{"report_id":"a7b582e4-2eca-4474-9ac5-0583af71b6dc","version":0,"status":"done","tags":[],"date":"2026-08-09T10:18:20Z","url":{"schema":"http","addr":"ethereumbetting-au.com/","fqdn":"ethereumbetting-au.com","domain":"ethereumbetting-au.com","tld":"com"},"ip":{"addr":"172.67.212.79","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ethereumbetting-au.com/","fqdn":"ethereumbetting-au.com","domain":"ethereumbetting-au.com","tld":"com"},"title":"Ethereum Betting in 2026: Complete Guide to ETH Sportsbooks | EtherStake","dom":{"size":129466,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8832)","md5":"9acb86bc2a43e2ebd4b1cf4d944509e8","sha1":"f6d659d28c4fe11f4d4c7b580ffcc07b5450c5f7","sha256":"ee7893379e2014cdf246adf380f282a89388484e04b7735d36e51021f0272efa","sha512":"bc9a1285c9f627e1a421d70eb71eb7733f707360b9de96253c8bfb7b2858557ae13f214ca1b4d0efc08f0d5bc025c21a7e374e27f5397e4d2c12c57b51ca7cc2","ssdeep":"1536:fypiChxMdpY0GEg1dOjZ7aN63erNC9EaJK:qbsi0rgjIZYfrNpaJK","tlshash":"dfc33b3561f001bf02eb818877db730a7b51e01bda0695a573bd428d1fc3da9aab365c","dom_hash":"domhash5c5ac666d89334259626288008de6c32","first_seen":"2026-08-09T10:18:22.155992Z","last_seen":"2026-08-09T10:18:22.155992Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ethereumbetting-au.com/","fqdn":"ethereumbetting-au.com","domain":"ethereumbetting-au.com","tld":"com"},"ip":{"addr":"172.67.212.79","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-13T10:18:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"scopedatastream.com","ip":{"addr":"72.60.134.85","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"domain_registered":"2026-03-11","domain_rank":0,"first_seen":"2026-05-30T22:16:08.255723Z","last_seen":"2026-08-08T08:39:51.643622Z","alert_count":0,"request_count":5,"received_data":34291,"sent_data":3030,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ethereumbetting-au.com","ip":{"addr":"172.67.212.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-28","domain_rank":0,"first_seen":"2026-08-09T10:04:38.812138Z","last_seen":"2026-08-09T10:04:38.812138Z","alert_count":15,"request_count":15,"received_data":459248,"sent_data":7851,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress:6.9.6","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ethereumbetting-au.com/wp-content/themes/eumbetti/assets/js/header.js?ver=1777167436","fqdn":"ethereumbetting-au.com","domain":"ethereumbetting-au.com","tld":"com"},"ip":{"addr":"172.67.212.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d59a194bb9692c9ee1e97d15f8b6a8eb","sha1":"47853dd0a667ff2303193ebe318579320e5292e7","sha256":"498d5a490bbf9aa7413c993f6c104119a909c0b00303d68888e190bfce4ed9b9","sha512":"b7fa4cfbb09d7081ab9d2e51eb22a8149e913418a07fae5b59c1b20040b402dbeea0f98ac657d2c4cff933af0e2c85cc9ebf3cdc187f1a00ea209b5b1a777106","ssdeep":"192:utjuXk/U8cU8KtoyBkciRbiaqZN+/IUqfZ6ErgBtC3viQ5KafTcwElC7KvFviF47:UB/U9UdtoFciRbiaI+AUEZ6WgB43a6fu","tlshash":"b632957b3250253744e31af7e1eea6a4bf69008bb942c456746dcd8d1f66c4306bacb8","size":11859,"data":"","first_seen":"2026-08-09T10:04:42.768061Z","last_seen":"2026-08-09T10:18:22.165472Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting-au.com/tc-brands-js-after","fqdn":"ethereumbetting-au.com","domain":"ethereumbetting-au.com","tld":"com"},"ip":{"addr":"172.67.212.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"756d28895c78e0ca43952e2535e91b15","sha1":"0ebf48df0fbb1383eacef863c9c71008bb4ee873","sha256":"54094e4e18315bae6d814e1493a89e487a7b84e70a73617414063890d29633d3","sha512":"2cad63a590c5427385adfeafbbd78f17eedd3afd98ad701356d398ddaacb56290d9797db8c3709ce77f618f5869e528a6eee883769e424acc12d16e60b4f5c99","ssdeep":"384:k9wFrxcQA27Kmb8DVDo1RZzLtIyu+gRfk:k9wRxcEU4ZzLanS","tlshash":"3fe29438c1e110bf41a780b927cb7615b221b117e946d9887b7cd7821fe3da4a9b379c","size":32819,"data":"","first_seen":"2026-08-09T10:04:42.778487Z","last_seen":"2026-08-09T10:18:22.172296Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting-au.com/","fqdn":"ethereumbetting-au.com","domain":"ethereumbetting-au.com","tld":"com"},"ip":{"addr":"172.67.212.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e89011000c91c17949b706bb00d4cdf","sha1":"5131ce895d53c719a64f761c7310f26a2ec0bf50","sha256":"d737e8e3f5fbdc959dcae767ceaa9d8895c24ac2d02b97a44bb5e5e485148723","sha512":"bdb4d61840d5b7a18f24a2c378ebac2e58fa85145692ccbe7d26f937cb028d644903d169c59653824a1a3f446afbbb2eab4355a29773ecaf6e0756db197d0ff7","ssdeep":"384:U9wFrxcQA27Kmb8DVDo1RZzLtIyu+gRfa:U9wRxcEU4ZzLanI","tlshash":"15e2a43811f210bf41a7809927cb7619b221b117ed46d9887b7cd7821fe3da4a9b379c","size":31692,"data":"","first_seen":"2026-08-09T10:04:42.779818Z","last_seen":"2026-08-09T10:18:22.173124Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting-au.com/","fqdn":"ethereumbetting-au.com","domain":"ethereumbetting-au.com","tld":"com"},"ip":{"addr":"172.67.212.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e82204f668a0e0c0a37f132d1abb700","sha1":"5b14f2f71c6f44a7a5bcbc384b0bf0da395e2c7c","sha256":"2d95d44003d29cdbadf98e04f584cfb0807c5a7734a981259c9802bfd6736772","sha512":"849c6f1ff3561426ba487a734df2bcddb2eab998879185b04af2a11db1ea27141f98b2b0ace06889d77ee7a46cc330b296bb347c603c7796adeadeb1ffca2988","ssdeep":"","tlshash":"65f0ab3b6661143640bfc369b35bb349321a185f118588053e5cc7440f50a6790e0bc8","size":474,"data":"","first_seen":"2026-08-09T10:04:42.781586Z","last_seen":"2026-08-09T10:18:22.173706Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"scopedatastream.com/storage/brands/logos/tSlF7qmlNPJDX3BlB1U3KrWB5YXgHaCRdxibmWHR.webp","fqdn":"scopedatastream.com","domain":"scopedatastream.com","tld":"com"},"ip":{"addr":"72.60.134.85","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbetting-au.com/","date":"2026-08-09T10:17:51.343Z","timestamp":1786270671343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scopedatastream.