{"report_id":"a8ecd753-37d9-42ec-9b0b-933c8aaf737f","version":6,"status":"done","tags":[],"date":"2026-01-11T02:36:17Z","url":{"schema":"http","addr":"ratanmatka.fun/","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"93.127.179.246","port":0,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"ratanmatka.fun/","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"title":"MH Game Game | Play Online Game","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ratanmatka.fun/","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"93.127.179.246","port":0,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-15T02:36:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"ratanmatka.fun","ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":58,"request_count":59,"received_data":2897085,"sent_data":29688,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"bxSlider","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Bootstrap:5.2.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Lodash","description":"Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm.","website":"https://www.lodash.com","common_platform_enumeration":"cpe:2.3:a:lodash:lodash:*:*:*:*:*:*:*:*","icon":"Lodash.svg","categories":["JavaScript libraries"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"CodeIgniter","description":"","website":"https://codeigniter.com","common_platform_enumeration":"cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*","icon":"CodeIgniter.png","categories":["Web frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"asonline.in","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-20T01:24:58.260634Z","last_seen":"2025-10-20T01:24:58.260634Z","alert_count":0,"request_count":6,"received_data":403158,"sent_data":2673,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":1,"received_data":29079,"sent_data":538,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-04T22:27:18.120727Z","alert_count":0,"request_count":1,"received_data":196037,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-01-04T22:21:06.427471Z","alert_count":0,"request_count":3,"received_data":181308,"sent_data":1457,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":1,"received_data":1949,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/popper.min.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a22f3f7e61af6a069aa6b422537c3f49","sha1":"682fdc625ae80a890d10af2cb16e62540e2186a8","sha256":"d2b9f29ea1f42a60a8beb1c04f76868287f2a48d6ec50fb39d6b888584a03c49","sha512":"71b8d409a48fbdcaaa28f8a412248163857b2cb9ed6a5c4fe2bd0c4898ba3ef7f34d0d538097d94568246bc88a317cdaa509f05095c59caf5c567d73a973e2f6","ssdeep":"384:fYn0vf4wzTC9nNbR1PTM4CrBEQxkxpOxvYLmD75zfC5vIfg3rzGp/TidOgHhXjEN:w0vAwzTC/nM4BxpOxv/D7pC5vfzy/Ti6","tlshash":"2992a3dc3294b06647ab91a7a07f960eb1335875610e9410f19df2e97c30ef9613bc79","size":20336,"data":"","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-04-27T05:38:32.085468Z","times_seen":2194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/aos.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a01f9089e8301e9eacfb9d029dc0ca5c","sha1":"165152546121aaaf96c19418908cffe3630a2336","sha256":"4460f1596174d06cca957fdaca2c71e1a377cf1d6f07ee4c75ffb3bf3fc97a03","sha512":"a90277dcdf97d7decdc3ee3546ff80d537a779d7c70a44b6fdc0059df4c131d92af5336ba238b3f3e7c5dcd721c283616a1a54338203864479d47b120aeae80b","ssdeep":"384:3IkfNaayGbHbcggNFUWTgZeo1sa6XCZy54:4kfNaayGbHbfgNFUWgwAslXCZy54","tlshash":"5552e7dc3681f0a617a794f7826f600ff2f14834245e90a0d269c4e67db58ae8673f5e","size":14243,"data":"","first_seen":"2023-03-07T01:35:54Z","last_seen":"2026-04-27T15:34:08.597575Z","times_seen":8292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/jquery.barfiller.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4f28b59b369febb6ec02c027b36c2d8","sha1":"5c1e57f938a74075a79be5b833246bfefe08ffff","sha256":"868a2e132beb3a36c050503ad0ce45ef3f30cdd53a443a938e9f617c800c1ee8","sha512":"b667c57fe6cf787d0c884b1ecb4e17fe2e7a5a8f886b8733333062753e06ae62ee33da25bbd8df7eaaf73d18151076f1f5244645573ffa4a52936b79d8a57ff8","ssdeep":"96:iufMG1fRhZ4eZY1/5d1dezds2dPrdqACE95+7cWXHTmdkiN3EBz:rMk5hZRY1/PLeZs8PBqACE9BW3Tje3E1","tlshash":"6cd1bc5eaef72e011563f26c2bdf90c8317584272a07de14bc2d32549f0d72866d6be0","size":6244,"data":"","first_seen":"2023-03-07T12:23:31Z","last_seen":"2026-04-27T08:49:40.859867Z","times_seen":489,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/parallax-scroll.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"561cdc1a6dd173750e007c678385208c","sha1":"7b235b228eb2d084652307e68779e3a0863fe692","sha256":"6f190f0c4efea59a0dcea69c2d855e7cd37c56e621a506995654604d7a4e422e","sha512":"f236722f63817fcf59c9d98f1dc59faef985ddb79a89b03e7e04af493836ca9527ac1a877b0baca24a88b1fbef8604cd7a518e241162e9fc0a241fb6006771ac","ssdeep":"192:3tVmEaP3FCCCqeekidblijli0K+/g+67PzU6kB0g6:7Hq3Eqeeki07iP3","tlshash":"47022004e4a30521d5e771358f5e024ab72eb51b82a5d928bb0ddacd4f8093493d8ff6","size":8929,"data":"","first_seen":"2023-03-08T02:13:11Z","last_seen":"2026-04-26T23:22:27.57209Z","times_seen":430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/jquery.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0fca26b5a37a66d68d0f4406976be4b5","sha1":"ee000eb654b3bd37185665d3901e93b34ce1aa52","sha256":"8c2812ded6436715279f8fd8db58de307aa39ab0296fe3cf0e879067c51e9b18","sha512":"cf010995991a8f8b50cfb4b466d3b457b0a6addc4f2fd96c48c33d40ac251de400894828ccd99662b13fc9ca25c676ef0aee05faa4910530ff9996d03c411645","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp94:t4J+R3jL5TCOauTwD6FdnCVQNea98HrF","tlshash":"7a93d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97162,"data":"","first_seen":"2023-03-07T01:06:51Z","last_seen":"2026-04-27T14:46:09.989805Z","times_seen":6585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/wow.min.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","size":8415,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-04-27T16:14:51.472113Z","times_seen":10432,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/jquery.fancybox.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8f7945b79794c6a99efa1a4177258b4","sha1":"29953f49eb1e198262f0e77c9bee5e1c9739d133","sha256":"b363286bd343839bc9c197d8b542d15eb77983e6708ab1e20658ebf34e106f2b","sha512":"d835e3a35f083f6e3f1dcf49a439b0d9a8ac9b63ce0e08494fc625fca52f9488042f87c4fea74884d86a25832362a15650a47cd141949a269883bc3d3e4dcf18","ssdeep":"1536:26iljzs+4wETv0qwF/fwUsjuFR4amerr3txU0Me7/pby+mHWgGbAdKfW7WP83RSx:2moETcqwF3wO/VUbZZr7WP83RSD6E3d","tlshash":"1ae3968a57bd212589333129ab8f705eb57e8423a10dd9263cad53481fc13a943f5fee","size":154109,"data":"","first_seen":"2023-03-07T12:10:28Z","last_seen":"2026-04-10T20:42:49.110875Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/owl.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffaa3c82ad2c6e216e68aca44746e1be","sha1":"2fa7c468110fa68f1f3df6718daf971871623ee9","sha256":"83553d22ccd56e5576d544f6ba93475c712b3c02d312893eea2acc16de5fcf91","sha512":"4dc195ca7796b980f4ff1fffec7ec069910501116b826e23651eae4dc8b154acc40a74011eb8aafb60b30d029357b007116a51c90c43d84b91496c50d724deaa","ssdeep":"768:MCcZ1I6+gyfJ78tKOGOrnepjMzZG+uluJe+KSzVc7mThcGP:1cZelJ78m2c58","tlshash":"29038446b3302d2a8a9b91b0663f020bb13b241de415947d797d9ade6d79c4c213fbb8","size":40401,"data":"","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-04-27T15:33:28.775407Z","times_seen":7666,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/slick.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b438330ce2262e12198a51de56121cc7","sha1":"e1258b83ad5d4482bc2488db40a2e0f5394f66db","sha256":"66dac1a7d6c6a959d1851f93520bcc4e34aa36d390c6c5721bfe8b25eaa85842","sha512":"6e5f2bb35ae25c995f7fd3bc2ba1822eff8840a7e854d00783b11e14ca880c25c687811f5ccdb9ed72b3008d4bf33d56eb381f9eb2389d05416012cf2bed915d","ssdeep":"768:p1t6WvsBZPKBt3FPmS3+EYykK1GPzpiN9sJTPdATgjZ7NcohC5orG1Tsh:M0tVUkkK1GPz6ArG1Ah","tlshash":"df138409d205372688eb11e5b105c14ea3fbfababd12c0f076c987d6606d81d86e77f6","size":41657,"data":"","first_seen":"2025-10-20T01:25:07.285285Z","last_seen":"2026-01-11T02:36:30.15825Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/script.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9daf46130c43af7e45816cd8d5b8da9","sha1":"a9d2d3e90b4bf95f4bdb8d2db4f1185437728afa","sha256":"fb5299a2f2bb6edb7a5413b82037630767e85a572221e60637b89993f2e6c2b2","sha512":"f7bd4ce494fdd8daf890ab68fe0f15b0767a981b9d691407efda2dd940faabca26f7b75fb763393000baf28d31f57eed569d2202933e6cd60022fffc01b926f6","ssdeep":"192:V1qTjSpEdfMjbjaOmOKFAaBIXx+PRluR4nVdTkU/cPPKgdwwBKN5+po/qq2y+9gP:qfd+eR2y+9QFel3WejbL/q5","tlshash":"47c246c0fb5c24a7813a70599c2f61c8561d4431fd126cbbfcbc25641a9ea3f12aae7d","size":27822,"data":"","first_seen":"2025-10-20T01:25:07.361535Z","last_seen":"2026-01-11T02:36:30.171611Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/tilt.jquery.min.