{"report_id":"8b14cd13-056f-4fc9-87ec-72422fb98b30","version":0,"status":"done","tags":[],"date":"2026-08-28T06:41:51Z","url":{"schema":"https","addr":"play-pokerdomt.makeup/","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":0,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"play-pokerdomt.makeup/","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"title":"Покердом скачать клиент, официальный сайт (зеркало), играть онлайн в приложении на компьютере","dom":{"size":89272,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856)","md5":"9f6894d77255cb6266a329a6c6c1e10b","sha1":"ddb165a47565dd2d27ee46c8dc467287c445abd6","sha256":"a77af1e33dd76612ee0c6d2e153b370308dd1073a5829385f6b5f2423f523a5b","sha512":"72801226270203d441442b85447924234ca70edaeac4b08358c218906e55ba09978ede01a56ace57c265ca744647b60f2dae814a4ec1df804aabc7d1e90f6365","ssdeep":"1536:15apBYquBQfgcOOOdsyR2ZB5TAXvt3bwA7s4uKhKwKzVERMxufOOmGLe8dAj+N5F:1Y/YquBDR2ZB5TAXvt3bD44uKhKwWVEx","tlshash":"ec938471908e68ee1206f11ad808be0d7daa45be7f67a71135bc287e77e1470c67a30d","dom_hash":"domhashea21602431992c8df61af0672de84cd6","first_seen":"2026-08-28T06:41:29.136977Z","last_seen":"2026-08-28T06:41:53.808917Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"play-pokerdomt.makeup/","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":0,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T06:41:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"play-pokerdomt.makeup","ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"domain_registered":"2026-08-24","domain_rank":0,"first_seen":"2026-08-28T06:41:25.433808Z","last_seen":"2026-08-28T06:41:25.433808Z","alert_count":42,"request_count":42,"received_data":861559,"sent_data":22342,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP:8.1.2","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"bun","description":"Bun is a fast JavaScript runtime compatible with Node.js and Deno.","website":"https://bun.sh","common_platform_enumeration":"","icon":"bun.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/themes/casino/assets/src/js/navigation.js?ver=20151215","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"49493316c090bb3d7cca5bc09031037c","sha1":"b77b6525d82691c3d4ca05948e846500ea0cb1d3","sha256":"fbc199bf7f97061c41664b040e84616a0cb54441a2efc5801d5d401d3a049f3c","sha512":"1fa1041574393c5693e1303cd1a3361d74c889060a8c13e3a9c7b37cfced7da28ba3e5866e7f59fe8f86d7d74b188305ad457943c1afb45e73fdb0971092aa67","ssdeep":"","tlshash":"c95103c67fcc333b52d6319665ae64ed363c9072da092c26bc79d540289086502befcd","size":2967,"data":"","first_seen":"2023-03-07T01:03:06Z","last_seen":"2026-08-28T11:35:54.967509Z","times_seen":9400,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"2078baee67384cae5426d48040e72711","sha1":"696cdbfdee711ffa512e8c810fcbf68f86329603","sha256":"b5259e15e69284c81dc986c7b2240c6d9d7f99106ed9f0642d8dc1133b471f4b","sha512":"7da444d3a667085442ecb421c0ccaf4bd2d6e12301b94b33b4d8b137ba0f45772944ab68125e03d539c061b93522a97c1225e12b37adcd3e7c9c1f001b1679ed","ssdeep":"","tlshash":"fe11c241f0ce2979725785b266549e8ea3ec4be002375c7cd085bc7c478e4b2528084e","size":936,"data":"","first_seen":"2026-08-28T06:41:29.189299Z","last_seen":"2026-08-28T06:41:53.836071Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"dbf57e824fb393ae37fc5bd2bfb5f53a","sha1":"a4f5a1559fde3ab3fb7f1fa196e32ccfa12f9ee4","sha256":"a5a1fe25679f9449f7d325b0dbc44ffe3d4d803c732ee5d3c4189b6ea8f03e55","sha512":"867214b4bf2ac00eb0a855462389bcdfe49964d556b909de306d157d05c71fd9a751fb0eeea7155921672cd6f449a300b6ae065fcc356347a35ca74140e8098d","ssdeep":"","tlshash":"84f0e1d53dcc003943b2017db7af654e351e59368a4a5e26fc0d88503f965fa04dbd9d","size":594,"data":"","first_seen":"2026-08-28T06:41:29.190474Z","last_seen":"2026-08-28T06:41:53.836626Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"7500d839d4478986ef1ef692f96779a5","sha1":"4eaf5cf3a0835b8bee82d734d1846635eeae6fa6","sha256":"0f476a9b6279e5a2ce2feb0e41a1f53606279549e154438907e7e18fde08e107","sha512":"9cb83405ca9d36ee799bbe0a4c3808c5f267243a0dcff2bb1553c4d5e62015512e80dbd0f0cf2eac1a3bcd2a87b5f8614bdf81e1f85accdb2f8ff3c113793fcc","ssdeep":"","tlshash":"8441b9b87831709895f3a026553f7303717a26619048c090c6b1dbd57cba7c2d3d7e0c","size":2173,"data":"","first_seen":"2023-12-11T11:11:22Z","last_seen":"2026-08-28T06:41:53.837172Z","times_seen":774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe66baa01263794826a0405a867d16a8","sha1":"8121987b3875ec4dcda7dc8cca3aab2af7b92bac","sha256":"1c86790f62702c928ba35c36d3755658a88ab639a0a5a33dd16143d71d314a15","sha512":"dcdd2ad1f1a14c5140dba222e4127d7029f4bf0bebea34b09b39c64bcb3376b5780b06a6732517d0ea16bccb1c75127982e584711d82984b5c9f603214b97674","ssdeep":"","tlshash":"87f0d4f6b6061d61802940f82f51dc3b4fdf9c57d82fc91451c4d192b559da8c0ff420","size":470,"data":"","first_seen":"2026-08-28T06:41:29.192218Z","last_seen":"2026-08-28T06:41:53.837648Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"a9fa4a49eb0b32d3acfb42e678c42435","sha1":"7d2b2d7e9f71ddcc1b867bb316087253aa122fef","sha256":"802b5e6bba044e654bac9975c97f5b3343b19f7ffea186dfa65db392d2097526","sha512":"1b66d67c0a562170d21925d49e6560d9b9edb387792e895418ec6fc4e942429e644f0de0a017b1f0b274af27ea2c981d5a8680328c5b68b2c393a10a9c08a39d","ssdeep":"","tlshash":"456186b5714e743b09638735512f720ba27b0a5864e9c0287836ece06f74f5ca0dbe2e","size":3407,"data":"","first_seen":"2026-07-05T04:23:44.242876Z","last_seen":"2026-08-28T06:41:53.838266Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"388722716c8c89af1136cef19a98017c","sha1":"50875c3734cfd73eb9856bef783de97dbb496dae","sha256":"d39b00bf80cd9591e726005002d8084407bdb41ce867ac0e70ede5b7a781c472","sha512":"758f2d3f006c02d444367695830968f8ab8f59a46489e76f4fd148bf4d33150189b5547b952756d53dccba74eb8138f18f26f4d11bc5842b7229335e715fa2ad","ssdeep":"","tlshash":"30319ad33267c01bbcbb2413237f531e352079267f40b562eee5886645b8e43266b69d","size":1628,"data":"","first_seen":"2023-03-07T01:07:32Z","last_seen":"2026-08-28T06:50:08.378961Z","times_seen":1069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"8cc3dfe80cdcf93b3bf65d522483e93f","sha1":"66a8c6cd99278a2b28d113dd600f0ef48f07c739","sha256":"baae8264dd0b62cda8bfa2bce0f58de3ac46044647c0c089c7e437385e4760ba","sha512":"4d1dcd318d34e7d66848dac7a8cf29ea5905fd5d56056336f8c68cd76393a401a8791a8256c68730269ba0a3d927366251521ee3b955a354e210f7642a9e6183","ssdeep":"","tlshash":"1b2100f33714ae338e6200ced87ca9cc57313b1aaa83e458b848d8d5125cd912cf25ed","size":1123,"data":"","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-08-28T06:50:08.379436Z","times_seen":1480,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fc548771e4f07315758fa0d7fcdfb8e","sha1":"e604fc7ee591e2acca69faa3c65fa8f6580256d6","sha256":"6dd332833f7efe66ba3515b70cfe5da99e4c1312a398eb16ef2806e98b930479","sha512":"80028dc2f82d5f7692bdd25c35c5e32c3c09087e634