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 02:14:44 GMT","end":"Fri, 09 Oct 2026 02:14:43 GMT"},"fingerprint":{"sha1":"46:81:82:E9:BE:4F:6F:95:79:F3:8C:89:30:C5:54:0C:12:63:F3:81","sha256":"C8:21:9B:39:03:E1:F2:D6:EC:53:CB:72:DA:6A:0B:36:1C:9D:6A:87:F0:16:5F:41:61:46:F7:BA:75:54:86:0D"}}},"request":{"raw":"GET /storage/brands/logos/tSlF7qmlNPJDX3BlB1U3KrWB5YXgHaCRdxibmWHR.webp HTTP/1.1\r\nHost: scopedatastream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbetting-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.2\r\ndate: Sun, 09 Aug 2026 10:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13030\r\nlast-modified: Thu, 25 Jun 2026 13:15:36 GMT\r\netag: \"6a3d29f8-32e6\"\r\nexpires: Mon, 09 Aug 2027 10:17:51 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13030,"size_decoded":13412,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"994f9a3703e59c4b6b729d70182b1658","sha1":"31fd4c760a4e2f094036b150de13a87a869fe185","sha256":"703431f32a335e8318a4fdfc934e6af888753d433e2fb1068f01c8fde75810ee","sha512":"14d5bce8fa1034ba86f14c2ecdff872c7b9d8b97b7687482f24bf4f045ca3426337ccfa409f21c62ec143fdf0da7682ab36622e5007f30c0cde9832b7884e050","ssdeep":"96:XElbw+ibfxWah1BaERuu2kYZCuVK8bOf18dpThuG/Os+rLG6cE6+D3Fsev/DhBw:Kw/Xg3Xvrb+8dlL/f+rLjB9ThBw","tlshash":"61429e788fe66165f406427dc28b4ac4e23462988445db95986982772f094cf682cfcf","first_seen":"2026-08-08T08:39:54.454396Z","last_seen":"2026-08-09T10:18:22.157099Z","times_seen":3,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":21,"receive":19,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scopedatastream.com/storage/brands/logos/CPzryXXPkROWYTBvjLMG9iOcTzIULNnssB9uw7SN.webp","fqdn":"scopedatastream.com","domain":"scopedatastream.com","tld":"com"},"ip":{"addr":"72.60.134.85","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbetting-au.com/","date":"2026-08-09T10:17:51.345Z","timestamp":1786270671345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scopedatastream.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 02:14:44 GMT","end":"Fri, 09 Oct 2026 02:14:43 GMT"},"fingerprint":{"sha1":"46:81:82:E9:BE:4F:6F:95:79:F3:8C:89:30:C5:54:0C:12:63:F3:81","sha256":"C8:21:9B:39:03:E1:F2:D6:EC:53:CB:72:DA:6A:0B:36:1C:9D:6A:87:F0:16:5F:41:61:46:F7:BA:75:54:86:0D"}}},"request":{"raw":"GET /storage/brands/logos/CPzryXXPkROWYTBvjLMG9iOcTzIULNnssB9uw7SN.webp HTTP/1.1\r\nHost: scopedatastream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbetting-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.2\r\ndate: Sun, 09 Aug 2026 10:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5058\r\nlast-modified: Thu, 06 Aug 2026 16:45:47 GMT\r\netag: \"6a74ba3b-13c2\"\r\nexpires: Mon, 09 Aug 2027 10:17:51 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5058,"size_decoded":5439,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c9344b9a44e982eaab20edf3472288b3","sha1":"79497564ac1f43481973f5161cdff6b633c8e07f","sha256":"d3db0415ec480af017235aff7524971f65219dc6b9c7ba0cb6db2b9778cfedd7","sha512":"6b312104d6f53aaeba091b92fe18adce171a99597610fae9bdddcc9d7afd0a3f8d8b07a2d5f37e47711ef9a8657d0b9e588caa5ef9284b78457b6feb5b90378c","ssdeep":"96:6Elbw+iX+KVU34Sixxl0Vdrw9FpCDIe7hAKFLKhQ:fwT+KVtLl0jknQ2wLEQ","tlshash":"7ea16b2a7fb5ef88d901b2301829139ff2b83e6ac958da05d340b8467240dc61cc6fd7","first_seen":"2026-08-08T08:39:54.424225Z","last_seen":"2026-08-09T10:18:22.157966Z","times_seen":3,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":41,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting-au.com/wp-content/plugins/GEO/style-4.css?ver=5.9.5","fqdn":"ethereumbetting-au.com","domain":"ethereumbetting-au.com","tld":"com"},"ip":{"addr":"172.67.212.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumbetting-au.com/","date":"2026-08-09T10:17:50.647Z","timestamp":1786270670647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 20:36:42 GMT","end":"Thu, 24 Sep 2026 20:36:41 GMT"},"fingerprint":{"sha1":"00:D3:9C:40:FB:81:D5:A2:8F:D3:B3:4F:F7:6F:84:74:04:8F:80:28","sha256":"8A:26:EF:7C:AE:CB:F0:E8:8D:B7:4B:A7:50:E1:04:56:E8:00:EA:D9:DF:1C:E4:A5:15:0B:4A:E6:4A:63:47:22"}}},"request":{"raw":"GET /wp-content/plugins/GEO/style-4.css?ver=5.9.5 HTTP/1.1\r\nHost: ethereumbetting-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbetting-au.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:17:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 06 Aug 2026 22:56:10 GMT\r\netag: W/\"6a75110a-dfcc\"\r\nexpires: Mon, 09 Aug 2027 10:04:09 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 820\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kgsRO6vCiZo5AiRhMdtp4jIuhwmvXzN%2FwampXLJWnUVv7Wkjpeim5uyfxVhni06%2FIf4ZCzY71sGfmlA16OV5mZiblU8vypnkR5v%2FRl4Vskh5kCVbWAtpoF%2BhrHl%2BTHp7B1mbZxXhxOWX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a286036b8e3156a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57292,"size_decoded":9393,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"c2ee5e1a13269298050ed449d60850d5","sha1":"40feb62c06dd8b7b57d4687551c23497d77ff1f2","sha256":"9ece3913981d117d68ef45dd2643a108d57c0fbb487171b413a63937cfec6549","sha512":"42f8c8291a5e69aa1599ea06b98735f1ba4b973e9bff918294f43249892f5954016b63555e28a38d777c2a952a6ba951d40f1246d135170845fb44f5d4510a89","ssdeep":"768:qREKydn1RbiVAJBZL6yUizP3JprnRrScpFHnq81XYlXuj6dvQ05nQP7oQlRver:qREKyd+","tlshash":"b643c95ae60211567437ef789fb36e5ae7965013c70281a97ecc62d00fb4368caa1fdc","first_seen":"2026-07-15T18:57:52.235699Z","last_seen":"2026-08-09T10:18:22.15869Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting-au.com/wp-content/themes/eumbetti/style.css?ver=1.0.0","fqdn":"ethereumbetting-au.com","domain":"ethereumbetting-au.com","tld":"com"},"ip":{"addr":"172.67.212.