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"567e7cce26dc2060b3be1b9c5ff0d0f9","sha1":"0905a35aa793c1f1a921b23cfc04c38c7200631d","sha256":"93241d6bd3fac7b7b86748364a48691f2143c855901a539d36ef0063c53dee64","sha512":"40f1523f94308bbc11b1a83ac049bfedc61e80e8ecf9684903e9e13aa22997a047169234a581f1ed83a6b30ac1e854d0350c5cc31fb6dd17e07a807f9330a3fb","ssdeep":"96:H9HqJXyrg9U0S2VcjOB/MjvENOtnUz3FbyTXTyVyURCD3jgupRMD5:dH8yrbTIMjLtnUziXkRCYRd","tlshash":"d1c141847111711e59cbe324d19b0e06a23ae0155c22a87d75fdc9edacaaccd127bbb8","size":5693,"data":"","first_seen":"2023-03-11T15:31:50Z","last_seen":"2026-04-18T09:10:36.662337Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/pagenav.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"941de1de093a372c93af1bda9871031e","sha1":"b19f4ce27139ece890c8562cd1a42340b36b7ebc","sha256":"9e0b6a545fa52fb1926242131de56bc45c97009cc515bae39b9ce69641d74a07","sha512":"f2a866a4dc2d5855e59a38493edaa09f9fcb19ead8408dec4f8c51c78f7e0388398a9d7ffa27e7011d62344553723769b208a8532a28636fe84b2433d7bd3200","ssdeep":"96:zPgGV3mx/6InpLnnUFLDM9/f2eqSzcHb+O52nzTtsqt4co0dEum/tHxb:zPgGV3S6YpbqDM9/uycaLz5nWpH5/tHZ","tlshash":"77b15e56b35e32b6c1b73515ec2f22c96a3d4a67f80a102b7d386dd41cd213a9316f78","size":5141,"data":"","first_seen":"2023-05-06T12:20:40Z","last_seen":"2026-03-31T19:21:47.624619Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/jquery.barfiller.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4f28b59b369febb6ec02c027b36c2d8","sha1":"5c1e57f938a74075a79be5b833246bfefe08ffff","sha256":"868a2e132beb3a36c050503ad0ce45ef3f30cdd53a443a938e9f617c800c1ee8","sha512":"b667c57fe6cf787d0c884b1ecb4e17fe2e7a5a8f886b8733333062753e06ae62ee33da25bbd8df7eaaf73d18151076f1f5244645573ffa4a52936b79d8a57ff8","ssdeep":"96:iufMG1fRhZ4eZY1/5d1dezds2dPrdqACE95+7cWXHTmdkiN3EBz:rMk5hZRY1/PLeZs8PBqACE9BW3Tje3E1","tlshash":"6cd1bc5eaef72e011563f26c2bdf90c8317584272a07de14bc2d32549f0d72866d6be0","size":6244,"data":"","first_seen":"2023-03-07T12:23:31Z","last_seen":"2026-04-27T08:49:40.859867Z","times_seen":489,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/bootstrap.min.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb5fac582a82f296aeb74900b01a2fa3","sha1":"fffea98e12e63b66693d567315a2f32392b780b0","sha256":"c5a17d46976d471cf060c5a0e25749a323d6ab20cf0910f40afed81047ba21ef","sha512":"60ad4ccfd52266685b1735e031b9776cee3dc19efc5e3de1f13b5304b147100123501c6c11975777c225e5159b84f3b207ae776c64033551869f2da639166ae0","ssdeep":"768:u2Ybgh0G45THVmcmjWSLlynS/zZ/AcyUr4Y8yiKKkHPPm26RoLQH/nIr6:u2jh03Lo+SbZ/AfYqkm2KIr6","tlshash":"3433b90a725478a201df9466513f450bb73b389eaa0b816cf95d98ed1e7cd89312bf3c","size":50731,"data":"","first_seen":"2023-03-07T01:14:49Z","last_seen":"2026-04-27T13:27:13.368117Z","times_seen":2827,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/jquery.mCustomScrollbar.concat.min.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"71951b246c4726520dce912a5ac7f03c","sha1":"56906b9b9f41df67063091b7a66c8584d87d748f","sha256":"dd3bda90c210c66fd618bb0c35f4b21f871ce1dae7396053cb4b3a90b3ec51b0","sha512":"ff0b38e4e02096dedcc6fb1a0899a7f8924a89e9b25bb8d712f5ffb01414641b009da55c45241ddea6440eecb7ebff11ea93318aea46ff3ff71a2e22670cb48d","ssdeep":"768:nAGHgQl8dA0unnTUOxZ5ynGi65vqjSDHR17JayK:nAGHUSnTUOxZqxjv","tlshash":"7a03f9e9370534fb12db6f5e441b010963365956a70b8870387d8cb82fb1ea622b7b6d","size":40547,"data":"","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-04-27T12:36:53.023671Z","times_seen":3654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/appear-2.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"793817187ea8eefd1e46dc7cf2a25d7e","sha1":"3e8ac3b92c087251968264892028c246dd542ab2","sha256":"96899a0bd5ff5ecb3cfb56c1a1d49620c9112ed1797ea612d7caffa3fc3746bb","sha512":"d0bac24fe58c42bbdc3318e99e7df03f33a2ea30420f6f63eebae6e84072a80ea04c4647bf699cb90d07c8d49145423a22c058f1a030d5f2e1a1910d37675c42","ssdeep":"","tlshash":"c961eb4c78e32851183b703e5faf2208b13a82a3120acd8179dc5a987fe1d6995dbbd5","size":3361,"data":"","first_seen":"2025-06-30T17:26:50.186824Z","last_seen":"2026-03-10T01:52:24.032481Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/typer-new.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"497ebc8ef71e0997ba5fda09be7ef211","sha1":"77855aa2dfb40817b07d80d2f3e121afcdc8f427","sha256":"d20866ac54b17d2205264f37b531fbb71b6a6425d124f551bd4c97a949dd43bf","sha512":"12b50618d086df01d11e6d45f2a7fc97b93e2c62fc668d140a2f5fc9c6cb66451aecba1e4ce682ba26a1fb258294c5f1788dff451f3842d7cde5161cfafc6d8c","ssdeep":"96:gIPU+nZ1yrTn0Y8PKYTy8nO9nYPvySnFknzNjn6M2NhcnB0z/M:7fZ1ij3yTR+YPvXFizd6LO0M","tlshash":"e5b16194fb7869ae4bbf0dba167e90cab67c30335545863b7de64226166029c3313ccd","size":5532,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-04-27T11:57:24.315835Z","times_seen":895,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lodash.js/4.17.21/lodash.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9becc40fb1d85d21d0ca38e2f7069511","sha1":"ae854b04025db8b7f48fdd6dedf41e77eae44394","sha256":"a9705dfc47c0763380d851ab1801be6f76019f6b67e40e9b873f8b4a0603f7a9","sha512":"585374e3ce3ab1d28c20fe4b28da6131a5b353b629332094db8e5eb4ade0ff601161b3caf546f5f1e1be96353deaa29109687eaae098ef279f4a6964430d4035","ssdeep":"1536:X9ylPegosd1p8X4Kx2iiC0guaihfaZgb9pL/:X9cVaizgehfaZCX/","tlshash":"6a6371c9bad3f41a93a320b504af048ff13d6ea4688c9500d1a4f4ed7db856ed263e5d","size":73015,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-04-27T16:19:56.481298Z","times_seen":51805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/swiper.min.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a375685893175392b3503246fb8a4b2a","sha1":"a28622840f326479f9d11f772216f577edb76cb3","sha256":"3a55e36344a5fce6ae473760d91c4fb46d9c0d7be45ad348a7b506f1e6f07de6","sha512":"b31645e69ee75171fb213c39951117a85d6950f59e2b90c45d524ae4de2b74b7ef3d12c140e5a3856d0aa8d8561df01f5d651a8dfa78ad4e59e837f64e73856f","ssdeep":"1536:NMRk/+Q3C53Kht5EDZZQYc8pG5yGI5mdkV7C:f/u3G","tlshash":"3173e84d7323b3b365d3215a97aec24231b51802b909d4f471ba4cd698bcd5c83aefb9","size":78316,"data":"","first_seen":"2025-07-07T09:01:13.395974Z","last_seen":"2026-01-11T02:36:30.105389Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/odometer.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"11d31aa38b4b7e29bacc61cc3fe5cdf6","sha1":"b6b3b8730db8ad254f86752040ccb8521a0524c9","sha256":"981edc2c368c79ffac0376dd41ff6bef2b6c0abe2918b91ec16f49efc8ff1396","sha512":"6a93bf0736145d817f5053414bf7960f72f758b5a51d677262ba6e6162c591000e7d08ce6ac77a74a25c10f60919b57c3fc31f761d26eceb4d7162695182904d","ssdeep":"192:HABzlvQK8QecCHAOcu2a+OdI5s/GMb8XuulT:gBhv18QecCxVxz+7dlT","tlshash":"35229680ba11a735835371e151bf0609b7bb99bea404401df67c9dd9be29c38e12bf74","size":10263,"data":"","first_seen":"2023-03-07T12:07:28Z","last_seen":"2026-04-27T13:19:19.366915Z","times_seen":1206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/bxslider.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2465da4f9b6b98137590c803dfbcf63","sha1":"470fc280cc2313f05fc7986445cd87dec0d8237f","sha256":"6beec69d521bcd4a80746430bb24aff5db863dd28688a443e1bf14c7dcc5e3e8","sha512":"fd94b3e79a84c06f7602b9c3cc46b47db902ae31fcff8308c50d2f64383b10aaac220f81cc0aca125d5cc3e3485287ee925e8715146e325466038bebaa7134bc","ssdeep":"768:aX6/gdowzCxV/QKl/oR//hm2dKZ5os7LzpVECNWmSqCivU7SOT:66OowOx1l/L2dy5oMnfNWVqCivO","tlshash":"7e336245e32c227e5566126cb28dcec4d7fd8236c82694f6eef0dd3ce18096901af9d6","size":50573,"data":"","first_seen":"2025-10-20T01:25:07.270868Z","last_seen":"2026-01-11T02:36:30.127966Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/diamap.png","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/diamap.png HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6178\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 0edfe0e02f9f292d695a2e2d1dab1b70-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.671\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":6178,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3bac64a0d0960f786889da8d3a4ba15d","sha1":"4da382bdb25b344f2d6a8d333bdaaa0d117bd3c9","sha256":"e550cbbed74736551bb09cdeb5e5774211bd7b2b5fd704a4b7ab8f6ab95decd2","sha512":"83c1f2daf0d6ad68d06ab941bec233e8a35008eedeb4a78dbc5b174589621214d067ba5613d4891b8b55fbb3dde43a7a6d031e2b588a98f93b3aeb2fe67bc0cf","ssdeep":"96:kSLonVk1yZf7rlFb2GYFpSSSZgtZghCl5Mv05llQpZseF2bqQNyrPBzBM/4W:bLgZfnb2PASPgvvQl8D2vk4AW","tlshash":"d0d15cbb09c28463c54e3c33a5e71b55facd561c23622d8fd22956194faec46dd9c80c","first_seen":"2025-10-20T01:25:07.393486Z","last_seen":"2026-01-11T02:36:30.095209Z","times_seen":2,"resource_available":false,"data":null}},"time_used":704,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":704,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/pagenav.