ad7aa92e85eca64d2393fe949f0d30c05fc5efd35252443a1bc3e4ef1c640488b11fb905ae3a894591e50","ssdeep":"","tlshash":"8ce0d8766000543a4bfed9afa402e35439343404b912b505445dd8752139fb36477bc4","size":365,"data":"","first_seen":"2026-02-12T10:33:14.362145Z","last_seen":"2026-08-28T06:50:08.379953Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/themes/casino/js/faq.js","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd3eeddcc3e69082e55cd285e05d118c","sha1":"e60d81a0a6e5c426696b56074898fd462d225da4","sha256":"c985a6a35540a5fcfead6299bc26eff0fb06ea8494c07098db8ec5953295987c","sha512":"9d6a7aa7fd960ee4114cd8f9686c96f650a8574e22401470b7e1266d1b7ba2079e67dffbf55ad4e5a672ff99a563d2777831055e13007666c8ee820dda5fdd0e","ssdeep":"","tlshash":"0ae0926aa67e21f0015bf22d0bdb5b40723100db274585267d7d8ca05fa9d4179e0af5","size":397,"data":"","first_seen":"2024-08-19T21:15:23.501805Z","last_seen":"2026-08-28T06:41:53.815821Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/themes/casino/js/modal.js?ver=5","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce39c0bf8cd85590ea612fb9ec9f121a","sha1":"bef919cf440a127c003e49ef24c8b74f39f190f9","sha256":"0315aacb383295a7f3509762f724a59accc64b063855e15f4c05c4d7fd40ee9a","sha512":"2c12d5ca9ed016ddeb7c732be64c2828d0ac4ae89abe706c3f09cc5b7b9e4a34b948fed66cf0257cb19343a5f26b7f01a6fb47fb5df99f3a54ea2c9c82fe7ff7","ssdeep":"192:HvRiW0U33KQBI3DOVme81EpEIntlomlDvz95Tj6ukE+0mSWwrQLxin:HQD06Mqg8Glvz9Jj6ukE+0mfo","tlshash":"4422955897ae51768097a496dbdfaa887af445abad07cc287c5c0bc40fc0c30d8d3bb5","size":10114,"data":"","first_seen":"2026-08-28T06:41:29.167232Z","last_seen":"2026-08-28T06:41:53.831588Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-28T11:39:47.594071Z","times_seen":1037335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/themes/casino/assets/src/js/bootstrap.js?ver=1","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"d810a38ca2781735a27cba0625a027db","sha1":"07da27bb41cf623acc959d70b9611d09c01fa5a5","sha256":"71577fb46a22fa031506bab9c5ddb4640e38ef10a1b4959a11288b41ce4b0757","sha512":"356bb6c9b2534f9f2808f00be067bdffc0866101e6772c4fa0be7329efdddafac250382e190c646c92d24e583a4092cb4ec9002496cc2f76ff6ca788350d3c0b","ssdeep":"1536:9je59VjjEz7iyJ4P1jODfNCmtZ1wuc5n/vNEqRFeGVbSZeV:E9Aib4DlcTZ1EqRp","tlshash":"51b3550a3ef920a2415bf03e8bdf500af774508b5909da047c5ca6d85fa4938936dbfd","size":115048,"data":"","first_seen":"2023-03-07T01:07:05Z","last_seen":"2026-08-28T11:44:02.53904Z","times_seen":4157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/themes/casino/assets/src/js/evtMobileMenu.js?ver=1","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5955b3414b35e5f0bc6c3deba0a9f408","sha1":"cb4085d048c4167403e5144b195d864e6edbbad5","sha256":"c54a704369cc4f951326436e301f2d7a306448a265490e6aef812030cf6c692b","sha512":"365b32dd762d94c4ec4b613c74965437818dca839646f52bf3ef0b362252f2dabe11e5f98b30c01c111ac9837c1d64b87d4c4e89669515dc7427536cb826c229","ssdeep":"96:IzXwnZCW49aHjlXPw39U6bOVVr6QT4RP/USiUSK+GHJTOUY:iAnZCW49aDRA9U6CVR6QT8/titKjJ6UY","tlshash":"78b1ec09b0f36173812b70aa6bef90087b65491f9609d919399ca7880f9153453fbffc","size":5565,"data":"","first_seen":"2025-11-13T10:05:31.891384Z","last_seen":"2026-08-28T06:41:53.82176Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/themes/casino/assets/src/js/main.js?ver=1","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"35033aa91a92b7fb8c6dc88b887f2189","sha1":"6b99cfc9dd2e900a751b13181555f36234d4a311","sha256":"83357e33e0db23e9d0d444ba39e50c55086dcb6878991ddee7758a6ae49118c0","sha512":"70d41c7d94569b2f47ac6aa3711fca7d4cf7e81b861385a8d5535df94c10c127a77d8c17f2858a872841cc5812645210ef93b6e2a4f458943dc5a8cd1de7ed15","ssdeep":"","tlshash":"6311c21cf368e251607f75781e2fae447379545b79434c04f85c4ce83fa5a7c5aa2c64","size":1046,"data":"","first_seen":"2025-11-13T10:05:31.948644Z","last_seen":"2026-08-28T06:41:53.819317Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/plugins/wp-rocket/assets/js/lazyload/16.1/lazyload.min.js","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"d18523e4a4aaa9420a86e4dddfb07554","sha1":"fa22a3d38dc3c87ca92f1456846682abeb696b96","sha256":"6e86a52a9858206302e32036d89907e3ac87762055e7f9c6364aec33221b3e41","sha512":"5290650d7a2a12b6c2bb65b0a46bfcee46d4058afdd0999d7bec1c7db5acd35038ac6a820e3dc2fd1d3dca50776e9a2690bb0476f63fd1746564cb7d7329ecf5","ssdeep":"192:hXVUD75/K/x4sGDkPq4rL6Z3jGXnxMXR5blzw7fu4:hFUx/KLG4qV3jGuB8u4","tlshash":"0af1ed0df95ab52e3d23b4b5531f120a773a244374434454a6ace6d4ae7c88f2963fbc","size":7890,"data":"","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-08-28T12:03:42.288429Z","times_seen":9502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/2021/05/booongo.png","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.616Z","timestamp":1787899282616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/booongo.png HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-a13\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2579,"size_decoded":2980,"mime_type":"image/png","magic":"PNG image data, 124 x 30, 8-bit colormap, non-interlaced","md5":"bb6d222c1ff9aa778371f3b53281abf0","sha1":"f56786616f30f7b9155cf0abdaedc33c4bd274f2","sha256":"bd55b89c78147ede4040d92937ff1b3599c45050ce2b560bb7e69b44dbc0d0da","sha512":"9bbc89490951c32640ff92577207bd30c1ca3641e07b6835c17b2803e43d9bb9c89f15caa14c33f33da978d05548cae5897bb318e0bfb0bf4d562de7b48a3783","ssdeep":"","tlshash":"9b513a81023166ec466849bc2f0f2d92cc3b437dcee0a24725190ab57f213227ee063f","first_seen":"2026-08-28T06:41:29.149564Z","last_seen":"2026-08-28T06:41:53.809888Z","times_seen":2,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/themes/casino/style.css?ver=6.8.8","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.572Z","timestamp":1787899282572,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/themes/casino/style.css?ver=6.8.8 HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Apr 2025 16:59:25 GMT\r\netag: W/\"67ed6ced-416d\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16749,"size_decoded":5481,"mime_type":"text/css","magic":"ASCII text","md5":"f36695058a118c955f0364268446bdf3","sha1":"ebfd0a7eccd9ba48b27a4590a2827f8ceaad1e2e","sha256":"1945d9b9470e13f1a0fbcb5712a0108656fb34481fb86e38573d772428c5b5c4","sha512":"06c65bebe5753e20890d6fd347ec9c8ca62881ab7c07b5cb883974d129a4370e1901a81eb4d23860e98cbf881481b6a4e247f2a51e1a6c4307c2b74739af4c58","ssdeep":"384:NHAQi7tBBRKc6JJhdCGGvmpkjhJkDfFdFRTjMCwtJzB/WND:NHUthKcYJhdCzvmpkjhJkDfFdFRTjMRM","tlshash":"8172a6f15fb01a009267c9397657fb46f31c8023821dadacb4e6521c9fc6799926ebcc","first_seen":"2026-08-28T06:41:29.176822Z","last_seen":"2026-08-28T06:41:53.810572Z","times_seen":2,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/themes/casino/assets/src/css/bootstrap.css?ver=6.8.8","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.574Z","timestamp":1787899282574,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/themes/casino/assets/src/css/bootstrap.css?ver=6.8.8 HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-2b120\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":176416,"size_decoded":31764,"mime_type":"text/css","magic":"ASCII text","md5":"4580e384c516484660576bb14970d96d","sha1":"317fdbe7f56cb064afeeb11039776a71b8e5656c","sha256":"3016d247f8f3ffe1ecb0de23c96e9a7c273ae0f2a9a1f83afd42ec4a14320b82","sha512":"d6b1902d3c225e5ff68b140dc4e6c60b549755a19dcea6eb9ffef8071c8586c3f2c612e5e91440132991cd32a37659c70f8ccd319a96c12aaad634258d2bf283","ssdeep":"1536:ifCs0pfwIaUJLLsqOrkz7eASzj7+QTzNk6qNvdOzDL4iDF4z:IIaU9VOzDL4iDF4z","tlshash":"b804645af9f11504306b866c22c6bbf57b7d8093c60eeeb679e32124cf4a7c54cb2949","first_seen":"2025-11-13T10:05:31.897872Z","last_seen":"2026-08-28T06:41:53.811342Z","times_seen":3,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/2023/06/igrat-v-brauzere.jpg","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.590Z","timestamp":1787899282590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/igrat-v-brauzere.jpg HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 09 Jun 2023 12:54:35 GMT\r\netag: W/\"6483210b-ea52\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59986,"size_decoded":59768,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3","md5":"4ba4c233e49966ccbafde3db7b0698f5","sha1":"7fa36d2f130dbaa515289dafc04071bbe4c13a5a","sha256":"0877e84dd3c0d1f4126717cc053f727d3a4aa371a2950a4a4243ca79553bdfa2","sha512":"91b937f6d7dce3501f0e1123b88e3f5b740a27c7ca38448f9856d202341b93931629e64881ae992c739d8af9af39368b17d65c6eb18ec5877e4a876298fc005d","ssdeep":"1536:koCf0vT7oc6SHxUE7atZCSUgWyYpkinraUw:TzXhRUEezxUNye+Uw","tlshash":"0b4302e6a77a08a1f4ff7e3114e42d13c2e55733911d28ea6ec41e243db717d1989a23","first_seen":"2026-08-28T06:41:29.177983Z","last_seen":"2026-08-28T06:41:53.812144Z","times_seen":2,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/2021/05/yggdrasil.png","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.619Z","timestamp":1787899282619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/yggdrasil.png HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-c14\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3092,"size_decoded":3443,"mime_type":"image/png","magic":"PNG image data, 149 x 30, 8-bit colormap, non-interlaced","md5":"4ba33e32dd07584d5951baa1432a242a","sha1":"ef3318ed1ae21b387433ff76591fc1880372a210","sha256":"a2dfe64c73a068632f76973fc4b428f3aca0801595a0ca267e5113f7fcbf274c","sha512":"e755fa32d03666c7bed8624d9b5f5f909b864d26cb250ba59e89657792887e886ea89600ae14666df36e9dcad3a1288e166dfd521dab5ed8e94a39f57f58fb19","ssdeep":"","tlshash":"f7518ed193c07598e817b3d3c4f091408339ad153dd5f06ed970fc12f72594a0059563","first_seen":"2026-08-28T06:41:29.181723Z","last_seen":"2026-08-28T06:41:53.812859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/2021/05/playson.png","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.623Z","timestamp":1787899282623,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/playson.png HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-93f\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2367,"size_decoded":2679,"mime_type":"image/png","magic":"PNG image data, 147 x 30, 8-bit colormap, non-interlaced","md5":"1abb267fbda6ebe120d70c322def3fa8","sha1":"fb713e3e8d939fbcda5cbb02bb21c0dab975cc0a","sha256":"e698ef624264846cd32708f2feead4dd349327775ec5ba3c10c7fcca541ec07a","sha512":"505fe1dc9ebd4eab996887d4092dea1dda674db5ac0ecf2dc353c8204ffdba5c156c28748069c332ceed863ee5aca2e42b558c61291aca4ecea7779ecd1e9bfd","ssdeep":"","tlshash":"174108b117c46cb616d6b7443e685eb0586262e449c84f5b100f8422738f7ba597d886","first_seen":"2026-08-28T06:41:29.188345Z","last_seen":"2026-08-28T06:41:53.813488Z","times_seen":2,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/2021/05/betsoft.png","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.624Z","timestamp":1787899282624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/betsoft.png HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-40f\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1039,"size_decoded":1362,"mime_type":"image/png","magic":"PNG image data, 98 x 36, 8-bit colormap, non-interlaced","md5":"ed870f05b8c2c4b2b9a0bf26b634667b","sha1":"e41df2e56997b69a6a8d4f4ac633f41a2fa5b65d","sha256":"441bf2db706f3556b1448beb264c741ccdcfd5b084f533adac6cc3b4f38224b0","sha512":"5c192cae3591876416195e6e0f6b87e6fa224175177c95b3500e5fa5bc9ba0ee7aed171fd52e601bb86294cc76020f7f9c461b9b29a77490b7fcfef9f8e7f072","ssdeep":"","tlshash":"411175c85e1b8daa4c19441584c318d0511c1e9bbea75adb4b48b75b8533459226c113","first_seen":"2026-08-28T06:41:29.156176Z","last_seen":"2026-08-28T06:41:53.814093Z","times_seen":2,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/themes/casino/assets/src/css/font-awesome/css/font-awesome.css?ver=6.8.8","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.576Z","timestamp":1787899282576,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/themes/casino/assets/src/css/font-awesome/css/font-awesome.css?ver=6.8.8 HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-a9b\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2715,"size_decoded":1509,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"b2471369cb4f4c0c18baa95d84c5666b","sha1":"91c3ae2bc6a21f5ba2b28dd9f93f2e8d7cc6b579","sha256":"3d033795734046ec9b1932132ab9543272b030ee331fbdd4cd9a627c9d7be2c3","sha512":"7c7adc111dbf38a01b274eece5430608ea63d4b58b3c577aa581b2e3ec0298bd00b224a0fdeebff23a3b9b449757b73f137b8772cd8035c92f3abc5ebc27824b","ssdeep":"","tlshash":"fd5121f94aca20820bd1e88737c7b6641b2df21e6801dc91e19a169cdfde76513c53cc","first_seen":"2025-11-13T10:05:31.88267Z","last_seen":"2026-08-28T06:41:53.81473Z","times_seen":3,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/themes/casino/assets/src/js/bootstrap.js?ver=1","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.581Z","timestamp":1787899282581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/themes/casino/assets/src/js/bootstrap.js?ver=1 HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-1c168\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":115048,"size_decoded":27455,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (315)","md5":"d810a38ca2781735a27cba0625a027db","sha1":"07da27bb41cf623acc959d70b9611d09c01fa5a5","sha256":"71577fb46a22fa031506bab9c5ddb4640e38ef10a1b4959a11288b41ce4b0757","sha512":"356bb6c9b2534f9f2808f00be067bdffc0866101e6772c4fa0be7329efdddafac250382e190c646c92d24e583a4092cb4ec9002496cc2f76ff6ca788350d3c0b","ssdeep":"1536:9je59VjjEz7iyJ4P1jODfNCmtZ1wuc5n/vNEqRFeGVbSZeV:E9Aib4DlcTZ1EqRp","tlshash":"51b3550a3ef920a2415bf03e8bdf500af774508b5909da047c5ca6d85fa4938936dbfd","first_seen":"2023-03-07T01:07:05Z","last_seen":"2026-08-28T11:44:02.53904Z","times_seen":4157,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/themes/casino/js/faq.js","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.595Z","timestamp":1787899282595,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/themes/casino/js/faq.js HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-18d\"\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":397,"size_decoded":665,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"cd3eeddcc3e69082e55cd285e05d118c","sha1":"e60d81a0a6e5c426696b56074898fd462d225da4","sha256":"c985a6a35540a5fcfead6299bc26eff0fb06ea8494c07098db8ec5953295987c","sha512":"9d6a7aa7fd960ee4114cd8f9686c96f650a8574e22401470b7e1266d1b7ba2079e67dffbf55ad4e5a672ff99a563d2777831055e13007666c8ee820dda5fdd0e","ssdeep":"","tlshash":"0ae0926aa67e21f0015bf22d0bdb5b40723100db274585267d7d8ca05fa9d4179e0af5","first_seen":"2024-08-19T21:15:23.501805Z","last_seen":"2026-08-28T06:41:53.815821Z","times_seen":46,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/2022/10/logo.png","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.605Z","timestamp":1787899282605,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/2022/10/logo.png HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-1179\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4473,"size_decoded":4694,"mime_type":"image/png","magic":"PNG image data, 334 x 64, 8-bit colormap, non-interlaced","md5":"430f73bf4b3d02317ef18a0629683d26","sha1":"57412f5b99fd2fcefa9b097077fe400d3a2726d9","sha256":"e316cf5a234d065b5746e59c5b6e715e5b82db1af9b18a0d88171eb251474f62","sha512":"ba2a467f6c344598b8c2148df27985d56093492caabdd5d39a1211ee841df4cb4e5e285a06cc4946e6d53f63e6e750a846728939e5c4b204185c819952aeb38d","ssdeep":"96:T/e6/0oUkq26QiKNv9KttYXsZH4eqbNB0tCzilWibC:is0oW6iK9ctYXsABpWMp","tlshash":"93917dcaa28232c0c75a52e526573090bc011c742ba716c3e76073be38fc1e7b9db115","first_seen":"2025-03-07T04:32:47.497824Z","last_seen":"2026-08-28T06:50:08.366205Z","times_seen":14,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/2023/06/na-android.jpg","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.608Z","timestamp":1787899282608,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/na-android.jpg HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 09 Jun 2023 11:09:56 GMT\r\netag: W/\"64830884-9e7c\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40572,"size_decoded":40886,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3","md5":"4b007652fa6daa98b7fbf217c8b11224","sha1":"2fbdb8930858d17065b7cbc3cebd5f42c50242ea","sha256":"66f665a3c6aafe9606cfa5a9745b15f0d9e5610c8d44c577d795b3b566fe2055","sha512":"92d083d108c333b11a3d252af8e1b6756c3ac5c1344a089e5e369f327630734db16fe6d08af203337b43f9f919858275072a22bdc465bbe7aebb7c02c004f97d","ssdeep":"768:qFfcMsyueHslokFU7k10V+VO//kZ9kxMWYFaPMGLsp7062eB++j+NdxpvkTD:qiMspGkGO0V+VE/oDubLG2eBidnuD","tlshash":"8103e1322b92dff4f81bcf2958d30e166bd0c97227eefe6b6658552c03c96841662385","first_seen":"2026-08-28T06:41:29.179181Z","last_seen":"2026-08-28T06:41:53.816774Z","times_seen":2,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/2021/05/elk.png","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.611Z","timestamp":1787899282611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/elk.png HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-8b4\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2228,"size_decoded":2591,"mime_type":"image/png","magic":"PNG image data, 77 x 30, 8-bit colormap, non-interlaced","md5":"de2e1db0f3e5dbe5c56638a198da5ddf","sha1":"a062ad93672766ded527c0b3aeb0622415d645be","sha256":"54ac8b9b821581303ee8318cd6399175de65fcca9e746e0eb3fa57e63baa7228","sha512":"e691587daa5e4066a5a619792859311de9669c19072c2fd79c53a2b7376e7497cc7457ba6c35cf3909cfee7244814c3bf5464d18854f5597fd99c494a825fadf","ssdeep":"","tlshash":"ac41f69443f3cda9e136a9cb7000a2e6e92f4f308aa2eb079c1e79a14039000802636e","first_seen":"2026-08-28T06:41:29.187236Z","last_seen":"2026-08-28T06:41:53.8174Z","times_seen":2,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/2021/05/evolution.png","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.621Z","timestamp":1787899282621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/evolution.png HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-eb1\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3761,"size_decoded":3857,"mime_type":"image/png","magic":"PNG image data, 233 x 30, 8-bit colormap, non-interlaced","md5":"1247a959a99cf0c4114bbdd4c7940073","sha1":"157d98f089ebf5bc90dd74d59ac446283dcb1f90","sha256":"81b54c3d623bff06fee0fd0fec2c7282aa0dc8b745c05c5a4b3f1af7d716a463","sha512":"a2098e024aa71cb6a076f349932f470b532784d8bf387f1e8fdc3cd04b701102927dc79d400d51dc6ba9b17368319f8d71edd875c01b0c67420e8ebe4490af36","ssdeep":"","tlshash":"4b715bb3936d862cc2071722219c086978af9d751c68738d1d0ab7f03fb62d7f61067a","first_seen":"2026-08-28T06:41:29.168302Z","last_seen":"2026-08-28T06:41:53.818008Z","times_seen":2,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/themes/casino/assets/src/css/font-awesome/font/fontello.woff2?87000125","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.970Z","timestamp":1787899282970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/themes/casino/assets/src/css/font-awesome/font/fontello.woff2?87000125 HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/wp-content/themes/casino/assets/src/css/font-awesome/css/font-awesome.css?ver=6.8.8\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:23 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 5408\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: \"6448035a-1520\"\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5408,"size_decoded":5801,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5408, version 1.0","md5":"4609f9985b1798e15a0dd4e596fd0bd9","sha1":"577e9d70dde0aa2bdc15dbcee2d4023228ca0774","sha256":"a9fc2dcdca40467b78a28bb9c3978332ca9ac3162bd0834911df2cc3810768bf","sha512":"dc3d306026875392f50ee7848a2a6bdcb812ce45f270e8d496356637a7be9c4c554a30d0adf6fed319a2f26b9cefc805735bb7678bed7d8db14b31c7a4135b1a","ssdeep":"96:Bd/Ij9TRKGdwXllG8fZvao1dBIiiEcy2mdfLrjIwHZVXDYoQK:7Qj9Tb8hSEFnXf/bzXDfR","tlshash":"9eb18f1cf3516ccdd42c82315d4ad0ad6ee420a22d8f9b35ca4985344eb9329e43b65c","first_seen":"2025-11-13T10:05:31.965928Z","last_seen":"2026-08-28T06:41:53.818649Z","times_seen":5,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/themes/casino/assets/src/js/main.js?ver=1","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.588Z","timestamp":1787899282588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/themes/casino/assets/src/js/main.js?ver=1 HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-416\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1046,"size_decoded":919,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"35033aa91a92b7fb8c6dc88b887f2189","sha1":"6b99cfc9dd2e900a751b13181555f36234d4a311","sha256":"83357e33e0db23e9d0d444ba39e50c55086dcb6878991ddee7758a6ae49118c0","sha512":"70d41c7d94569b2f47ac6aa3711fca7d4cf7e81b861385a8d5535df94c10c127a77d8c17f2858a872841cc5812645210ef93b6e2a4f458943dc5a8cd1de7ed15","ssdeep":"","tlshash":"6311c21cf368e251607f75781e2fae447379545b79434c04f85c4ce83fa5a7c5aa2c64","first_seen":"2025-11-13T10:05:31.948644Z","last_seen":"2026-08-28T06:41:53.819317Z","times_seen":3,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/2021/05/amatic.png","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.614Z","timestamp":1787899282614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/amatic.png HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-9cf\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2511,"size_decoded":2912,"mime_type":"image/png","magic":"PNG image data, 99 x 30, 8-bit colormap, non-interlaced","md5":"c3eb5334b6ecb851dd91d38cfa6017b3","sha1":"658f2a0972194066ffd5eb066fc5243adca288ad","sha256":"5dfd9c113f5973e4c35249aa783d7eac10c853efee11dfe019d8217b50e34737","sha512":"d9a51ecdf420a0bd9a7702729d8ecdf3f13dc915ca4f7d2dd9b62ae7ca9e28c5a994397d93bbbe8f407792b07243f493119733f3d45c26a6735a663f3fe369b3","ssdeep":"","tlshash":"b7517b0ab5ca8ab6d0a323f7a565ab2ca046835f901a121dbbc73e44bd08013714a2de","first_seen":"2026-08-28T06:41:29.161344Z","last_seen":"2026-08-28T06:41:53.819993Z","times_seen":2,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/themes/casino/css/modal.css?ver=6.8.8","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.578Z","timestamp":1787899282578,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/themes/casino/css/modal.css?ver=6.8.8 HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 27 Nov 2024 12:39:33 GMT\r\netag: W/\"67471305-fd6\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4054,"size_decoded":1937,"mime_type":"text/css","magic":"ASCII text, with very long lines (482)","md5":"3927e7fcfb5695907da7a08243f4290c","sha1":"a8658d2db95b5074c25d01e3949a3996edb7c23c","sha256":"08200465d2b52ea82278fcc27664e4060d87c13c2a29ca2570106cc923efec0a","sha512":"b9b686fe25ad10044615e47c39b9bdbe286ba3499219d2585ebd66fddc39bcb30c6c564bc740c1d0086ffa2ac2934d1fdb5ed0576ce60ac8548d0baf0acb5716","ssdeep":"","tlshash":"9d81006189376105b80ed49aafe5e649131c8057f106cdbc7bcd769ccfc7218c1a6bad","first_seen":"2025-11-05T02:44:25.991866Z","last_seen":"2026-08-28T06:50:08.364043Z","times_seen":9,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.580Z","timestamp":1787899282580,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 04 Jul 2024 08:05:08 GMT\r\netag: W/\"668657b4-15601\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":35841,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-28T11:39:47.594071Z","times_seen":1037335,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/themes/casino/assets/src/js/evtMobileMenu.js?ver=1","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.583Z","timestamp":1787899282583,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/themes/casino/assets/src/js/evtMobileMenu.js?ver=1 HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-15bd\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5565,"size_decoded":2238,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"5955b3414b35e5f0bc6c3deba0a9f408","sha1":"cb4085d048c4167403e5144b195d864e6edbbad5","sha256":"c54a704369cc4f951326436e301f2d7a306448a265490e6aef812030cf6c692b","sha512":"365b32dd762d94c4ec4b613c74965437818dca839646f52bf3ef0b362252f2dabe11e5f98b30c01c111ac9837c1d64b87d4c4e89669515dc7427536cb826c229","ssdeep":"96:IzXwnZCW49aHjlXPw39U6bOVVr6QT4RP/USiUSK+GHJTOUY:iAnZCW49aDRA9U6CVR6QT8/titKjJ6UY","tlshash":"78b1ec09b0f36173812b70aa6bef90087b65491f9609d919399ca7880f9153453fbffc","first_seen":"2025-11-13T10:05:31.891384Z","last_seen":"2026-08-28T06:41:53.82176Z","times_seen":3,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/2023/06/promokody.jpg","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.606Z","timestamp":1787899282606,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/promokody.jpg HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 09 Jun 2023 11:34:54 GMT\r\netag: W/\"64830e5e-8313\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33555,"size_decoded":33693,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3","md5":"eae2cc1836b9266260bf27764e454243","sha1":"62ce11c377c937bf7b2bfa6dbef0233444544f36","sha256":"a249fb84485024e5b2eee85435cb769106db3f33686c8132f67a1f02afec9efd","sha512":"ebc24567f91aa133f202eaa559e1902266d6cb1127d72784e542ce13277debe7ca32dd1fb1c0e7c65ff3131b5312835aa8f4a688e1f2291467cbcd8f7276fb73","ssdeep":"768:KxviP32A2wG6VfTY9y5/EhSihGTxTqD/Uj7rU/s5ck8RI1pRkZC2fiEP:7P3pLYGcSzVTyUj7rUk5cFm2fiG","tlshash":"85e2f17320d051d6fe1dad74fc590808abb0cedf7e79c75ed4a149b488547042e970a3","first_seen":"2026-08-28T06:41:29.1708Z","last_seen":"2026-08-28T06:41:53.822364Z","times_seen":2,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/2023/06/skachat-na-ajfon.jpg","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.608Z","timestamp":1787899282608,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/skachat-na-ajfon.jpg HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 05 Jun 2023 13:07:23 GMT\r\netag: W/\"647dde0b-9e54\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40532,"size_decoded":40739,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3","md5":"9f4da26ec762bb166cb3e2f495a97d45","sha1":"5347585eab6161965e598cd8034839b14d1dec9c","sha256":"c6a02aef7eecb5533afe93856bc95fb699df5c334d9ecdf166b66e2942f13ea8","sha512":"aa1cef4e3b9d9aac34c01aaf34abb7ede4efea8c2b9026add8e47309b69d5daf8a2d7b381c102c0655e797f972b6fc4158c6c0144d50e30bc7a6570499938c82","ssdeep":"768:alUkhZT3Yybq5TIoAVcdi3/bAfvukcOOc9Ujl+SIQav4yPhC2oKQteR:C7Xbq29gi3/aW2Oc9Yl+G8beO","tlshash":"1503f114f35f34d43237b4aa553c1b1b6a525a20dead537e7d486e5238ab2ef33e9400","first_seen":"2026-08-28T06:41:29.180281Z","last_seen":"2026-08-28T06:41:53.822956Z","times_seen":2,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/2021/05/belatra.png","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.609Z","timestamp":1787899282609,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/belatra.png HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-959\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2393,"size_decoded":2687,"mime_type":"image/png","magic":"PNG image data, 88 x 27, 8-bit colormap, non-interlaced","md5":"807ad626e9fc314cd4da5da4b542ca8d","sha1":"1629670a83ffca8cc1cb54919a2b3853adbb71e6","sha256":"3d79320f8c3984e1d2dcf8536c1ffb9674410b05203ec0654554eeb9e140a4fe","sha512":"82f9afb115d8582de3c55af0d18da5ac3d8cc1b09b1668f2dea5f98d1bf9e0b291907bad5c7f5cf38470c6478ebbe6a5b59c23531c0201065b72a998819aa4a7","ssdeep":"","tlshash":"54413bf8db52244d0740a481d08a720a9d194d9e7939924f09cc302b1ffda0fe49a7aa","first_seen":"2026-08-28T06:41:29.160453Z","last_seen":"2026-08-28T06:41:53.823535Z","times_seen":2,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/2021/05/rabcat.png","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.621Z","timestamp":1787899282621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/rabcat.png HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-4f4\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1268,"size_decoded":1669,"mime_type":"image/png","magic":"PNG image data, 114 x 36, 8-bit colormap, non-interlaced","md5":"9d66f5b58b3642e44c6fd26f755a9f4d","sha1":"247e8c64933031638d2d4997e1861429f0099f55","sha256":"77e216a1d08fe0252d693241f3eade1ff38237e7510035dfc00c90b2f03627dd","sha512":"46cb8af09866739c34b11f72a98e94180fad3b04f2ed952e61bc0d4b08ef7030ddbea3a6823bc11aabfa8350b09e262aa5c287377177b05aa1dd643ad292e66e","ssdeep":"","tlshash":"af21b7d04e544cce5da9d190ce2a48c5d69e251b7a341c77b4805c425c4f695ea6cf0e","first_seen":"2026-08-28T06:41:29.174005Z","last_seen":"2026-08-28T06:41:53.824289Z","times_seen":2,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/fbrfg/apple-touch-icon.png","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:23.165Z","timestamp":1787899283165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/fbrfg/apple-touch-icon.png HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Apr 2023 16:50:58 GMT\r\netag: W/\"644804f2-4ffb\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20475,"size_decoded":20787,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"acbd71ae8848e5d45fcd32c18fd3bebe","sha1":"8a85495063da78735d4babc226c33b6e99056745","sha256":"4ddfa24c392e38a4b6bcb4ddbc4e6a9dc0e95412af9d2bb5d8aadede834168e3","sha512":"8af2a1206f294f4252a24535e28ebeeeb9094090602161d3e2f14434ef7ac03b5d6c8aa106a97b71e22f3106387d7c4963b02f54108018e163801786eb730439","ssdeep":"384:47O7O7O7O7O7O7luU3PsMcoUws0o8NiKANvLNbXhudTOVbF75AN7YGVdh7kB5qQo:ISSSSSSUSPFnUws0ob5LNbReaF4Zdhkq","tlshash":"cc92e1e2509b0cdfcae8501bc206e08fe63ca04c6774a1bf7989f7396d24ec59f4a641","first_seen":"2026-08-28T06:41:29.182842Z","last_seen":"2026-08-28T06:41:53.82491Z","times_seen":2,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T06:41:21.882Z","timestamp":1787899281882,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.1.2-1ubuntu2.25\r\ncache-control: max-age=0\r\nexpires: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP:8.1.2","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"bun","description":"Bun is a fast JavaScript runtime compatible with Node.js and Deno.","website":"https://bun.sh","common_platform_enumeration":"","icon":"bun.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]}],"data":{"size":89208,"size_decoded":23696,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856)","md5":"60d77fb2cd2bfb8a7266e0ed1596fe00","sha1":"1d95f9a26d28405a8b8d2354a5f14d624cfb3b73","sha256":"307833bff6eed8e1132898852da76e92dff28b7d0720f881a749386ee83c08a5","sha512":"cb62a3446ea243ad38105f702ccd126e55228eecca5fa6c286169549eceffbb17984fcfdd2581a1c74bc7d1307b79198435f768f5727a602466a9b8d8c06e76f","ssdeep":"1536:hYapEgYquBQfgXOOOdhqR2ZB5TAXvt3bwA7s4uKhKwF+QCmMxufOOmGLe8dAj+Nh:hX9YquBRR2ZB5TAXvt3bD44uKhKwoQCe","tlshash":"e6938471909d68ee1206f11ad808be0d7daa45be7f67a71131bc2c7e77e1470c67a309","first_seen":"2026-08-28T06:41:29.175089Z","last_seen":"2026-08-28T06:41:53.825543Z","times_seen":2,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":6,"connect":48,"send":0,"wait":300,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/2021/05/playngo.png","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.615Z","timestamp":1787899282615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/playngo.png HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-ad9\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2777,"size_decoded":3178,"mime_type":"image/png","magic":"PNG image data, 108 x 30, 8-bit colormap, non-interlaced","md5":"54bec36496b56962bb84c9c49eda057b","sha1":"96e730f7b0046cbdc57120590f8c003b3d7f5073","sha256":"9c0950981090039f7583c8957e22d5845e1e5e3f51aab93d4ca8eceac3ae08cd","sha512":"72784d59fb30ee2fc8ca135ba0884b00d4b1c474b15346f932534a16896e13cf0e6ce51273b4453ac94ecd61b4932d4f3a49d7f0d6e95dc9ced53a6c09442646","ssdeep":"","tlshash":"72515e0ea2980d859de87a27046db577d4fdfe5410053696b080f5f45f01af9ef5e0b0","first_seen":"2026-08-28T06:41:29.172722Z","last_seen":"2026-08-28T06:41:53.826158Z","times_seen":2,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/fbrfg/favicon-16x16.png","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:23.166Z","timestamp":1787899283166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/fbrfg/favicon-16x16.png HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Apr 2023 16:50:58 GMT\r\netag: W/\"644804f2-55f\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1375,"size_decoded":1694,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"71ea82d44bf0bbf7950ec68ca8751384","sha1":"9ef2964a21d797a5cd49549dbe596a9623279429","sha256":"42efe30ef8c918a522d9de3c07a85967c09f602a0e04ddd07207bebdb1f95820","sha512":"406e1d2f072651b3f91b8c2c9fe63edf3fce8091924d0a20a5702f46bf51c9c5334a15911aef481d20e448b5c99f1c5888ed13832450edf10c47a3d980fe3849","ssdeep":"","tlshash":"6721d5d7e22d0d11ccca63f382baa1893a37c1542adf8ca6a91ce10c0c38304b1633ce","first_seen":"2026-08-28T06:41:29.142356Z","last_seen":"2026-08-28T06:41:53.826711Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/themes/casino/assets/src/css/main.css?ver=6.8.8","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.577Z","timestamp":1787899282577,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/themes/casino/assets/src/css/main.css?ver=6.8.8 HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 May 2026 21:31:02 GMT\r\netag: W/\"6a0e2816-6726\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26406,"size_decoded":7660,"mime_type":"text/css","magic":"ASCII text","md5":"e93e7f0a8b758591d7b536165ed27ccb","sha1":"b5a4276fbfba2c4bf5e209ea734ce31026a013d8","sha256":"5dfbb4e6d7792f0f333411aec39353d9443d34f1e99378f08c85582b8f1a00b5","sha512":"0cc694979582014cba3f916678c06eb55bbec6be150cff7a520e2a600fa79e1c74e08e2e1e7573aa0d788f0290103ea4f89123c51329e9b0721edebaefbcae8b","ssdeep":"384:7JFxO38rQ5kz6qkO7K7bH4BmDnjK6DeV6u4IYkH:7fxO38rQ5kz6qkOAHKsDWVZH","tlshash":"1ac2a8a2b6913204b027913ae2d36b2933384013e64fedf977e96564df8a1d911b3b4d","first_seen":"2026-08-28T06:41:29.166069Z","last_seen":"2026-08-28T06:41:53.827318Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/plugins/wp-rocket/assets/js/lazyload/16.1/lazyload.min.js","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.599Z","timestamp":1787899282599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/plugins/wp-rocket/assets/js/lazyload/16.1/lazyload.min.js HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 25 Apr 2023 16:44:11 GMT\r\netag: W/\"6448035b-1ed2\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7890,"size_decoded":3410,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7889)","md5":"d18523e4a4aaa9420a86e4dddfb07554","sha1":"fa22a3d38dc3c87ca92f1456846682abeb696b96","sha256":"6e86a52a9858206302e32036d89907e3ac87762055e7f9c6364aec33221b3e41","sha512":"5290650d7a2a12b6c2bb65b0a46bfcee46d4058afdd0999d7bec1c7db5acd35038ac6a820e3dc2fd1d3dca50776e9a2690bb0476f63fd1746564cb7d7329ecf5","ssdeep":"192:hXVUD75/K/x4sGDkPq4rL6Z3jGXnxMXR5blzw7fu4:hFUx/KLG4qV3jGuB8u4","tlshash":"0af1ed0df95ab52e3d23b4b5531f120a773a244374434454a6ace6d4ae7c88f2963fbc","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-08-28T12:03:42.288429Z","times_seen":9502,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/2023/04/bonus.jpg","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.606Z","timestamp":1787899282606,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/2023/04/bonus.jpg HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 25 Apr 2023 17:06:34 GMT\r\netag: W/\"6448089a-b433\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46131,"size_decoded":46160,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1160x320, components 3","md5":"5225a134d97a27ad87cdf52ec72407fa","sha1":"04fe66d7c6ce9f8d499be4bf157746ed9fa5d341","sha256":"b4f71df5ffeee3cda577a2d265b4591d65d22c005ae623efa6a3a95230d54f0d","sha512":"43150c6beb658832dbcce76005207f2a13d24258b4bf44a2d386f58edd5e3f9d7ba873f78fb981f0ba957e9280b19bd835c61e8d681a0564830e8d137246b15e","ssdeep":"768:uhxhAwdzZ17iN38thVG/VZidLnPqw1+Rw8Rli+rGIj0pxF7+PFhvAsvObr1Sfh6Q:6Jdz8CqMPT+RLRli++N+PvAsvOX1SfkQ","tlshash":"1623f15d7e5cd110d46ecdb11af25ba70eaaebdd849db12fd991c048c3e2cc41812afa","first_seen":"2025-10-30T13:31:19.802435Z","last_seen":"2026-08-28T06:50:08.361385Z","times_seen":7,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/2021/05/endorphina.png","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.610Z","timestamp":1787899282610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/endorphina.png HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-a69\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2665,"size_decoded":2956,"mime_type":"image/png","magic":"PNG image data, 198 x 48, 8-bit colormap, non-interlaced","md5":"fe8d70bc6ccbd0a9eb93fe2f3db334a4","sha1":"c8d0fb53f1e46d942f4c3540c103adef00bd6999","sha256":"1082fe735beb2e2b1bc26af1f0563e642f84565bd77db2bcab4253098a64dc06","sha512":"379122c8bca6a17263ca868d825dd2d294616963c7b78f4ff93d64cac0efa7a0f2a0b38e8dceb6e3e737526efc78354f8bdd05d93269f56e98e28ee875ba6cbd","ssdeep":"","tlshash":"c7511ace137d793599681451a0ba729a1d9ecec99487ff653c3378331c740435523437","first_seen":"2026-08-28T06:41:29.171796Z","last_seen":"2026-08-28T06:41:53.829303Z","times_seen":2,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/2021/05/blueprint.png","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.613Z","timestamp":1787899282613,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/blueprint.png HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-c16\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3094,"size_decoded":3396,"mime_type":"image/png","magic":"PNG image data, 128 x 30, 8-bit colormap, non-interlaced","md5":"3554155fa267e1d9f99b7eef22018c32","sha1":"f29e4c59e51fc5f2063ab2491efb10587b9425a5","sha256":"872289ef0e01eb448c0a559477e9ac8d5407e1486aec462a1d62a054efef68f7","sha512":"bcbf70a5b3ff56f1dc409a0628671344ff3fd563fb26a4781bcf988595e5dbe6acf98a3aeb032963340320d5141523cac9499de66c91363924c4d862ada4624a","ssdeep":"","tlshash":"51512c91a862df4c741cf212d21a337d984ade43b75d791d55abfc630f3594945c42c8","first_seen":"2026-08-28T06:41:29.163417Z","last_seen":"2026-08-28T06:41:53.829876Z","times_seen":2,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/2021/05/netent.png","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.618Z","timestamp":1787899282618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/netent.png HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-77b\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1915,"size_decoded":2295,"mime_type":"image/png","magic":"PNG image data, 84 x 30, 8-bit colormap, non-interlaced","md5":"10ff91f14ddc9b14f02eff3748c87ee7","sha1":"d90147fb1150b32742af53016837d755d06754b6","sha256":"94cec152b09672b56c364e4fd985100fb5ea0b00284954475ed0772b334bf993","sha512":"86d71665a18f52b24bf17349c11f5fafd81f53db39381b31991d035ccde2b9f0302a82935f808333a7ae3cee7e57f8ca5d3f870ad305438b01963de1e9d11f37","ssdeep":"","tlshash":"0a411b07f5d5e538c8d0a322e5cae11898720ecac8035078e3c07f17a7709db41a567b","first_seen":"2026-08-28T06:41:29.15079Z","last_seen":"2026-08-28T06:41:53.830327Z","times_seen":2,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/plugins/casinos/assets/front/casino.css?ver=2.2.1","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.571Z","timestamp":1787899282571,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/plugins/casinos/assets/front/casino.css?ver=2.2.1 HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 May 2026 21:06:36 GMT\r\netag: W/\"6a0e225c-1258\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4696,"size_decoded":1902,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"376f4434b7aeb288f73e56eae0e2532e","sha1":"735a53d8e38a39ff8ef9731f36dbf6f5aabb2a7c","sha256":"436e38640293c227c6abaca3cc212ba50dcc58e304e0f4ed51b6f08c32b5bca0","sha512":"713c705e27ba169de4e20ee96d4ac216bdf00da32583037cf1e017b48928ce5470335491f6c5951859c0b5711aba39b83c48b12fa96ff28ec6c0073e8ba0d9f4","ssdeep":"96:L39fPkLehkAb6sL3gJem8dP+pVO7Nd/+eVGaVYrXQ65ir8OnUVW0V9m:j9XkLwBJL3gJF8dPLgeVGaCU64J++","tlshash":"27a1cb5218132644751b9cfc5ffa3b04411ca007920ee8797fcdb24ecfca1a965b6bad","first_seen":"2025-10-19T14:59:36.926837Z","last_seen":"2026-08-28T06:50:08.358026Z","times_seen":29,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/themes/casino/js/modal.js?ver=5","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.597Z","timestamp":1787899282597,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/themes/casino/js/modal.js?ver=5 HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 27 Nov 2024 12:40:10 GMT\r\netag: W/\"6747132a-2782\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10114,"size_decoded":4626,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2035)","md5":"ce39c0bf8cd85590ea612fb9ec9f121a","sha1":"bef919cf440a127c003e49ef24c8b74f39f190f9","sha256":"0315aacb383295a7f3509762f724a59accc64b063855e15f4c05c4d7fd40ee9a","sha512":"2c12d5ca9ed016ddeb7c732be64c2828d0ac4ae89abe706c3f09cc5b7b9e4a34b948fed66cf0257cb19343a5f26b7f01a6fb47fb5df99f3a54ea2c9c82fe7ff7","ssdeep":"192:HvRiW0U33KQBI3DOVme81EpEIntlomlDvz95Tj6ukE+0mSWwrQLxin:HQD06Mqg8Glvz9Jj6ukE+0mfo","tlshash":"4422955897ae51768097a496dbdfaa887af445abad07cc287c5c0bc40fc0c30d8d3bb5","first_seen":"2026-08-28T06:41:29.167232Z","last_seen":"2026-08-28T06:41:53.831588Z","times_seen":2,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/2021/05/quickspin.png","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.614Z","timestamp":1787899282614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/quickspin.png HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-c12\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3090,"size_decoded":3459,"mime_type":"image/png","magic":"PNG image data, 124 x 30, 8-bit colormap, non-interlaced","md5":"4b0ca0552dfaa617b35ab23d7d05e906","sha1":"c516a1615a2e767791d2051009f2609747e4365f","sha256":"824a71b17f05e1e45c071a9c88395e7dff1221e9eec57dff8f281deabd704746","sha512":"7ec890f1015033daa35bea53bf464a0375be02f1797494e520a2c8af1d7bbbf47ed4077be4d8ee00f3b215415e6a12776db2c08bfbe9c97bae1dea7cd95d79ed","ssdeep":"","tlshash":"2e513bea589edafc09e6d0ca093099849c17c28904ac160b78b6f899f5c4a7a2714d16","first_seen":"2026-08-28T06:41:29.154112Z","last_seen":"2026-08-28T06:41:53.832248Z","times_seen":2,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/2021/05/habanero.png","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.620Z","timestamp":1787899282620,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/habanero.png HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-985\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2437,"size_decoded":2580,"mime_type":"image/png","magic":"PNG image data, 146 x 30, 8-bit colormap, non-interlaced","md5":"6929dc9063f16ed0aeeb6d65f46b5e33","sha1":"3b7de787173c046e973b1d916947f5933347b525","sha256":"6d1f6cc775b51a36c5bcc2c0fcc2a231169f0c3c6afbf117009693edf36d34f4","sha512":"036b656e4745162e7c4265b6cd673ce3273ef9debdab3db26baf68f3a6b4382361242189845152201bae66c34ef248dbb8726b85a7390f4588e0797d68811f79","ssdeep":"","tlshash":"29412b7b6e5cdc92ca554531c4202088f4e84e489324625bbefefd182e7dba91c60ca9","first_seen":"2026-08-28T06:41:29.15514Z","last_seen":"2026-08-28T06:41:53.832836Z","times_seen":2,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/2021/05/booming.png","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.622Z","timestamp":1787899282622,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/booming.png HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 1022\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: \"6448035a-3fe\"\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1022,"size_decoded":1413,"mime_type":"image/png","magic":"PNG image data, 63 x 22, 8-bit colormap, non-interlaced","md5":"5aa9340f633119579e98c60f808036f6","sha1":"ce9d8531d5871f0706d6ebc8d05a5dcfa4f0797c","sha256":"2c7deed202d69b982e4ffa9a2b6a6d68d36da8a08124986b4b2339db1c208717","sha512":"7b8a81c34d5d8acfbab7694bc52a26c29de37ca2f929887c904d407057e56365237806bd9bb24f2c9db8dcdd0db9d0a67af48a7d4d8d60a2866ba46aaea9d790","ssdeep":"","tlshash":"7b113ea4fba9786ed3ad135f0390e314b52e0c1a5910d5816e7e7b1a8a7caa44f0075a","first_seen":"2026-08-28T06:41:29.162383Z","last_seen":"2026-08-28T06:41:53.833496Z","times_seen":2,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/themes/casino/css/faq.css?ver=6.8.8","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.594Z","timestamp":1787899282594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/themes/casino/css/faq.css?ver=6.8.8 HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-43a\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1082,"size_decoded":858,"mime_type":"text/css","magic":"ASCII text","md5":"42fbe5cdb2f2bfea2f02b69c2f9454e6","sha1":"f4c5e25a3098f9bbde26f28f2ea0fd0bc99f130a","sha256":"c028f829753f87c5bec36c31b485fd68392734b81af7113663aa7733398379e0","sha512":"873c5d32bb46e3757d13e4df83b0fcfb7af2198b45619d453666f4c938dbe9a4100e81a1b04ef969193a1708b1d4c81ab7d9f4f54e2d6bdc9ec613de287353b2","ssdeep":"","tlshash":"1511ad9da9271980b56bf1c49fda032b12388203ab46ed6dbfb750458fcc2ecd443a06","first_seen":"2026-08-28T06:41:29.164486Z","last_seen":"2026-08-28T06:41:53.834167Z","times_seen":2,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/themes/casino/assets/src/js/navigation.js?ver=20151215","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.597Z","timestamp":1787899282597,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/themes/casino/assets/src/js/navigation.js?ver=20151215 HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-b97\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2967,"size_decoded":1580,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"49493316c090bb3d7cca5bc09031037c","sha1":"b77b6525d82691c3d4ca05948e846500ea0cb1d3","sha256":"fbc199bf7f97061c41664b040e84616a0cb54441a2efc5801d5d401d3a049f3c","sha512":"1fa1041574393c5693e1303cd1a3361d74c889060a8c13e3a9c7b37cfced7da28ba3e5866e7f59fe8f86d7d74b188305ad457943c1afb45e73fdb0971092aa67","ssdeep":"","tlshash":"c95103c67fcc333b52d6319665ae64ed363c9072da092c26bc79d540289086502befcd","first_seen":"2023-03-07T01:03:06Z","last_seen":"2026-08-28T11:35:54.967509Z","times_seen":9400,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-pokerdomt.makeup/wp-content/uploads/2021/05/redtiger.png","fqdn":"play-pokerdomt.makeup","domain":"play-pokerdomt.makeup","tld":"makeup"},"ip":{"addr":"185.82.217.168","port":443,"asn":59729,"as":"Green Floid LLC","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-pokerdomt.makeup/","date":"2026-08-28T06:41:22.612Z","timestamp":1787899282612,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-pokerdomt.makeup","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 20:54:34 GMT","end":"Sun, 22 Nov 2026 20:54:33 GMT"},"fingerprint":{"sha1":"AD:BB:62:0C:66:2C:7F:D1:40:9E:01:15:A5:83:2B:1F:E8:24:57:70","sha256":"01:51:C5:26:C3:B7:4C:B9:3D:41:C6:A5:9C:44:A3:DC:44:C2:6E:84:B9:71:55:2B:31:66:3D:BF:AA:53:3F:91"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/redtiger.png HTTP/1.1\r\nHost: play-pokerdomt.makeup\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-pokerdomt.makeup/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 06:41:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 25 Apr 2023 16:44:10 GMT\r\netag: W/\"6448035a-b52\"\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2898,"size_decoded":3063,"mime_type":"image/png","magic":"PNG image data, 158 x 30, 8-bit colormap, non-interlaced","md5":"c66788e3cbf715c21eafc4d753a86b0f","sha1":"4dcf423fad0a432e0c5df92cecd1ea952b33ad52","sha256":"3cc6c982351ca8b0df858caeb8da0c674c88c617f5c0371ed021fbd572f48302","sha512":"242116ae6536c448666d9f14fa9fc3a4eb0e04f1c13a0bb6ba0a08c25629d82df2902ac619b81a2e8564974d00db6095e4f2ff9b8bbdea130b191a4b0699f34d","ssdeep":"","tlshash":"65513ae634b23d97789b942d96ac3353c55247063c862ef4f7b1200a90fe62ee0bdd48","first_seen":"2026-08-28T06:41:29.152755Z","last_seen":"2026-08-28T06:41:53.835251Z","times_seen":2,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"play-pokerdomt.makeup","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}