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumbetting-au.com/","date":"2026-08-09T10:17:50.651Z","timestamp":1786270670651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 20:36:42 GMT","end":"Thu, 24 Sep 2026 20:36:41 GMT"},"fingerprint":{"sha1":"00:D3:9C:40:FB:81:D5:A2:8F:D3:B3:4F:F7:6F:84:74:04:8F:80:28","sha256":"8A:26:EF:7C:AE:CB:F0:E8:8D:B7:4B:A7:50:E1:04:56:E8:00:EA:D9:DF:1C:E4:A5:15:0B:4A:E6:4A:63:47:22"}}},"request":{"raw":"GET /wp-content/themes/eumbetti/style.css?ver=1.0.0 HTTP/1.1\r\nHost: ethereumbetting-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbetting-au.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:17:50 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 03 May 2026 10:27:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 09 Aug 2027 10:04:09 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iWJ2tF8H%2FvzaValj4FWffYXr6Wxla774s7XC0WGoehri1n5jkLAfqGh3b20VK%2BJcB93QsdgL5RSKkdfRpkbDtRH2rczQ1hPdr1eeVpova1TFahuxdO7ASrG1Y6cWeChOGH5TIQhRw6Zl\"}]}\r\nage: 820\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69f7231c-41\"\r\ncf-ray: a286036b9e3356a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":838,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"757d3895959390eca366d696f5b585b9","sha1":"aea11151930a0f4c50e4674462770b0610999e42","sha256":"16b33edb60ed60b7909673f9539cc26db723ecac7941b9b5c7dd6c9ba11d36f0","sha512":"22d2d8e0d31a5dd7965daea4785e96f1a6d858225e5274fa8320df70f15a34ae903d8ec689ed4a291cf16b6813191f8bc6a6d5acd3acb3c3c2b31e28aac8af1e","ssdeep":"","tlshash":"a1a0024d8806ec344c972bf2de7d62a412705300f0624966dbff171977501d9aca5d10","first_seen":"2026-08-09T10:04:42.751666Z","last_seen":"2026-08-09T10:18:22.159521Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting-au.com/wp-content/themes/eumbetti/min-styles.css?ver=1777807522","fqdn":"ethereumbetting-au.com","domain":"ethereumbetting-au.com","tld":"com"},"ip":{"addr":"172.67.212.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumbetting-au.com/","date":"2026-08-09T10:17:50.654Z","timestamp":1786270670654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 20:36:42 GMT","end":"Thu, 24 Sep 2026 20:36:41 GMT"},"fingerprint":{"sha1":"00:D3:9C:40:FB:81:D5:A2:8F:D3:B3:4F:F7:6F:84:74:04:8F:80:28","sha256":"8A:26:EF:7C:AE:CB:F0:E8:8D:B7:4B:A7:50:E1:04:56:E8:00:EA:D9:DF:1C:E4:A5:15:0B:4A:E6:4A:63:47:22"}}},"request":{"raw":"GET /wp-content/themes/eumbetti/min-styles.css?ver=1777807522 HTTP/1.1\r\nHost: ethereumbetting-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbetting-au.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:17:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 03 May 2026 11:25:22 GMT\r\netag: W/\"69f730a2-5795\"\r\nexpires: Mon, 09 Aug 2027 10:04:09 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 820\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dGljnS3R5v%2FsoH8KmIM4F7lZ3G%2BT%2Fr5DY7b1gFBAAIBbbT1holSG8KTT%2BTdfa1PkXnSZTHTVruYKz43VKGrG7IkYzd9MsY5bCPd4leBflHQ0yxxFbpEEgu0JgqDzhK1cCHZ0QkwV9Xtv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a286036b9e3556a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22421,"size_decoded":5499,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (22419), with no line terminators","md5":"35efaff83e69aad8effcdff53c351e2f","sha1":"c816c5839d61cb7b74be31720ffdf70ecd550f99","sha256":"0b51cdb190688025905664b91e2d9b1af32b93a348c993740df65957473fe052","sha512":"e27299e2dc1b3d5e4cce660682ed8f1b679df10851a10c06e11f0f1d4fca1f051984b66202f22157c908340507b26badd68faabd5d5c885db4a03f9437e52857","ssdeep":"192:RqoqM1oh0G0KmZYL75nIY9qzFONylNBwC+2j1c6EM1A0LUM:Rqoo90havqz0NytwC+2j1ciUM","tlshash":"f8a2a46af60061baee3bd53a23d4e6dc2014f864d95643edfe43c505c8c77f31aa2a49","first_seen":"2026-08-09T10:04:42.773754Z","last_seen":"2026-08-09T10:18:22.160412Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting-au.com/wp-content/uploads/logo.webp","fqdn":"ethereumbetting-au.com","domain":"ethereumbetting-au.com","tld":"com"},"ip":{"addr":"172.67.212.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ethereumbetting-au.com/","date":"2026-08-09T10:17:50.657Z","timestamp":1786270670657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 20:36:42 GMT","end":"Thu, 24 Sep 2026 20:36:41 GMT"},"fingerprint":{"sha1":"00:D3:9C:40:FB:81:D5:A2:8F:D3:B3:4F:F7:6F:84:74:04:8F:80:28","sha256":"8A:26:EF:7C:AE:CB:F0:E8:8D:B7:4B:A7:50:E1:04:56:E8:00:EA:D9:DF:1C:E4:A5:15:0B:4A:E6:4A:63:47:22"}}},"request":{"raw":"GET /wp-content/uploads/logo.webp HTTP/1.1\r\nHost: ethereumbetting-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbetting-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:17:50 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 03 May 2026 10:29:37 GMT\r\netag: \"69f72391-238e\"\r\nexpires: Mon, 09 Aug 2027 10:04:09 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W2a6zMPpoKfKSb6%2Fj0kDSJYeSk4Ad8ParEAvrFURHFXNZBuWrI8ppUZ0HDNGKRjpWUgGGZ2H%2BWUWsXbkVUU8ponPbevsYaFOPi2%2FMgfqTHw4%2FTN4DMhAzxm4NNrX288WrljjcmJpf%2Fmg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\ncf-ray: a286036b9e3656a2-OSL\r\ncontent-length: 9102\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9102,"size_decoded":9898,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"55b2a514a5319b0e19c73e29027ac073","sha1":"84ab0937972c146c4b5bd5a86fb1cfb0df82c58c","sha256":"1e0945c58cbbd68750e8e7ef88cddf91d8953a69407d181462642fdbde134e51","sha512":"dadb5af5a2ed186aa1a204572dd0fc082038283386964b9dbfb6dc4bdb8e614be018b2f5770337805b1283435f81896921819300779cd0765c54c416401fc999","ssdeep":"192:nW3hveB9Kcmcv2KSmMYHJecbdIT4JE579ISuckuJH3kj:nWeBEzcv2K8cb0IDuSj","tlshash":"fa12aec5388e0f2bc10c48fcc895c04f9a17b3a2c7e7449b5ec9f91d2d2ef11561a898","first_seen":"2026-08-09T10:04:42.753375Z","last_seen":"2026-08-09T10:18:22.161155Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting-au.com/wp-content/plugins/GEO/flags/no.svg","fqdn":"ethereumbetting-au.com","domain":"ethereumbetting-au.com","tld":"com"},"ip":{"addr":"172.67.212.