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/js/pagenav.js HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1679\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"1415-691458af-44d5491120657c18;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 97c0f4ff776ae4d2a9cc931f1d8516f7-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.540\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":5141,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"941de1de093a372c93af1bda9871031e","sha1":"b19f4ce27139ece890c8562cd1a42340b36b7ebc","sha256":"9e0b6a545fa52fb1926242131de56bc45c97009cc515bae39b9ce69641d74a07","sha512":"f2a866a4dc2d5855e59a38493edaa09f9fcb19ead8408dec4f8c51c78f7e0388398a9d7ffa27e7011d62344553723769b208a8532a28636fe84b2433d7bd3200","ssdeep":"96:zPgGV3mx/6InpLnnUFLDM9/f2eqSzcHb+O52nzTtsqt4co0dEum/tHxb:zPgGV3S6YpbqDM9/uycaLz5nWpH5/tHZ","tlshash":"77b15e56b35e32b6c1b73515ec2f22c96a3d4a67f80a102b7d386dd41cd213a9316f78","first_seen":"2023-05-06T12:20:40Z","last_seen":"2026-03-31T19:21:47.624619Z","times_seen":26,"resource_available":true,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":571,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asonline.in/images/18plus.svg","fqdn":"asonline.in","domain":"asonline.in","tld":"in"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asonline.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 19:13:16 GMT","end":"Sat, 21 Feb 2026 20:08:18 GMT"},"fingerprint":{"sha1":"EB:4B:1C:81:B2:93:4E:7D:AE:D3:19:45:3A:1E:8B:C1:7B:99:D2:57","sha256":"25:F8:9F:59:A6:BF:AC:2D:E2:6C:0F:DF:1E:AA:38:3F:D9:4A:F5:60:43:BD:3F:F1:89:2A:96:BC:8B:A8:16:86"}}},"request":{"raw":"GET /images/18plus.svg HTTP/1.1\r\nHost: asonline.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1319\r\nlast-modified: Wed, 26 Jun 2024 07:35:12 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uw%2BFgtEvdpKY%2FPIq0jwUSO%2B7DVGqB8hUiPOPNZkMQ1NxPxyffMb%2FIYGQY0clU1SrBFlJgBrCVoggJ%2FXSzcIo6KxYJj6Qd6hudmNl\"}]}\r\ncf-ray: 9bc106063a7a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2697,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ddda6eab13307f811db010ff5a9685d9","sha1":"4847a570ad82fd40c91b93471b694163a19e8637","sha256":"6dd4fdfb062d3ba4571eb6957ea2ab5fc0c17df288a1f9539fe2a5329374a2e8","sha512":"334330ffda8aaf325fda28b4d4c4ff88b89501f2b3340c6dbb25e34c2c938344df550757026841870853322d78ac6b83b49c26109e053a9528a1066bd2b3f33a","ssdeep":"","tlshash":"1951ce6cd89494b8cede03c8197daad44679f24f0595381d65ad39800f06f6e8afeb05","first_seen":"2025-10-20T01:25:07.374422Z","last_seen":"2026-01-11T02:36:30.099581Z","times_seen":2,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":14,"dns":43,"connect":3,"send":0,"wait":576,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/fonts/fa-solid-900.woff","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:56.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/fonts/fa-solid-900.woff HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/assets/css/fontawesome-all.css\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 11 Jan 2026 02:35:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.4.33\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 1404cc1c1990fa37ff8e521e533932a7-srv-edge5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":1130,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"fc10f358967a59750ef6fd9a698e2d60","sha1":"3fc472d167c41a4193625aff84ee6e599b302002","sha256":"16ce845440c38f491f80553aee7a8144dcc0a82c46258deaffdd10a0fa3d2db2","sha512":"9664693058cb0573a00cb8497bd5866f523fed0553a51417caaea300dbbed793f9fe2fb1b06a946284c2c4769f888a8ea9e7789c3d143398d5ae9b2a7735eb71","ssdeep":"","tlshash":"1f21ee1fe641194bf25e0064bfe1eb472b1f2167e85c4f713a69e029c2990f568632cc","first_seen":"2023-03-09T10:43:16Z","last_seen":"2026-04-27T10:37:46.027599Z","times_seen":2601,"resource_available":true,"data":null}},"time_used":576,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":576,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/apps2.png","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/apps2.png HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 70940\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 9d54fab7c9e2ba2e027e81fc8141b3cf-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.790\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":70940,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fad2f11c64863bed917bc3a60fcb221a","sha1":"5e406ac45752c1d9ba81da1eac801f8af7078b11","sha256":"6cdb619d19e16b4d45b9aa6e5d5d8f0f918bbd3d9c68f73117db8f831720e765","sha512":"833c1564f1df892220a918542c1fd39d81c762d5139f19c9898c0eb4b6419d1bdad95da57a08ca9a957da8288580c645d36e73b29bab5f8c7ea4b67eeafce707","ssdeep":"1536:Qu0GrTH0irSHbQx5LJFLSUhk9u58+P12zyzn/5jOaserN+SUPA:R1H0i27Qx5LJQUhkMf2sn/5jHxrkXI","tlshash":"1363021612575fd4dff31b3e93f0af7068a43e03a5280d72be5822d02585ab2ce7a8d0","first_seen":"2025-10-20T01:25:07.442906Z","last_seen":"2026-01-11T02:36:30.103094Z","times_seen":2,"resource_available":false,"data":null}},"time_used":841,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":830,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/jquery.fancybox.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/js/jquery.fancybox.js HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 34048\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"259fd-691458af-82877614e4c68156;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 2efd1f1f59a02b995e1acf6d633e210e-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.549\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":154109,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"c8f7945b79794c6a99efa1a4177258b4","sha1":"29953f49eb1e198262f0e77c9bee5e1c9739d133","sha256":"b363286bd343839bc9c197d8b542d15eb77983e6708ab1e20658ebf34e106f2b","sha512":"d835e3a35f083f6e3f1dcf49a439b0d9a8ac9b63ce0e08494fc625fca52f9488042f87c4fea74884d86a25832362a15650a47cd141949a269883bc3d3e4dcf18","ssdeep":"1536:26iljzs+4wETv0qwF/fwUsjuFR4amerr3txU0Me7/pby+mHWgGbAdKfW7WP83RSx:2moETcqwF3wO/VUbZZr7WP83RSD6E3d","tlshash":"1ae3968a57bd212589333129ab8f705eb57e8423a10dd9263cad53481fc13a943f5fee","first_seen":"2023-03-07T12:10:28Z","last_seen":"2026-04-10T20:42:49.110875Z","times_seen":7,"resource_available":true,"data":null}},"time_used":833,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/swiper.min.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/js/swiper.min.js HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 18242\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"131ec-691458af-2343a00594fcf0b;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 6813afc35e2d8efe39daf7c3cecc7e53-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.556\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":78316,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32073)","md5":"a375685893175392b3503246fb8a4b2a","sha1":"a28622840f326479f9d11f772216f577edb76cb3","sha256":"3a55e36344a5fce6ae473760d91c4fb46d9c0d7be45ad348a7b506f1e6f07de6","sha512":"b31645e69ee75171fb213c39951117a85d6950f59e2b90c45d524ae4de2b74b7ef3d12c140e5a3856d0aa8d8561df01f5d651a8dfa78ad4e59e837f64e73856f","ssdeep":"1536:NMRk/+Q3C53Kht5EDZZQYc8pG5yGI5mdkV7C:f/u3G","tlshash":"3173e84d7323b3b365d3215a97aec24231b51802b909d4f471ba4cd698bcd5c83aefb9","first_seen":"2025-07-07T09:01:13.395974Z","last_seen":"2026-01-11T02:36:30.105389Z","times_seen":4,"resource_available":true,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/css/swiper.css","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/css/swiper.css HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 2874\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"5042-691458af-3943051aa67253a;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 32714beb84fabfd524cebf16f8e22e99-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.513\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":20546,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1468), with