"3fd5c4b70072ed295c038b0081abae778a4c61da","sha256":"a3d39290746ebd836e9b24fc82c3801d614874445e80a7b711f7fd8651e899a7","sha512":"ef3d0cc8b7baac2cde0f827cd9a215cbcd9fa91a412f8112eb85f55e8c6380d2afd24f0be2d5365c73a98a71400bd9392a2f836c17e564e8876671ee03db3298","ssdeep":"96:VLX06BeQWeX4wZP7EXlEx+utPdwFCPnZhgpUcg4d2Pd+lvm5O+VQHaM:VfBNRmqxxPdw0Pz4d2l+xm5O+VQHaM","tlshash":"17e13fc14a203c68a232481a75c29d4f5502221bb773acb7fa709d7adfe64431975ecf","first_seen":"2023-04-11T21:00:06Z","last_seen":"2026-08-30T04:53:33.397249Z","times_seen":2009,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/plugins/advanced-iframe/js/ai.min.js?ver=1","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.381Z","timestamp":1787949502381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/plugins/advanced-iframe/js/ai.min.js?ver=1 HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1dhf5hZsgXWS7%2FMgSH%2BoUp9imQfJPOfX4j6WtMuooLmfFn4iUCtoAcKy94i6DF4kA6PauqKs%2FiNr%2Ft4FllEySjDey%2F1clbOJ2wjVfyrgkMvQxkaOFG3bugY6dTyh\"}]}\r\npriority: u=2,i=?0\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3261e85ea2675ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55351,"size_decoded":14335,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (55276)","md5":"7a87e70ad7c7086374bd650bd11028c5","sha1":"ed94475d710246de32c3a05930c1c24c95b211bb","sha256":"08cd3f421ad2c58339b3467d9259ff7face03d83a1a2d9f642de3ab88fa04a56","sha512":"796341a13f2931ae3eeecc567be3383ede6c458a8c18f7aed2d5400f46ff821ade48b9f50d06048e9b8e50500abfbfcf84effac4be909515d216ab209a12ccf8","ssdeep":"768:S05/UywgdiDSj7yA5nMSc1c7cwc9cpcocicTcDcqDKYJkBI3G19Gd1UH74BoLqr4:ghDqgYJkBIcHUBwceCvK","tlshash":"9243d6b6a550a0ee017b84f1f07727a5782f0f9af2426d618b19056b395cdd802e7fec","first_seen":"2025-05-19T20:51:42.901366Z","last_seen":"2026-08-28T20:38:53.900089Z","times_seen":93,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/wp-content/uploads/2025/06/zillion-games.png","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.404Z","timestamp":1787949502404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/zillion-games.png HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://grwbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:22 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-h4cache: HIT\r\nage: 761\r\nlast-modified: Fri, 28 Aug 2026 20:25:40 GMT\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ko9vpAu101kHu8tlxEvgXZXvuun4IU8w77z83IPAxGl5aUob%2BczhIAydcCmra3SgtRhrou9wWLO3nowGyGurI4r27UlOUfd%2BoEntD0pfpOlH4vAtebgk4BXjfevY\"}]}\r\ncf-ray: a3261e860a3475ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7505,"size_decoded":8141,"mime_type":"image/png","magic":"PNG image data, 208 x 100, 8-bit/color RGBA, non-interlaced","md5":"81cbdaddcdb099c51afbc1204a659c16","sha1":"b43a38adf2f6060989af3540d294a742032f35c8","sha256":"bc29473530be9824ae55c0c257c888aa3c9a9e57f3ab6aa7038ac23a7bfa68a9","sha512":"ada59cb53b76f526039a22f89003766e1558256adb8f15b2019f24ddd79e3d1cd21b01bacdf0a483ba5498cefe3cd04e2e458a5057bf41a3122c3e786d19abbf","ssdeep":"192:Pjw+rPKBqiFjjGRPfqdPDfbVnnxOryduCquf3PnJncFvhKmb:sAsJGRqJf5nok3nJcFvY6","tlshash":"43f19fcba9c6d183d45ccdb28a54a1dc789220f99bd92354393b53fac7a63b12c4c267","first_seen":"2026-08-28T20:26:16.267132Z","last_seen":"2026-08-28T20:38:53.901277Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grwbet.com/p3nngbe/api/send?t=604920309","fqdn":"grwbet.com","domain":"grwbet.com","tld":"com"},"ip":{"addr":"104.21.95.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grwbet.com/","date":"2026-08-28T20:38:22.812Z","timestamp":1787949502812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grwbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 18:35:33 GMT","end":"Wed, 14 Oct 2026 19:35:13 GMT"},"fingerprint":{"sha1":"9E:37:64:8D:6D:79:F9:C2:20:38:5F:B8:72:07:C6:CE:46:AA:33:AD","sha256":"D8:36:AC:81:DF:F3:5F:82:6A:36:B0:DD:8A:E1:28:EC:05:D8:65:1F:62:2F:6F:1A:27:BC:DB:C7:EB:3C:52:AB"}}},"request":{"raw":"POST /p3nngbe/api/send?t=604920309 HTTP/1.1\r\nHost: grwbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nx-umami-website-id: 8bb6d2a5-c3bb-415d-aace-d8d1d021664d\r\nx-umami-hostname: grwbet.com\r\nReferer: https://grwbet.com/\r\nContent-Length: 291\r\nOrigin: https://grwbet.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wpglobus-language-old=ff; wpglobus-language=ff\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":291,"data":"{\"type\":\"event\",\"payload\":{\"website\":\"8bb6d2a5-c3bb-415d-aace-d8d1d021664d\",\"screen\":\"1280x1024\",\"language\":\"en-US\",\"title\":\"Play Betgrw Casino for Canadian Players | Claim C$ 1500 Sign-Up Bonus | Quick Cashouts via Skrill\",\"hostname\":\"grwbet.com\",\"url\":\"https://grwbet.com/\",\"referrer\":\"\"}}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 20:38:23 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=leyQgFiW%2FoE2Pr%2FJswqeKnbpmlMitW1pe1905SoVoOz6I11w%2BlJwJpwDUvHoBBksVKFkFqPR27FkqhlJfCMCRE%2BIMT0MyOS58INiNv70IuQrra1csRAEXSvYRtSE\"}]}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3261e889a6d75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":439,"size_decoded":948,"mime_type":"application/json","magic":"JSON text data","md5":"6bb09f70649f196677504cb7a1493af8","sha1":"6b6ae8f2f3ea550b1311e9b82dfe79b75acb566f","sha256":"905d544870800a1af030206c8fc26cdba212ad746d6a74d121bccbe892bfb5ee","sha512":"e6e98c915383dfd64a2d8252183f22b80653204ba6ce8f4f68b176e527c0e2c2e0650b227da039e1ef18f28539be6a0a257d15ee3adcf340801c0b156df84d74","ssdeep":"","tlshash":"57f02361751b878c3105a9844e485b85cf79c1a2cbfb20f151e251248865dd73417290","first_seen":"2026-08-28T20:38:53.881024Z","last_seen":"2026-08-28T20:38:53.881024Z","times_seen":1,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"grwbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}