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereumbetting-au.com/","date":"2026-08-09T10:17:50.753Z","timestamp":1786270670753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 20:36:42 GMT","end":"Thu, 24 Sep 2026 20:36:41 GMT"},"fingerprint":{"sha1":"00:D3:9C:40:FB:81:D5:A2:8F:D3:B3:4F:F7:6F:84:74:04:8F:80:28","sha256":"8A:26:EF:7C:AE:CB:F0:E8:8D:B7:4B:A7:50:E1:04:56:E8:00:EA:D9:DF:1C:E4:A5:15:0B:4A:E6:4A:63:47:22"}}},"request":{"raw":"GET /wp-content/plugins/GEO/flags/no.svg HTTP/1.1\r\nHost: ethereumbetting-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbetting-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:17:50 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\nlast-modified: Thu, 06 Aug 2026 22:56:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 09 Aug 2027 10:04:09 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WKjCDYN0rW3al58Ti%2BUfODj7bMeOavqR5ex4fxCqa7i1unUt%2Bg%2FeEmZiXQCyDSafvcOhHb5byMLuCo8WtyMuudJgLYpwa29NdDiiRdWz7WfzCqjVOo1Uv0xoRgAEseh2AMlrkmOYWyhP\"}]}\r\nage: 820\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a75110a-f3\"\r\ncf-ray: a286036c3e4156a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":243,"size_decoded":940,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d91702a1c191c9c9acf42155cc180342","sha1":"dd40260a4d78ca62c1ee53938c65d1ee744405c4","sha256":"24aea913a6dee250a7d34a85ecc449169ebb51b7bca3e93e8c7d0484ee5dedb8","sha512":"eb4202ca50018030a777b5bcfa20937d383e046e7a84d7e5a81e6429ba47563ca9e99b190f882ffcdf763bd046c5c5ab662827b349d44ae2d7078f957e7bdde6","ssdeep":"","tlshash":"e8d05edae67d74189c0943b0af6c61a240f1309a501911d9f9942704724d7ab6ce4ad0","first_seen":"2023-05-09T15:04:24Z","last_seen":"2026-08-09T10:18:22.162191Z","times_seen":4789,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting-au.com/wp-content/uploads/favicon-150x150.png","fqdn":"ethereumbetting-au.com","domain":"ethereumbetting-au.com","tld":"com"},"ip":{"addr":"172.67.212.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbetting-au.com/","date":"2026-08-09T10:17:50.784Z","timestamp":1786270670784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 20:36:42 GMT","end":"Thu, 24 Sep 2026 20:36:41 GMT"},"fingerprint":{"sha1":"00:D3:9C:40:FB:81:D5:A2:8F:D3:B3:4F:F7:6F:84:74:04:8F:80:28","sha256":"8A:26:EF:7C:AE:CB:F0:E8:8D:B7:4B:A7:50:E1:04:56:E8:00:EA:D9:DF:1C:E4:A5:15:0B:4A:E6:4A:63:47:22"}}},"request":{"raw":"GET /wp-content/uploads/favicon-150x150.png HTTP/1.1\r\nHost: ethereumbetting-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbetting-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:17:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 03 May 2026 10:29:36 GMT\r\netag: W/\"69f72390-d7b\"\r\nexpires: Mon, 09 Aug 2027 10:04:10 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 820\r\npriority: u=6,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SDuLpszak9SDFdcIkIT2O6PKglWv5wYLAojudq2rWeGeS8ftAexwL8XzzBAoB89vV1s4DMOPFbHxa0yW9DHXuxlolmlFf3qHqIyVFGGSbqRcg9u4Yt3pKqBftDXkYcr4zgiO%2FXk988CZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a286036c6e4356a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3451,"size_decoded":4273,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"0a8e9f46ea62860c6434304ca49d2b97","sha1":"b10b97ef287fb2b5793666c9ea6e7607c4429e34","sha256":"02f1f9eba6e57ec376994210f45bfea668f0b04b0caf382b50a99d45e2740008","sha512":"f8343eb415c5691236b8b04b4601783c1ed26c41e4c510d12b65e7bedd6965e1b2f5641a869bde5db389da5e3ee677203e8a205f65bb48deaae590252fb8f467","ssdeep":"","tlshash":"ee614d60f76428aceeaf9269480a6efcc0035aef462f2d18d19b9831145950d3378de6","first_seen":"2026-08-09T10:04:42.777158Z","last_seen":"2026-08-09T10:18:22.162681Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting-au.com/wp-content/plugins/GEO/banner/banner6-gambling-hor.webp","fqdn":"ethereumbetting-au.com","domain":"ethereumbetting-au.com","tld":"com"},"ip":{"addr":"172.67.212.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbetting-au.com/","date":"2026-08-09T10:17:51.125Z","timestamp":1786270671125,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 20:36:42 GMT","end":"Thu, 24 Sep 2026 20:36:41 GMT"},"fingerprint":{"sha1":"00:D3:9C:40:FB:81:D5:A2:8F:D3:B3:4F:F7:6F:84:74:04:8F:80:28","sha256":"8A:26:EF:7C:AE:CB:F0:E8:8D:B7:4B:A7:50:E1:04:56:E8:00:EA:D9:DF:1C:E4:A5:15:0B:4A:E6:4A:63:47:22"}}},"request":{"raw":"GET /wp-content/plugins/GEO/banner/banner6-gambling-hor.webp HTTP/1.1\r\nHost: ethereumbetting-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbetting-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:17:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 06 Aug 2026 22:56:10 GMT\r\netag: \"6a75110a-10336\"\r\nexpires: Mon, 09 Aug 2027 10:17:51 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9UGtb5nuWKDg3mpnp0hawSHd22U1pZSoNg7iKOgf6QgjdlcNs3vjNO7D0niI5tGT3JoPrjMdk4Py6xcBsb0u6aC03IzWGlWGOe2wn4Fzm%2BN4v1R48GeBM%2BM7xDuFvmoYh08iRC%2FVHSnR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a286036e8e5256a2-OSL\r\ncontent-length: 