CRLF line terminators","md5":"b46610fd421a18b15c2c9bca8124aa23","sha1":"c2151a6d3b6f91d7de352202b6ca12f8d368e2bc","sha256":"fa3328049489be88ff27ab436c425651f7fc83c7db75a000f827a9dcd3bdbad4","sha512":"c1ff5ffdacb4a36e08f32c64cbc31ccd837c422805cb9fdf825c27430e14d89e06d5c7c53d83082201e14b3094dce200cffc95bd8b0b6549296e19310d6e92d8","ssdeep":"192:cYh4Ssrw7sVmpYm6gPm5dDexspy16KvBq8iXPCy13xph7um:cYh4jesVmpYhs1BX8Cy1z","tlshash":"3992685c13002002a7358e5c47c5ab389bb9c4d34f0315dfba919948db7fae8626ff66","first_seen":"2025-10-20T01:25:07.433891Z","last_seen":"2026-01-11T02:36:30.106832Z","times_seen":2,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/css/jquery.bxslider.css","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/css/jquery.bxslider.css HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 1003\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"f5e-691458af-a574f56939017eb0;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: cb3a74aca4d0629b3ab789a15fa8a6c8-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.548\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":3934,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"6068454b51270d13f3a819d6a1b50c1e","sha1":"f4263e65f1b60f5b57afe1bc743ad09f06c11266","sha256":"55ddd1f80cec627f624b79cea24ccd18fb38180c3bff6757ffe56be7c1a6445d","sha512":"4329f9e0b0335e5fb354735f0975a5676572956522df40292f341f7e768dbdead21171d01011271646ec6ec40420d9a48b362743d4c54fba4911c18818ee734c","ssdeep":"","tlshash":"b08189d116b76a6a651ee0ac3d45835d663d8013af0b98bdeaf1e47c9fcdbc18223244","first_seen":"2023-04-05T15:22:44Z","last_seen":"2026-04-27T12:34:44.834679Z","times_seen":904,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/s2.png","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/s2.png HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9220\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: b3dcc09bcd5c11fc6a00eeb2b87c2373-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.787\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":9220,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5e7a50740823eef0a5609ac5e0b2cd66","sha1":"f91fe5eec001db5695a3049a43b9da89c61dc05c","sha256":"31273b257494d42a793938fad434702f8415e9fb8ddfb15a0fe3523ece94dde1","sha512":"3f40c20ff6c1d1e9e86be57db83f5840f5340658b116bc1d70a8ecd4af09f075e50eafecaf75dc8199bc36f30de53d52a3a12ccc341131074c5b0e72eab3d8a5","ssdeep":"192:zz48uB6e9qmnFE+/mw2uL3Dh/90ea9NhbjeWIyMXPZW:vuPq2cON/9x6bj4yMXPZW","tlshash":"9112b0ee89b18ec6d063a6b42d681b5101f8d85b77816c63923aee531df4dc2127d184","first_seen":"2025-10-20T01:25:07.244385Z","last_seen":"2026-01-11T02:36:30.10881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":836,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":835,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/amu1.png","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/amu1.png HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 144874\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 9ff84db69d6c0c46cd128f831189f356-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 1.842\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":144874,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5c21a213aed20340a670f1064bcdab2b","sha1":"5ec9408325aa71780ebf19647b759b0ac8bea94f","sha256":"a09616a3b59579f494624d4a2a8d67f0d09c08d9e99d465a5d2f218cbef8d841","sha512":"08103e4b77fc30f28130f56deb2c0667db0e434089f5ee39d6671333783a87b0582128a26b85d3f0cfe257646104b7c13481f04ab7a825cb82f261fbd76267a9","ssdeep":"3072:XHv42IBZWVlDQkiXWLNg7WKM/fXZTnrpxO6mIG:Xv4LZWvUZWq4RrXZmIG","tlshash":"e5e3128c1c13ee25ea4721bdee44210bc91213faf8636f5e144b9eb406f58b66ed09d7","first_seen":"2025-10-20T01:25:07.43823Z","last_seen":"2026-01-11T02:36:30.110176Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1897,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1884,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/popper.min.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/js/popper.min.js HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 6925\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"4f70-691458af-324f0f44d4e21609;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 6bc3a5f54f65a839831440675b867d8c-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.531\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":20336,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (20164)","md5":"a22f3f7e61af6a069aa6b422537c3f49","sha1":"682fdc625ae80a890d10af2cb16e62540e2186a8","sha256":"d2b9f29ea1f42a60a8beb1c04f76868287f2a48d6ec50fb39d6b888584a03c49","sha512":"71b8d409a48fbdcaaa28f8a412248163857b2cb9ed6a5c4fe2bd0c4898ba3ef7f34d0d538097d94568246bc88a317cdaa509f05095c59caf5c567d73a973e2f6","ssdeep":"384:fYn0vf4wzTC9nNbR1PTM4CrBEQxkxpOxvYLmD75zfC5vIfg3rzGp/TidOgHhXjEN:w0vAwzTC/nM4BxpOxv/D7pC5vfzy/Ti6","tlshash":"2992a3dc3294b06647ab91a7a07f960eb1335875610e9410f19df2e97c30ef9613bc79","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-04-27T05:38:32.085468Z","times_seen":2194,"resource_available":true,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/fonts/fa-solid-900.woff2","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:56.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/assets/css/fontawesome-all.css\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 11 Jan 2026 02:35:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.4.33\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 1adbb71403dca09d8175aeb9b5728677-srv-edge5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":1130,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"fc10f358967a59750ef6fd9a698e2d60","sha1":"3fc472d167c41a4193625aff84ee6e599b302002","sha256":"16ce845440c38f491f80553aee7a8144dcc0a82c46258deaffdd10a0fa3d2db2","sha512":"9664693058cb0573a00cb8497bd5866f523fed0553a51417caaea300dbbed793f9fe2fb1b06a946284c2c4769f888a8ea9e7789c3d143398d5ae9b2a7735eb71","ssdeep":"","tlshash":"1f21ee1fe641194bf25e0064bfe1eb472b1f2167e85c4f713a69e029c2990f568632cc","first_seen":"2023-03-09T10:43:16Z","last_seen":"2026-04-27T10:37:46.027599Z","times_seen":2601,"resource_available":true,"data":null}},"time_used":551,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/css/bootstrap.min.css","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/css/bootstrap.min.css HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 18678\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"22688-691458af-6a76ea9067781417;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 1422a627c1584b4e5a82151436f66401-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.564\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":140936,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65319), with CRLF line terminators","md5":"e59aa29ac4a3d18d092f6ba813ae1997","sha1":"c4141255658403c38e1306d2fe196575522d6cc3","sha256":"9ef4fbe459177af5f4e9647cbe584514fd36c7386af6a1712d03ae4b42e45b24","sha512":"f8f8d2d7951fd526b7c3684d6a7ac7cf7ec988597acef817ade85b31092bbad544d9d59a41e79d7a2d9024f9a717205818be1a024c028be04e251d68059c8137","ssdeep":"1536:lx1bwyUPAy+QYYDnDEBi82NcuSEz/9OOL/gIENM6HN269:P1MbPnTLYIENM6HN269","tlshash":"84d372a7f5a0312da467c61960d0bafe156f8285d7221ffaf42737644b895cb0a73e0c","first_seen":"2023-04-08T03:07:13Z","last_seen":"2026-04-26T18:03:57.28171Z","times_seen":812,"resource_available":false,"data":null}},"time_used":694,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/tilt.jquery.min.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/js/tilt.jquery.min.js HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1706\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"163d-691458af-e16ed44ff1b1ebe5;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 5f86468806c44e30c2bf380f36a41d74-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.594\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":5693,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (5640)","md5":"567e7cce26dc2060b3be1b9c5ff0d0f9","sha1":"0905a35aa793c1f1a921b23cfc04c38c7200631d","sha256":"93241d6bd3fac7b7b86748364a48691f2143c855901a539d36ef0063c53dee64","sha512":"40f1523f94308bbc11b1a83ac049bfedc61e80e8ecf9684903e9e13aa22997a047169234a581f1ed83a6b30ac1e854d0350c5cc31fb6dd17e07a807f9330a3fb","ssdeep":"96:H9HqJXyrg9U0S2VcjOB/MjvENOtnUz3FbyTXTyVyURCD3jgupRMD5:dH8yrbTIMjLtnUziXkRCYRd","tlshash":"d1c141847111711e59cbe324d19b0e06a23ae0155c22a87d75fdc9edacaaccd127bbb8","first_seen":"2023-03-11T15:31:50Z","last_seen":"2026-04-18T09:10:36.662337Z","times_seen":81,"resource_available":true,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/jquery.barfiller.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/js/jquery.barfiller.js HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1521\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"1864-691458af-f79a4abf645ff68f;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 0\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 4a077bd52a5c42e8b3c9be472967e5a2-srv-edge5\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":6244,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"d4f28b59b369febb6ec02c027b36c2d8","sha1":"5c1e57f938a74075a79be5b833246bfefe08ffff","sha256":"868a2e132beb3a36c050503ad0ce45ef3f30cdd53a443a938e9f617c800c1ee8","sha512":"b667c57fe6cf787d0c884b1ecb4e17fe2e7a5a8f886b8733333062753e06ae62ee33da25bbd8df7eaaf73d18151076f1f5244645573ffa4a52936b79d8a57ff8","ssdeep":"96:iufMG1fRhZ4eZY1/5d1dezds2dPrdqACE95+7cWXHTmdkiN3EBz:rMk5hZRY1/PLeZs8PBqACE9BW3Tje3E1","tlshash":"6cd1bc5eaef72e011563f26c2bdf90c8317584272a07de14bc2d32549f0d72866d6be0","first_seen":"2023-03-07T12:23:31Z","last_seen":"2026-04-27T08:49:40.859867Z","times_seen":489,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-11T02:35:54.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/7.4.33\r\nset-cookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b; expires=Sun, 11-Jan-2026 14:35:54 GMT; Max-Age=43200; path=/; HttpOnly; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 2b81060ab7997643e8b25436ae7ba2d9-srv-edge5\r\nx-hcdn-cache-status: DYNAMIC\r\nx-hcdn-upstream-rt: 0.609\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"bxSlider","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Bootstrap:5.2.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Lodash","description":"Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm.","website":"https://www.lodash.com","common_platform_enumeration":"cpe:2.3:a:lodash:lodash:*:*:*:*:*:*:*:*","icon":"Lodash.svg","categories":["JavaScript libraries"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"CodeIgniter","description":"","website":"https://codeigniter.com","common_platform_enumeration":"cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*","icon":"CodeIgniter.png","categories":["Web frameworks"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":303350,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1562)","md5":"0c0ac2259066e3a93fc695c08ed1d814","sha1":"56c0491d2966034906c936b56b8dffbf06cb16ab","sha256":"6c38c22bfc4c57e748575211be1d805129d996c8759c176cb531b21ad76d35a7","sha512":"4ca9153512fd0908364bd42ff8789d5a2e906402824548fe4de2cca3b8656978e04d94231cd69ee2e8606fa7fcb5a75fb6fa082b5e7a27d70dec3c1307d687b5","ssdeep":"768:oNGd+wHC7MxNGM7yzYEpSAY20p9BnAfVPuLQ3uxgq2oIlcwL:Pd+TxvpSAP0pvnAfVPuLQ3uxgq2oIlcg","tlshash":"495462b2a5f0456b0483a6d4baf02e8f9f61f393d517028573fd1b916fd2ea29c53218","first_seen":"2026-01-11T02:36:30.116089Z","last_seen":"2026-01-11T02:36:30.116089Z","times_seen":1,"resource_available":false,"data":null}},"time_used":896,"timings":{"blocked":125,"dns":49,"connect":32,"send":0,"wait":643,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/css/newfont.css","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/css/newfont.css HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 189\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"13b-691458af-774a77ae69265d1a;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 149a3687029733c6b47c41f5e0973181-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.548\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/css","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-27T15:47:03.551912Z","times_seen":144678,"resource_available":true,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/css/jquery.mCustomScrollbar.min.css","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/css/jquery.mCustomScrollbar.min.css HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 5121\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"d212-691458af-95f9b25063fd7138;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 445a584c4fc33052672ab881b5a75420-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.557\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":53778,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ff3907c5693a2d4159c60d220eeb9237","sha1":"45a715565f5d5c4d0b51fbd4cc585e248e81a4b0","sha256":"ca8e1c8edc7779bb8e7406e917078a132b85af2be5a4914b951c4821760e3d91","sha512":"9c2b4638e08b0a502f7998384398fd966faf6681964eb51fcc0d91d9d82dd819db24939eb12c44651c8700d9f32b993a1903e9635dcca593eb9f68ae837f46b1","ssdeep":"1536:8yqf9Bvtpgawoix6swW3GovkInbX7AuFu0/DLR5cdfDQIJVck/7QxzANeoc3kv68:8yqf9Bvvgawoix6swW3GovkInbX7AuFC","tlshash":"1f336a0a5e0336dff78fc569f791779ac5f832634502256cb1d75ca8ab88bb2a43d006","first_seen":"2025-10-20T01:25:07.368183Z","last_seen":"2026-01-11T02:36:30.11851Z","times_seen":2,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/nv6.png","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/nv6.png HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9118\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: fbadbcb5d34ee256355f0cacfbb0e337-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.618\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":9118,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"83fb7ef256773353c39b52708e5618f0","sha1":"a1e418aae7bd9810d062c5edc4c53e46e365fcee","sha256":"aa0518ce0523604c5cbab7d7e015ad9f59f50cf83ecf0bdb99e6e9b14fee7c53","sha512":"63d7e5561f1c4c7eba120ab2173649cb64fbef0964ae95670991cda46b12f9e273ee8f2d1fd30dc9e0e599e0f4fa27f9c69a25b48f8fed6de49f76708ce95063","ssdeep":"192:NEXxbDuosGSRgK0jB9rA03j0QNhuiZgpt7XST7iqzGB:NEhbKfGSRgKWXrn3j0OhuKgpt7RQGB","tlshash":"6912af33fb8d0decca84e1b7d5c82f06fbc89bd45973c03e5f92566524120018eac0a8","first_seen":"2025-10-20T01:25:07.251187Z","last_seen":"2026-01-11T02:36:30.12093Z","times_seen":2,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":664,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asonline.in/images/gamblingtherapy.svg","fqdn":"asonline.in","domain":"asonline.in","tld":"in"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asonline.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 19:13:16 GMT","end":"Sat, 21 Feb 2026 20:08:18 GMT"},"fingerprint":{"sha1":"EB:4B:1C:81:B2:93:4E:7D:AE:D3:19:45:3A:1E:8B:C1:7B:99:D2:57","sha256":"25:F8:9F:59:A6:BF:AC:2D:E2:6C:0F:DF:1E:AA:38:3F:D9:4A:F5:60:43:BD:3F:F1:89:2A:96:BC:8B:A8:16:86"}}},"request":{"raw":"GET /images/gamblingtherapy.svg HTTP/1.1\r\nHost: asonline.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3032\r\nlast-modified: Wed, 26 Jun 2024 07:34:47 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=16Dn9M3VhBc2F0enfe1X89jI%2FxAQvYQ8wbgueM7gXQUI%2FHEO1hsy1HQTKvap60nmxf8WwGqCLrNv%2BvhJEc0Gv71NwG%2FRDCuCy0Ni\"}]}\r\ncf-ray: 9bc106063a7d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6501,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"abb22e14c6ec48ae5142d49b83b3ce75","sha1":"08516eca96838c1ac0617d27ce8ab21089688ec3","sha256":"bd4fdc6a552610e04ccaf2d3d30b27b9877e309aca3e70e2fce436106352c618","sha512":"29bbdb36468147d0ea41c7b4e0b36442b2db559eab2f471513420fbec428ea01ff1c3e42d11fe62c9f30a9544dac32b77efe250b01f93aa23b9c68cf8793ccc7","ssdeep":"96:jvfBglZGXeMKMWLmVYzraFwtpN+JVdznAoxhPEhJJt5ywbiaNaZhhJUbkADnFejM:zBgyXgXaVY/Iwtz+JD5tEowYJXjADqE","tlshash":"dfd1d1038354dbfabeda453d9054686a71e1dc9aa0b0f2c8bb9f1487d05c8d4619c7ef","first_seen":"2025-10-20T01:25:07.265238Z","last_seen":"2026-01-11T02:36:30.122004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/wow.min.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/js/wow.min.js HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 2555\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"20df-691458af-366d0421279960a6;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 9be6dcd2c341b99ead9444c280115def-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.587\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":8415,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (8385)","md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-04-27T16:14:51.472113Z","times_seen":10432,"resource_available":true,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":632,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/message-icon.jpg","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/message-icon.jpg HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 644\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: d11cae92fa2a5f470434b6ac081709d5-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.634\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":644,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b97100997a8f7ea5c719b7b8f8a8841d","sha1":"60c0078466c5dcdae53e291c4a81d1cfdb10fa80","sha256":"11f97a6c40f9a66112bce959a939371ad3be439f06d286e8a0f54a6c3679b74b","sha512":"94b8c871648934e924ac22e665ef6bea7836de726cb3bc65b9577fc0feb339004986787cc10c8cd2c189856af9a2c4a229d059c459af173c04eba24a984c07e0","ssdeep":"","tlshash":"87f04746e7520a12e741583c1cf1a30759658c4843916c1fd309c9d7ac025d09f99fcc","first_seen":"2025-10-20T01:25:07.358137Z","last_seen":"2026-01-11T02:36:30.123812Z","times_seen":2,"resource_available":false,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":689,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:56.