66358\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66358,"size_decoded":67143,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"263af9f073dbe39397b4acd45faf14fd","sha1":"5ed59f156bbe0a06f9bbff207251783e1c207fb9","sha256":"aad5884f7fddf2fc6e76c3bda28dfc42c03391ef21714d81b8bd17f035154a2f","sha512":"7c7e00c5a30cc6ea6f73a1408ca26b043a88491f66cd0343fb4648efbf7df5cfd8397541c50927b07a475aeb9b2bdc71d9fa99a52b4736f69c956a8a3fcd88bc","ssdeep":"1536:yY0LmqMuGb3O7FRE9jwONt3JAfXwEO2Ne6L2CNr7:2KGGN9itkVC5","tlshash":"ec53010d6240e33cf21bd6310de1730ad302a36936afe7561f515da15ab02fb2e3666b","first_seen":"2026-08-09T10:18:22.163198Z","last_seen":"2026-08-09T10:18:22.163198Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scopedatastream.com/storage/brands/logos/2vHIwAmY8fJ0uyIm73ugEOkj8WMOeRqphQRULfQc.webp","fqdn":"scopedatastream.com","domain":"scopedatastream.com","tld":"com"},"ip":{"addr":"72.60.134.85","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbetting-au.com/","date":"2026-08-09T10:17:51.342Z","timestamp":1786270671342,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scopedatastream.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 02:14:44 GMT","end":"Fri, 09 Oct 2026 02:14:43 GMT"},"fingerprint":{"sha1":"46:81:82:E9:BE:4F:6F:95:79:F3:8C:89:30:C5:54:0C:12:63:F3:81","sha256":"C8:21:9B:39:03:E1:F2:D6:EC:53:CB:72:DA:6A:0B:36:1C:9D:6A:87:F0:16:5F:41:61:46:F7:BA:75:54:86:0D"}}},"request":{"raw":"GET /storage/brands/logos/2vHIwAmY8fJ0uyIm73ugEOkj8WMOeRqphQRULfQc.webp HTTP/1.1\r\nHost: scopedatastream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbetting-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.2\r\ndate: Sun, 09 Aug 2026 10:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6104\r\nlast-modified: Tue, 28 Jul 2026 07:43:36 GMT\r\netag: \"6a685da8-17d8\"\r\nexpires: Mon, 09 Aug 2027 10:17:51 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6104,"size_decoded":6485,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f669e266059cb40427550f69a9429fa1","sha1":"3295bde94974135d2e94cc313145ba71a8dfb935","sha256":"af5dae7e07eb614279ce6d183b54876a8bc18d49e6735423bd3480939b5b3be9","sha512":"f5deff07f996b5c67b1c7fcd610222bb6ba08c110f9d1160e11d6cca37572e6ecd7038f044c0a3ae9741e724c096a3237acba5edd0d863ee9f9a02503a190323","ssdeep":"96:cElbw+iXhU0255OEbgXmJXAyJeUA5J+lc2bwVH8TGzqqP2NC3YXtW66k5Nf:pwTD25sEsXmJQyUpJT2MFzgY8X","tlshash":"12c19f615f1a0ef9f03939b0d2951c56ea91e12292394906e603a712c7088c9f1df9ed","first_seen":"2026-08-08T08:39:54.453031Z","last_seen":"2026-08-09T10:18:22.16408Z","times_seen":3,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":25,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting-au.com/wp-content/themes/eumbetti/assets/css/header.css?ver=1777807661","fqdn":"ethereumbetting-au.com","domain":"ethereumbetting-au.com","tld":"com"},"ip":{"addr":"172.67.212.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumbetting-au.com/","date":"2026-08-09T10:17:50.653Z","timestamp":1786270670653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 20:36:42 GMT","end":"Thu, 24 Sep 2026 20:36:41 GMT"},"fingerprint":{"sha1":"00:D3:9C:40:FB:81:D5:A2:8F:D3:B3:4F:F7:6F:84:74:04:8F:80:28","sha256":"8A:26:EF:7C:AE:CB:F0:E8:8D:B7:4B:A7:50:E1:04:56:E8:00:EA:D9:DF:1C:E4:A5:15:0B:4A:E6:4A:63:47:22"}}},"request":{"raw":"GET /wp-content/themes/eumbetti/assets/css/header.css?ver=1777807661 HTTP/1.1\r\nHost: ethereumbetting-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbetting-au.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:17:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 03 May 2026 11:27:41 GMT\r\netag: W/\"69f7312d-9831\"\r\nexpires: Mon, 09 Aug 2027 10:04:09 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 820\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FGk2jtmglZhcN1Q3MJbwZ7D2qPzGJgz7BZJwHNUJ9iQW9z9MHprOJ%2FtOi1q%2FiExYLK5ze3E1Ppo4zdzllHBclRgzOAtaAOCKMRPTTMlxjauQamNlqT%2BCsDjCF2N7W%2ByAmGoGGDs%2FJxfK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a286036b9e3456a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38961,"size_decoded":6852,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (38947), with no line terminators","md5":"1eb4cb346cd9f889e0aa15e42826935c","sha1":"d61e2e1e60b7630b360f9c7fdbfa2a45dfcadd11","sha256":"03671c80d190814889fc488522dde7b0d7df41a57c102c87d8a2e55e09826777","sha512":"eaa2283206a1e967bd198d0a1d1dbe147284c29fc654f2b03763df76b27325a08ec3ae7c7c1dfa9caab140b6a88b3ed46055b7374263e207938011a67eaec592","ssdeep":"384:vcTC+Od/NIIVmhEUn7znEMtFK3lPJ6bVMlEqx:vD/ytclPrx","tlshash":"2203468489843039a559d27cfde4c60c73b9a612ca60804977e5315a4ec7fb6f7e2f2b","first_seen":"2026-08-09T10:04:42.738006Z","last_seen":"2026-08-09T10:18:22.164769Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting-au.com/wp-content/themes/eumbetti/assets/js/header.js?ver=1777167436","fqdn":"ethereumbetting-au.com","domain":"ethereumbetting-au.com","tld":"com"},"ip":{"addr":"172.67.212.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumbetting-au.com/","date":"2026-08-09T10:17:50.661Z","timestamp":1786270670661,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 20:36:42 GMT","end":"Thu, 24 Sep 2026 20:36:41 GMT"},"fingerprint":{"sha1":"00:D3:9C:40:FB:81:D5:A2:8F:D3:B3:4F:F7:6F:84:74:04:8F:80:28","sha256":"8A:26:EF:7C:AE:CB:F0:E8:8D:B7:4B:A7:50:E1:04:56:E8:00:EA:D9:DF:1C:E4:A5:15:0B:4A:E6:4A:63:47:22"}}},"request":{"raw":"GET /wp-content/themes/eumbetti/assets/js/header.js?ver=1777167436 HTTP/1.1\r\nHost: ethereumbetting-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbetting-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:17:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 26 Apr 2026 01:37:16 GMT\r\netag: W/\"69ed6c4c-2e53\"\r\nexpires: Mon, 09 Aug 2027 10:04:09 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 