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ratanmatka.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28244\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 09 Jan 2026 19:09:22 GMT\r\nexpires: Sat, 09 Jan 2027 19:09:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 113194\r\nlast-modified: Wed, 27 Aug 2025 19:19:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28244,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28244, version 1.0","md5":"9d503278216c2225184a236c64e0924b","sha1":"0c24c621374506ce70403a7473b47acd86bbf919","sha256":"2add7d60b1cd2ab84c9967e23d5ec08eb3fc9635c46855b17d59404dec6b410e","sha512":"fa1aca723eb40b6026aa1d21b36ce2573e4164516c9a0b55ff830a434c3954833a06b1df76236b1d682107df1bd3d263ed19cba854c1a6795566a7091749696d","ssdeep":"768:/6zZ6KBVHUlHvwCa0z1sCvODsIBMTKmJ3GG5x4:yzdKvwtszvdNjz4","tlshash":"3cc2e083d14afb33d0afb77adc52d022e9756bccec7e587a97a900398895c1b0644285","first_seen":"2025-09-02T18:36:17.739185Z","last_seen":"2026-04-27T16:18:47.981514Z","times_seen":8547,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":58,"dns":1,"connect":8,"send":0,"wait":8,"receive":8,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.2.3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ratanmatka.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 30336\r\ncf-ray: 9bc106059b03a0f0-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.2.3\r\nx-jsd-version-type: version\r\netag: W/\"2f955-d5HdHzFzoNYsw5wh0q1x/I2tDnI\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-etou8220160-FRA, cache-bma-essb1270026-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1988290\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YVt8VWSnwUUgyfDqxH0WDIPdJ0fSUd0V0bvmsZggI8YH94aDLKNGL2GX1dZY36VttlTA32VZVt1n8xrNW1ZVvfU6Lir1j%2BR4kGdEVmC8oXw76YCfCSl7X7PdkukpbPxwRgQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194901,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65305)","md5":"3f30c2c47d7d23c7a994db0c862d45a5","sha1":"7791dd1f3173a0d62cc39c21d2ad71fc8dad0e72","sha256":"c0bcf7898fdc3b87babca678cd19a8e3ef570e931c80a3afbffcc453738c951a","sha512":"49b891fdebaca612a8315557cac4ca1bfed5b1e5a28be63715d1ebb741292a0a53a1979e9a1a8779978b58b849badcffdaeb76570d6e4048f631b445f9354150","ssdeep":"1536:ZtGg9JfWgeQK5wlP72qgOfI3N9LsqkVkpz600I4lp:ZtGg9JfWD9kVkpz600I4lp","tlshash":"991482d6f190307d98a7c2499591fefd866fa585d7120aaaf0137b6807ca7c30963ecc","first_seen":"2023-04-05T16:04:29Z","last_seen":"2026-04-27T14:58:52.919143Z","times_seen":6546,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":16,"receive":2,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/odometer.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/js/odometer.js HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 3425\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"2817-691458af-36d9b1f939ec8604;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 2012f8d01663b9dbd14d528d4228db47-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.571\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":10263,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (10241)","md5":"11d31aa38b4b7e29bacc61cc3fe5cdf6","sha1":"b6b3b8730db8ad254f86752040ccb8521a0524c9","sha256":"981edc2c368c79ffac0376dd41ff6bef2b6c0abe2918b91ec16f49efc8ff1396","sha512":"6a93bf0736145d817f5053414bf7960f72f758b5a51d677262ba6e6162c591000e7d08ce6ac77a74a25c10f60919b57c3fc31f761d26eceb4d7162695182904d","ssdeep":"192:HABzlvQK8QecCHAOcu2a+OdI5s/GMb8XuulT:gBhv18QecCxVxz+7dlT","tlshash":"35229680ba11a735835371e151bf0609b7bb99bea404401df67c9dd9be29c38e12bf74","first_seen":"2023-03-07T12:07:28Z","last_seen":"2026-04-27T13:19:19.366915Z","times_seen":1206,"resource_available":true,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":616,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/bxslider.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/js/bxslider.js HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 11253\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"c58d-691458af-204ff004d53a8f53;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: c49b81ecc6599912ec11a6a725bdbddf-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.551\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":50573,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"c2465da4f9b6b98137590c803dfbcf63","sha1":"470fc280cc2313f05fc7986445cd87dec0d8237f","sha256":"6beec69d521bcd4a80746430bb24aff5db863dd28688a443e1bf14c7dcc5e3e8","sha512":"fd94b3e79a84c06f7602b9c3cc46b47db902ae31fcff8308c50d2f64383b10aaac220f81cc0aca125d5cc3e3485287ee925e8715146e325466038bebaa7134bc","ssdeep":"768:aX6/gdowzCxV/QKl/oR//hm2dKZ5os7LzpVECNWmSqCivU7SOT:66OowOx1l/L2dy5oMnfNWVqCivO","tlshash":"7e336245e32c227e5566126cb28dcec4d7fd8236c82694f6eef0dd3ce18096901af9d6","first_seen":"2025-10-20T01:25:07.270868Z","last_seen":"2026-01-11T02:36:30.127966Z","times_seen":2,"resource_available":true,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/css/owl.carousel.css","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/css/owl.carousel.css HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 1003\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"12de-691458af-d08e24e26d8fc0d6;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 334d230c4093e991abe2d0b8f801083d-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.550\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":4830,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ba7c0db3aaf01f6283e54187ddb79896","sha1":"f303f4921da55fd0db57001cb5d50a13f8c6f2aa","sha256":"96f387bd2696edf6bc8a8b955afa8309c46d0feb8a420bd665372a4ffc334391","sha512":"1c83c93ed681479a71cbf226b97aeccf019fcd782b363d087cfe9c3dd427f718d599c77f3f5971ce4a147295718b61d671bed4126522f667baeab70b36d5116b","ssdeep":"48:2meroJIfFfvhfOp64j1I7Z3hQJkCJxneVnYMCrXBVQ8eQcgCZ+FPyvfathPFgWET:25hwmIexMx+q+ATjFG1oVtcV","tlshash":"6ca1fded1211114d54378bb41b9d9a1abe3d94a1ee12008cbaef6b1243dfe58502ff6b","first_seen":"2025-10-20T01:25:07.398852Z","last_seen":"2026-01-11T02:36:30.131679Z","times_seen":2,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/cancel-btn-icon.png","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/cancel-btn-icon.png HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 774\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: c727cbd4034728a15b831a2a3bc07dc0-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.593\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":774,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b31cbb34cdd65ae2d6d7118ddf9148db","sha1":"db826a3c27fc2f2b2fb446e4effd9ca45cc29797","sha256":"3528a20867fd4d8633931987f63ae756e9031712dbedae214d2e00d6e15b8091","sha512":"0de1aceb1f25430a68ea8f7acc6042051380b4dcf40920d4f960992f24b49b7906450fd009c69959c33e2eb6e42de9803f404cb755ce5803563291e6b92589a9","ssdeep":"","tlshash":"3201651ba3746f10e02b713acf82f70c459250444d982b02731a80968d8ec09cda9cd8","first_seen":"2025-10-20T01:25:07.308558Z","last_seen":"2026-01-11T02:36:30.135601Z","times_seen":2,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":639,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/close-clock-icon.jpg","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/close-clock-icon.jpg HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 742\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 77fc84b18dbdd7beadde9dfb4ed62f68-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.610\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":742,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"abaa74a2224f431cb81f3e3ef5bfd678","sha1":"856c361b9ac905920b94918cbcf7f7bd0d55502c","sha256":"036038bba0dd6d6a17b9b25dd868fcdc800f2557d346f2071cbf4d79322f9531","sha512":"c36e5d5e6223e0730832685e98c5ee3545add99875c1017ada19faa181f9265d663681a50f5f3993ee5455e5257cfb4b3098e4a67324cf52d6404c72c801da98","ssdeep":"","tlshash":"9c01442d5b010ac2d6a5ee3e0cb4770e1519cc0e2724e85fa35589d56c130461e4d8c5","first_seen":"2025-10-20T01:25:07.406552Z","last_seen":"2026-01-11T02:36:30.136882Z","times_seen":2,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/jquery.mCustomScrollbar.concat.min.