820\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4J8B4Em36fsOrEGk6Ea0tg37JoRIbkriqbPrDV1EkJzsTe%2Bc%2FKuqZ3Q7nNJ9w1WwEaPrhbWjaRQ1%2F0UnvFqjiqDIxsuL0SoB4e2ncSFxD2MjuISicEQwarhWcy%2FiYkrdaVbXdBB2EIOo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a286036b9e3856a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11859,"size_decoded":4109,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2717), with CRLF line terminators","md5":"d59a194bb9692c9ee1e97d15f8b6a8eb","sha1":"47853dd0a667ff2303193ebe318579320e5292e7","sha256":"498d5a490bbf9aa7413c993f6c104119a909c0b00303d68888e190bfce4ed9b9","sha512":"b7fa4cfbb09d7081ab9d2e51eb22a8149e913418a07fae5b59c1b20040b402dbeea0f98ac657d2c4cff933af0e2c85cc9ebf3cdc187f1a00ea209b5b1a777106","ssdeep":"192:utjuXk/U8cU8KtoyBkciRbiaqZN+/IUqfZ6ErgBtC3viQ5KafTcwElC7KvFviF47:UB/U9UdtoFciRbiaI+AUEZ6WgB43a6fu","tlshash":"b632957b3250253744e31af7e1eea6a4bf69008bb942c456746dcd8d1f66c4306bacb8","first_seen":"2026-08-09T10:04:42.768061Z","last_seen":"2026-08-09T10:18:22.165472Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting-au.com/wp-content/uploads/favicon.png","fqdn":"ethereumbetting-au.com","domain":"ethereumbetting-au.com","tld":"com"},"ip":{"addr":"172.67.212.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbetting-au.com/","date":"2026-08-09T10:17:50.783Z","timestamp":1786270670783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 20:36:42 GMT","end":"Thu, 24 Sep 2026 20:36:41 GMT"},"fingerprint":{"sha1":"00:D3:9C:40:FB:81:D5:A2:8F:D3:B3:4F:F7:6F:84:74:04:8F:80:28","sha256":"8A:26:EF:7C:AE:CB:F0:E8:8D:B7:4B:A7:50:E1:04:56:E8:00:EA:D9:DF:1C:E4:A5:15:0B:4A:E6:4A:63:47:22"}}},"request":{"raw":"GET /wp-content/uploads/favicon.png HTTP/1.1\r\nHost: ethereumbetting-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbetting-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:17:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 03 May 2026 10:29:36 GMT\r\netag: \"69f72390-352\"\r\nexpires: Mon, 09 Aug 2027 10:04:10 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NUPNmJK%2F1%2BvuutjU87Q8v4aWVq18swFnc43PFFDO0hTDdL13yny%2BXijo9mHd3lVWIxYY5%2Bj8AANQ2bZmVKc6qoSWFxDodi3A8KiFZD5lK0aPzORmdv9ZXlR1kE%2B7QNaZnUeRSCkica6Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a286036c6e4256a2-OSL\r\ncontent-length: 850\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":850,"size_decoded":1646,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"0cdc032dc8ee8b5328762d2e81ebb087","sha1":"e4868550638442ed5bebefebc04af59817049f36","sha256":"4f0923fd85ee8b31f068f2d89861f0e3669e3c4c086ed9fa5ec9dfd25886b018","sha512":"194f46d8b05975b652b4303095d2359c181f7ffbd8859a98efa524e3c5abb00a5abca695d1db8eb9f1995165d86f8da95f991b717db4c479273b891e0715c6cb","ssdeep":"","tlshash":"f70187b9373103bdc95323a1d379fa817e3f80653b040115668a8290de3d217482f23a","first_seen":"2026-08-09T10:04:42.755587Z","last_seen":"2026-08-09T10:18:22.166251Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scopedatastream.com/storage/brands/logos/bGyWrPbgvgj3looNzW0iVOAWdAgexh4gur3A8UPj.webp","fqdn":"scopedatastream.com","domain":"scopedatastream.com","tld":"com"},"ip":{"addr":"72.60.134.85","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbetting-au.com/","date":"2026-08-09T10:17:51.344Z","timestamp":1786270671344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scopedatastream.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 02:14:44 GMT","end":"Fri, 09 Oct 2026 02:14:43 GMT"},"fingerprint":{"sha1":"46:81:82:E9:BE:4F:6F:95:79:F3:8C:89:30:C5:54:0C:12:63:F3:81","sha256":"C8:21:9B:39:03:E1:F2:D6:EC:53:CB:72:DA:6A:0B:36:1C:9D:6A:87:F0:16:5F:41:61:46:F7:BA:75:54:86:0D"}}},"request":{"raw":"GET /storage/brands/logos/bGyWrPbgvgj3looNzW0iVOAWdAgexh4gur3A8UPj.webp HTTP/1.1\r\nHost: scopedatastream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbetting-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.2\r\ndate: Sun, 09 Aug 2026 10:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4898\r\nlast-modified: Thu, 06 Aug 2026 16:37:40 GMT\r\netag: \"6a74b854-1322\"\r\nexpires: Mon, 09 Aug 2027 10:17:51 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4898,"size_decoded":5279,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"99dbe308c3bec7e78d5ccdba4d0fac92","sha1":"386aa4efbf644f9a49476622665373927c7bbf5e","sha256":"c6bcf8cb47c34bec16018e7f5dd782ac69616d9fc74c0fba27f99bad626fab25","sha512":"d50f427d72f8209efe00f4605ac01aa8d507e85aac8a93a68f70c7d107e7113516161ffbbe3c0c89a3295c22a37074304c7efce668f85ac83aeefa9f8400bb4d","ssdeep":"96:aElbw+iXa7tffF6v7dOr4GALNuMGNPZOftrQwyOmaRNu6axkdBq6Wyc+D:/wTAtf96v7dPgMCcft+OmalI6W7+D","tlshash":"d6a16d79fb503739e1422bb90c9a19b1c528f2b2e6d6174b7053165a2b1c644b9880dd","first_seen":"2026-08-08T08:39:54.436Z","last_seen":"2026-08-09T10:18:22.166741Z","times_seen":3,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":38,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting-au.com/","fqdn":"ethereumbetting-au.com","domain":"ethereumbetting-au.com","tld":"com"},"ip":{"addr":"172.67.212.