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/js/jquery.mCustomScrollbar.concat.min.js HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 11668\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"9e63-691458af-fd05f289739dba83;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 672f7fa996a2d62c804406e8611ab870-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.601\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":40547,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32009)","md5":"71951b246c4726520dce912a5ac7f03c","sha1":"56906b9b9f41df67063091b7a66c8584d87d748f","sha256":"dd3bda90c210c66fd618bb0c35f4b21f871ce1dae7396053cb4b3a90b3ec51b0","sha512":"ff0b38e4e02096dedcc6fb1a0899a7f8924a89e9b25bb8d712f5ffb01414641b009da55c45241ddea6440eecb7ebff11ea93318aea46ff3ff71a2e22670cb48d","ssdeep":"768:nAGHgQl8dA0unnTUOxZ5ynGi65vqjSDHR17JayK:nAGHUSnTUOxZqxjv","tlshash":"7a03f9e9370534fb12db6f5e441b010963365956a70b8870387d8cb82fb1ea622b7b6d","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-04-27T12:36:53.023671Z","times_seen":3654,"resource_available":true,"data":null}},"time_used":691,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":643,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/owl.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/js/owl.js HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 10137\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"9dd1-691458af-8dffed70ad240a25;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 42446c648b81152fd0a26efe17877e34-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.518\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":40401,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32068)","md5":"ffaa3c82ad2c6e216e68aca44746e1be","sha1":"2fa7c468110fa68f1f3df6718daf971871623ee9","sha256":"83553d22ccd56e5576d544f6ba93475c712b3c02d312893eea2acc16de5fcf91","sha512":"4dc195ca7796b980f4ff1fffec7ec069910501116b826e23651eae4dc8b154acc40a74011eb8aafb60b30d029357b007116a51c90c43d84b91496c50d724deaa","ssdeep":"768:MCcZ1I6+gyfJ78tKOGOrnepjMzZG+uluJe+KSzVc7mThcGP:1cZelJ78m2c58","tlshash":"29038446b3302d2a8a9b91b0663f020bb13b241de415947d797d9ade6d79c4c213fbb8","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-04-27T15:33:28.775407Z","times_seen":7666,"resource_available":true,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/typer-new.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/js/typer-new.js HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1395\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"159c-691458af-5af6ec3215298f2b;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 99b9a93d1fa52e18ddcb20838c3705f1-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.520\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":5532,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"497ebc8ef71e0997ba5fda09be7ef211","sha1":"77855aa2dfb40817b07d80d2f3e121afcdc8f427","sha256":"d20866ac54b17d2205264f37b531fbb71b6a6425d124f551bd4c97a949dd43bf","sha512":"12b50618d086df01d11e6d45f2a7fc97b93e2c62fc668d140a2f5fc9c6cb66451aecba1e4ce682ba26a1fb258294c5f1788dff451f3842d7cde5161cfafc6d8c","ssdeep":"96:gIPU+nZ1yrTn0Y8PKYTy8nO9nYPvySnFknzNjn6M2NhcnB0z/M:7fZ1ij3yTR+YPvXFizd6LO0M","tlshash":"e5b16194fb7869ae4bbf0dba167e90cab67c30335545863b7de64226166029c3313ccd","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-04-27T11:57:24.315835Z","times_seen":895,"resource_available":true,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":552,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lodash.js/4.17.21/lodash.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/lodash.js/4.17.21/lodash.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ratanmatka.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 23040\r\ncf-ray: 9bc106063edd0daa-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"603148ce-11d37\"\r\nlast-modified: Sat, 20 Feb 2021 17:37:18 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1916415\r\nexpires: Fri, 01 Jan 2027 02:35:55 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ajZ7ugml3s7ALS8D6ixdcwMqGSy3sCOVXIxTXgq6jF2H9lVA%2B0Bc06e5FUFruUwOw%2BdspGsLiS7D%2B%2BPaZB0khIJZ9m2qwsF%2FZY9NwpmJQhOaK4xEsf8IEMKPMzZeIvORIKd1z3%2Bz\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73015,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4143)","md5":"9becc40fb1d85d21d0ca38e2f7069511","sha1":"ae854b04025db8b7f48fdd6dedf41e77eae44394","sha256":"a9705dfc47c0763380d851ab1801be6f76019f6b67e40e9b873f8b4a0603f7a9","sha512":"585374e3ce3ab1d28c20fe4b28da6131a5b353b629332094db8e5eb4ade0ff601161b3caf546f5f1e1be96353deaa29109687eaae098ef279f4a6964430d4035","ssdeep":"1536:X9ylPegosd1p8X4Kx2iiC0guaihfaZgb9pL/:X9cVaizgehfaZCX/","tlshash":"6a6371c9bad3f41a93a320b504af048ff13d6ea4688c9500d1a4f4ed7db856ed263e5d","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-04-27T16:19:56.481298Z","times_seen":51805,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":9,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/fc2.png","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/fc2.png HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1804\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: f29e9ae5a8b9d7184ed65ad72424fd22-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.558\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1804,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"29abc7c5f0b90eee48f97516431cb9e5","sha1":"5ebef0d4465663cb16c77bb6ea30b4b25899b123","sha256":"e4fd9821dce971fa6dc6993aa0767637037a64161ed5bdb00e8a54ed86b1badc","sha512":"9abe783cbc035e41e15b7d8ca8c67b9a519cdf6bd7927902fe7a31efaa9ca4590ff6b3598ffc3288be3afbec2f1140ad343120a1b18fcf8cda88bc756241b42d","ssdeep":"","tlshash":"04311a18614dbdd1f690117afcf59713c413594f4e3c841f004da63d384d6529b20adf","first_seen":"2025-10-20T01:25:07.427577Z","last_seen":"2026-01-11T02:36:30.140645Z","times_seen":2,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":595,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/nv2.png","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/nv2.png HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2220\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 20718f9d8ac50b3899039acbb6e6291f-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.544\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":2220,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"80bac4272fb55f89457037af6ceeddd5","sha1":"4d41ccbe31c95a577b4516874dcb77b09d2ef41f","sha256":"c46776ef433c8db943c024b4df13c456b4aa17c6f2241c55763f9d5d7be8cb5b","sha512":"ce8cb9dff3d670d307ca93dd3f471bf8504df66fcd897fa25f79eb1d00a096bb90fdbdacb338efb8656f0c466a9dab6dfe722de2e8cd539920335e465c358323","ssdeep":"","tlshash":"53412b1e87c14705d0424df8469a933e99568a304219da7e0725af6baca72c4c2d1d86","first_seen":"2025-10-20T01:25:07.390238Z","last_seen":"2026-01-11T02:36:30.141696Z","times_seen":2,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/nv4.png","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/nv4.png HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10340\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 8d956ec16023feabcea27ffc03d7748e-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.600\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":10340,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1781175ee6ea99ac3a7c3352a4c1c28e","sha1":"abf95ac5d62a782d5c66d7aa36b66b96649f730b","sha256":"d460dcc346f3fba3c57c592292b6437bfea1e66c46d98ad9078bbfdee53d1e96","sha512":"d9f283b5317913ba6f5e343826808390625b640b6ff62b70aef6fa7e2d397e95d871e2a105cf766f16e471752246735054d11459ec3462c02b59412f2617d351","ssdeep":"192:CHLMDyoieurhCLkzDC5HSlX8kmcS0E+M3TVm2SDbjXzABTZl0dllxg:oLO1buFC2DC5ylX8+S085jcPX8Zb0dZg","tlshash":"b122b04293321b6cc746b03599e566b024dedb039dd787feacc35b3250b93178b32682","first_seen":"2025-10-20T01:25:07.258906Z","last_seen":"2026-01-11T02:36:30.143208Z","times_seen":2,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":650,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/bootstrap.min.