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-09T10:17:50.066Z","timestamp":1786270670066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 20:36:42 GMT","end":"Thu, 24 Sep 2026 20:36:41 GMT"},"fingerprint":{"sha1":"00:D3:9C:40:FB:81:D5:A2:8F:D3:B3:4F:F7:6F:84:74:04:8F:80:28","sha256":"8A:26:EF:7C:AE:CB:F0:E8:8D:B7:4B:A7:50:E1:04:56:E8:00:EA:D9:DF:1C:E4:A5:15:0B:4A:E6:4A:63:47:22"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ethereumbetting-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:17:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=0,i\r\nlink: \u003chttps://ethereumbetting-au.com/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSFDJ6ItUpeQPkAVB0eUB%2Ffv%2BJl0cknpsBJs3i1VKLn2t0%2F1XuJdUDkcX1HmClVv9GSsf05jisoEAf2rB1ytBlccQbRTRqngH96duPjk%2BZtrqMtFMU3J0nIAEcKn1r1YkO5kQtcASP2q\"}]}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a28603682dca56a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress:6.9.6","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":118977,"size_decoded":33169,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8832), with CRLF, LF line terminators","md5":"0f8a3c39e372e64e420627878f149a91","sha1":"aeb6f25eff20fddd0d2194e0bd7535cef788e481","sha256":"47701c6136a418bdf3b4d900a02b8663f7aa075f5c7530af5afb8bcd6aab9f27","sha512":"94e6145612cc2115a1c828674858076d30b3a9132f771b0ddaa11c6e9ccc4d8f7fdfdb99ae49e794dcffcfaf749b0cea1012471237e5340481009894ff503cc4","ssdeep":"1536:wypdC2gwdBFleGuUPN2tzRW/CE70N33OhKa+:xxgA7ENU1izUR0NOh3+","tlshash":"45c32a32a1c011bb06bb429857967349fb11d017db02926573be938f2fb3dac96b359c","first_seen":"2026-08-09T10:18:22.167196Z","last_seen":"2026-08-09T10:18:22.167196Z","times_seen":1,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":0,"dns":10,"connect":24,"send":0,"wait":314,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting-au.com/wp-content/plugins/GEO/style-stream1.css?ver=5.9.5","fqdn":"ethereumbetting-au.com","domain":"ethereumbetting-au.com","tld":"com"},"ip":{"addr":"172.67.212.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumbetting-au.com/","date":"2026-08-09T10:17:50.649Z","timestamp":1786270670649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 20:36:42 GMT","end":"Thu, 24 Sep 2026 20:36:41 GMT"},"fingerprint":{"sha1":"00:D3:9C:40:FB:81:D5:A2:8F:D3:B3:4F:F7:6F:84:74:04:8F:80:28","sha256":"8A:26:EF:7C:AE:CB:F0:E8:8D:B7:4B:A7:50:E1:04:56:E8:00:EA:D9:DF:1C:E4:A5:15:0B:4A:E6:4A:63:47:22"}}},"request":{"raw":"GET /wp-content/plugins/GEO/style-stream1.css?ver=5.9.5 HTTP/1.1\r\nHost: ethereumbetting-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbetting-au.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:17:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 06 Aug 2026 22:56:10 GMT\r\netag: W/\"6a75110a-7b21\"\r\nexpires: Mon, 09 Aug 2027 10:04:09 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 820\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OYH565NZCpB5OIHOmn3HozmDwXNfyuHAeReWtWnwYHMtcENPgwwAW97PdpVhwBZwC0yOPamCNr1XGNCrfu2hoo4LUz2uPW%2F6PMt8TrIKNg%2BstL6dPQ4Hqey1g7SuuxLs%2BZU2jB43YmlF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a286036b8e3256a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31521,"size_decoded":8128,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1658)","md5":"7c2355cb248335d52766c1a56dcf0bfe","sha1":"3b82809d78db34a5d74ba434eccbfbeed562cd52","sha256":"82347a14bc969c31f0e5735e686ee836f6399a584e00c0fa15f20affd888fb22","sha512":"27cb92dfa1746bedd88936383990044f75e5e657249ec81f7c2d5b38d63f9ab93ca30e94cd244e7f3d41d66bb46379bc5a8991f5bbdbe6c101ea8269963dd867","ssdeep":"192:23XNaKOW2c+eiEsRJkXs/p5FYYtIyr84Gp/t/GNqnj4gNYZc9mNxAY+0WtkjWfJk:wh8FNdZpT+29U9dX1qh6ii67kcOlm","tlshash":"70e25486aab30442741fd5682fa77b96332e9053d606cd6c3fdd325c8f457e8a162b8c","first_seen":"2026-08-08T08:39:54.455627Z","last_seen":"2026-08-09T10:18:22.168561Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting-au.com/wp-content/uploads/hero.webp","fqdn":"ethereumbetting-au.com","domain":"ethereumbetting-au.com","tld":"com"},"ip":{"addr":"172.67.212.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ethereumbetting-au.com/","date":"2026-08-09T10:17:50.660Z","timestamp":1786270670660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 20:36:42 GMT","end":"Thu, 24 Sep 2026 20:36:41 GMT"},"fingerprint":{"sha1":"00:D3:9C:40:FB:81:D5:A2:8F:D3:B3:4F:F7:6F:84:74:04:8F:80:28","sha256":"8A:26:EF:7C:AE:CB:F0:E8:8D:B7:4B:A7:50:E1:04:56:E8:00:EA:D9:DF:1C:E4:A5:15:0B:4A:E6:4A:63:47:22"}}},"request":{"raw":"GET /wp-content/uploads/hero.webp HTTP/1.1\r\nHost: ethereumbetting-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbetting-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:17:50 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 03 May 2026 10:29:37 GMT\r\netag: \"69f72391-8a32\"\r\nexpires: Mon, 09 Aug 2027 10:04:09 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EqjIhERmPAnYGdXn5Vdbb5vfGn3ya53UbUteyMidwvEk3XPL8t4PJA3fDPyRE7tBA5%2BOPbAqsMcOqtJU5nyzEya7L8eJgJRHE7jrM3YRYep5Llod%2FVZ6o6bAMAsYe7MovOQwBj8Vczdd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\ncf-ray: a286036b9e3756a2-OSL\r\ncontent-length: 35378\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35378,"size_decoded":36169,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x896, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"af4b43423d09f71de3b55bef45f2bc5d","sha1":"8ce736a870acea3cc37686845a8f20a979c7dd52","sha256":"c387a281908905567c07f658a8e4b11a92d8155c6482bb1581f92838dc040130","sha512":"cfb8592ec4025bb17d6f5b52c09baa64ad8df0c75e90533085a8c4f62b2c667bc98a93e1953761acc7519b17bedde98bd7ed4ad53ad0f7d39e9c957764807f58","ssdeep":"768:LwTNw6rCKI3S10mnLpJyU+yiD29UtkNZCund/R:sTNwL3Ck7D+vtnd/R","tlshash":"85f2f15d858fcc226b802f8c5572418a03119b3d39ef3b36e5bbc5ef864e535515e889","first_seen":"2026-08-09T10:04:42.775695Z","last_seen":"2026-08-09T10:18:22.169446Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting-au.com/wp-admin/admin-ajax.php?action=tc_get_brands","fqdn":"ethereumbetting-au.com","domain":"ethereumbetting-au.com","tld":"com"},"ip":{"addr":"172.67.212.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ethereumbetting-au.com/","date":"2026-08-09T10:17:50.786Z","timestamp":1786270670786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 20:36:42 GMT","end":"Thu, 24 Sep 2026 20:36:41 GMT"},"fingerprint":{"sha1":"00:D3:9C:40:FB:81:D5:A2:8F:D3:B3:4F:F7:6F:84:74:04:8F:80:28","sha256":"8A:26:EF:7C:AE:CB:F0:E8:8D:B7:4B:A7:50:E1:04:56:E8:00:EA:D9:DF:1C:E4:A5:15:0B:4A:E6:4A:63:47:22"}}},"request":{"raw":"GET /wp-admin/admin-ajax.php?action=tc_get_brands HTTP/1.1\r\nHost: ethereumbetting-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereumbetting-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:17:51 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iGo7J7RUtE5oSaVR1eCygGwKmfDDJ3ARrX318laq4DZKvlkG%2FpBCI9TxfgQ29aDSci8NTxpHmUrAr%2FIYemyySVwojPVH23pIKNa85hUPUGrVopMhl6Mp0R1gfe%2F7alFPwddteQDrpPVK\"}]}\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: public, max-age=60\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self';\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\ncf-ray: a286036c6e4456a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4621,"size_decoded":2211,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e67f50eae602190eef221ef1925af568","sha1":"892bdea472113dfa86969e39306cdbd1b94e9b9b","sha256":"dca8d06b7e26e70c3013d3af36e40e9d7aff2b60710d52f6b31ddc3e5f7b1bfa","sha512":"31cfcd4b33139ead01cb060075a67737065158c79d63062849bd13df3ce24dca2b359c9fffc5cf5878e382410fe6a322d2fd9ba6efe5247ef7d3067f21527fad","ssdeep":"96:/jJeF1tXIttaI2uF4GtXutzHtXPegwztqftXBfTVhtXOe:MF/XOYuWWXSzNXPRUtqFXlpXOe","tlshash":"d49154457a7d0d7deb734ad01fc93f298af9114bb2108c9a905fc6a075ea37612f241e","first_seen":"2026-08-09T10:04:42.741171Z","last_seen":"2026-08-09T10:18:22.170003Z","times_seen":2,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbetting-au.com/wp-content/plugins/GEO/banner/banner4-gambling-hor.webp","fqdn":"ethereumbetting-au.com","domain":"ethereumbetting-au.com","tld":"com"},"ip":{"addr":"172.67.212.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbetting-au.com/","date":"2026-08-09T10:17:51.124Z","timestamp":1786270671124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbetting-au.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 20:36:42 GMT","end":"Thu, 24 Sep 2026 20:36:41 GMT"},"fingerprint":{"sha1":"00:D3:9C:40:FB:81:D5:A2:8F:D3:B3:4F:F7:6F:84:74:04:8F:80:28","sha256":"8A:26:EF:7C:AE:CB:F0:E8:8D:B7:4B:A7:50:E1:04:56:E8:00:EA:D9:DF:1C:E4:A5:15:0B:4A:E6:4A:63:47:22"}}},"request":{"raw":"GET /wp-content/plugins/GEO/banner/banner4-gambling-hor.webp HTTP/1.1\r\nHost: ethereumbetting-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbetting-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 09 Aug 2026 10:17:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 06 Aug 2026 22:56:10 GMT\r\netag: \"6a75110a-b472\"\r\nexpires: Mon, 09 Aug 2027 10:04:10 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y8cY8LdSX9kaEl2SNWbdzW854FV4iVdN5G0kZdYqh1nQvmt1Kv7HAh4AjUhOA6sIM1SHAccDVMpcML91VTRXX%2BFJ4ew3Q1Z1JXuxzJS7Rq1ND8KT8ry7mgVHB7uzsF5rtXWhyNmhNfcI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a286036e8e5156a2-OSL\r\ncontent-length: 46194\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46194,"size_decoded":46983,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0cb3d6a3c9d8719ac6bf4911626c0d12","sha1":"64316edba4d0e510021b6a82c344e4f6565c44d9","sha256":"af1bdef5455e22fd1cf35a9f4543559656fdc3b3c7ea946184853f5dc669755d","sha512":"6012160b36ec39f57ed5c39a2416db7609097deef8ff5db01690a0eb4b785882b73d03509f5e58e46e7c3b036309f1f8566abc9cf5fd3b32ab3e6a9c561051ba","ssdeep":"768:6DhnkS1SAJ8jJmLOHZQ0ZnbnsCqYrG9hIDMuoF8ZfEE+5XOqU6Vh+IhlYDvcQ:0FRSNIJCbs3wG9hhu6SEBrU6V01T","tlshash":"8b2302c631e02292c90d6c36ec490302283a1e6b9b1a9fef5173857b7635fdf65159ec","first_seen":"2026-08-08T08:39:54.444498Z","last_seen":"2026-08-09T10:18:22.170842Z","times_seen":3,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-09","alert":"Sinkholed","trigger":"ethereumbetting-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scopedatastream.com/storage/brands/logos/19XAyrHKgHRA5hMbFUPkjmPMdn8dgziZr4sOW6y7.webp","fqdn":"scopedatastream.com","domain":"scopedatastream.com","tld":"com"},"ip":{"addr":"72.60.134.85","port":443,"asn":1239,"as":"SPRINTLINK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbetting-au.com/","date":"2026-08-09T10:17:51.340Z","timestamp":1786270671340,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scopedatastream.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 02:14:44 GMT","end":"Fri, 09 Oct 2026 02:14:43 GMT"},"fingerprint":{"sha1":"46:81:82:E9:BE:4F:6F:95:79:F3:8C:89:30:C5:54:0C:12:63:F3:81","sha256":"C8:21:9B:39:03:E1:F2:D6:EC:53:CB:72:DA:6A:0B:36:1C:9D:6A:87:F0:16:5F:41:61:46:F7:BA:75:54:86:0D"}}},"request":{"raw":"GET /storage/brands/logos/19XAyrHKgHRA5hMbFUPkjmPMdn8dgziZr4sOW6y7.webp HTTP/1.1\r\nHost: scopedatastream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbetting-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.2\r\ndate: Sun, 09 Aug 2026 10:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3296\r\nlast-modified: Fri, 24 Jul 2026 15:24:13 GMT\r\netag: \"6a63839d-ce0\"\r\nexpires: Mon, 09 Aug 2027 10:17:51 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3296,"size_decoded":3676,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7a43b643b47f92765381490d53577394","sha1":"1a44b94198c3e425ca0e7594bad825289ef6291d","sha256":"fbec1352c3df74dee2d43970cacd0ec0a5841c2573fcda1e8dd5ae0fd43a7843","sha512":"48e3a450534027ba8a05e17c4e8a93791919e78d900ed3617ceb1c70771cce615b9861f99781298366597d8197d90b1098c7f21228c5cba09d6e5c026b044d44","ssdeep":"","tlshash":"c9615b3f63d20632e24d7a3211a5636ff32cac138f468e153184b73c479dbc42a6a026","first_seen":"2026-08-08T08:39:54.434647Z","last_seen":"2026-08-09T10:18:22.171693Z","times_seen":3,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":25,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}