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/js/bootstrap.min.js HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 13233\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"c62b-691458af-f8763556a61c49ca;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 329e9639efdadaa689e25182cca234e7-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.560\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":50731,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (50450)","md5":"eb5fac582a82f296aeb74900b01a2fa3","sha1":"fffea98e12e63b66693d567315a2f32392b780b0","sha256":"c5a17d46976d471cf060c5a0e25749a323d6ab20cf0910f40afed81047ba21ef","sha512":"60ad4ccfd52266685b1735e031b9776cee3dc19efc5e3de1f13b5304b147100123501c6c11975777c225e5159b84f3b207ae776c64033551869f2da639166ae0","ssdeep":"768:u2Ybgh0G45THVmcmjWSLlynS/zZ/AcyUr4Y8yiKKkHPPm26RoLQH/nIr6:u2jh03Lo+SbZ/AfYqkm2KIr6","tlshash":"3433b90a725478a201df9466513f450bb73b389eaa0b816cf95d98ed1e7cd89312bf3c","first_seen":"2023-03-07T01:14:49Z","last_seen":"2026-04-27T13:27:13.368117Z","times_seen":2827,"resource_available":true,"data":null}},"time_used":669,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":595,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/aos.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/js/aos.js HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 4210\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"37a3-691458af-e05e9fabe61498e6;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 2f2a6ab91ceb6c7a550f4a892f35ef9d-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.608\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":14243,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (14243), with no line terminators","md5":"a01f9089e8301e9eacfb9d029dc0ca5c","sha1":"165152546121aaaf96c19418908cffe3630a2336","sha256":"4460f1596174d06cca957fdaca2c71e1a377cf1d6f07ee4c75ffb3bf3fc97a03","sha512":"a90277dcdf97d7decdc3ee3546ff80d537a779d7c70a44b6fdc0059df4c131d92af5336ba238b3f3e7c5dcd721c283616a1a54338203864479d47b120aeae80b","ssdeep":"384:3IkfNaayGbHbcggNFUWTgZeo1sa6XCZy54:4kfNaayGbHbfgNFUWgwAslXCZy54","tlshash":"5552e7dc3681f0a617a794f7826f600ff2f14834245e90a0d269c4e67db58ae8673f5e","first_seen":"2023-03-07T01:35:54Z","last_seen":"2026-04-27T15:34:08.597575Z","times_seen":8292,"resource_available":true,"data":null}},"time_used":656,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asonline.in/images/brushes/section-bottom.svg","fqdn":"asonline.in","domain":"asonline.in","tld":"in"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:56.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asonline.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 19:13:16 GMT","end":"Sat, 21 Feb 2026 20:08:18 GMT"},"fingerprint":{"sha1":"EB:4B:1C:81:B2:93:4E:7D:AE:D3:19:45:3A:1E:8B:C1:7B:99:D2:57","sha256":"25:F8:9F:59:A6:BF:AC:2D:E2:6C:0F:DF:1E:AA:38:3F:D9:4A:F5:60:43:BD:3F:F1:89:2A:96:BC:8B:A8:16:86"}}},"request":{"raw":"GET /images/brushes/section-bottom.svg HTTP/1.1\r\nHost: asonline.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 64274\r\nlast-modified: Sun, 03 Dec 2023 02:03:06 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hxcvZdJruZ77ES0j1YaPKU4kYKh9VcufuBkyCHny0wPNEpviy3HicusBT4wGbBZj4PoxRefZs0Fdx5j639fgGvjr0fvnysFixg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc1060ba88b56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153790,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d45b00c10ec93f0df27774ee3b109110","sha1":"f7256c4094d9e5d59def1008bd28c603effd6d09","sha256":"f2534cc7322d62306fdbf282ccc773d51e3cbbb6fb72c25d478da0ee807133a2","sha512":"2f669dd28ef4b546144c081eb874bf73a817bca235aea077f99ba999e9ec696bad6c926a6cc48fd786d53f721a63cf248bb24fcd122978f67783833fdc983f52","ssdeep":"1536:Ydd4is5vMeG1WcfxB0NGR0VNPcFdDZcf9hhHU0LH2/zVAe5wSCxm8p9oO59FJtXG:Bk7RzFL9MI","tlshash":"0ae355c65770d7d49ac6c55eef33cde8260fa0fadaa655c146bbdb48648bcc0f608824","first_seen":"2025-10-20T01:25:07.430681Z","last_seen":"2026-04-09T15:57:25.86506Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1006,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":789,"receive":217,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asonline.in/images/brushes/footer.svg","fqdn":"asonline.in","domain":"asonline.in","tld":"in"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:56.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asonline.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 19:13:16 GMT","end":"Sat, 21 Feb 2026 20:08:18 GMT"},"fingerprint":{"sha1":"EB:4B:1C:81:B2:93:4E:7D:AE:D3:19:45:3A:1E:8B:C1:7B:99:D2:57","sha256":"25:F8:9F:59:A6:BF:AC:2D:E2:6C:0F:DF:1E:AA:38:3F:D9:4A:F5:60:43:BD:3F:F1:89:2A:96:BC:8B:A8:16:86"}}},"request":{"raw":"GET /images/brushes/footer.svg HTTP/1.1\r\nHost: asonline.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 29896\r\nlast-modified: Sun, 03 Dec 2023 02:03:06 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZWepqP7FU3cWkqs333FsSYTBfD0zOx%2BHMhuclcAUu0IKFQUY7N02b9DQlty%2FyAG94xyJzQHXzvP8288ISmEY36QuTg2lspRd4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc1060bb89156a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"81975881515cb363919ca17f8bf60763","sha1":"e316408f3fd1c1085acc7832fa020852331c0544","sha256":"999846b45ae8b80d4839088cbec9bd3cc65fc2fccae1365e7abc2908215f53dd","sha512":"5fe5987c94cbe91de2866f3ff2daefc2716ff55287be1e8755a1ac006c091dd71e069fa203356df20445bda3c4a27d6f80424faf26a24354acfce498d46512c9","ssdeep":"1536:fK8WsQaY4gz3V9bloPUi8vpyXrTuzCeyJ6:f2topJ6","tlshash":"3a7342c49bb0a3e86dcb87e9df21dcec351e54b92b6656c5829bfb44a017cdcb708844","first_seen":"2025-10-20T01:25:07.226274Z","last_seen":"2026-04-09T15:57:25.853163Z","times_seen":4,"resource_available":false,"data":null}},"time_used":794,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":782,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/star-icons2.png","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/star-icons2.png HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 744\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 60ee26c9940c04f205fbde12913fdf24-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.537\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":744,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d1017ef3eb0e17a7141936c188b675fc","sha1":"a879a648cb040daa6fc6adf709395ec3694f3ebc","sha256":"518f6ce6e8fc24295175158e996d782bc261c13d1590d1c175953b13d5cb5343","sha512":"c03ba9c055b95a56a243d49888a52fb7acfc268fc455bf2e0dadd32a32e894c2513dc78774bfb7da6a0eea6497f02a7a6f87dba6d822ec291ecc0ecda5ee880e","ssdeep":"","tlshash":"1c0144ad66400106d215bd3908f4b7054f5adc0c9394aeaef2dbacfa5c52051dd7bcc8","first_seen":"2025-10-20T01:25:07.409842Z","last_seen":"2026-01-11T02:36:30.148443Z","times_seen":2,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/open-clock-icon.jpg","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/open-clock-icon.jpg HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 726\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 8974c8087124f2b4ed6d895a137aac5d-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.583\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":726,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"082aee997928cb5f4f6d2b59dc7f801f","sha1":"aafcd88ebbbf8429cc493f158b6c6fb20a370ce0","sha256":"bdb13e7610d1b38e54d7b3ed9132bd10bc501065daf46c10b22d1098ded3a486","sha512":"15800b05bc493eebf0426d8b7e13ba9d653119cf203d9333e26d2e7d24a89ced1875f3b73ca7f838da2da48c2e9dce89bea9d4de956fa61ca86c9c48edfbe1c2","ssdeep":"","tlshash":"1d01830ceb400bc3d111fa3858da1b1a2d32dc0d23009dafe3059dc11c82240b92aac8","first_seen":"2025-10-20T01:25:07.38199Z","last_seen":"2026-01-11T02:36:30.149607Z","times_seen":2,"resource_available":false,"data":null}},"time_used":628,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/starmatka.gif","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/starmatka.gif HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: image/gif\r\ncontent-length: 435493\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"6a525-691458af-27c9e37b8c460736;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 3399aef7e8e7dc846f5afa7424020db0-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.549\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":435493,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1080 x 1080","md5":"59674e68f2ccc49616fb09c6f6585a24","sha1":"3a8bd0f6d423f66103179435a2386c4f0bd1959e","sha256":"c1a352a7235c8599cf9bbd8a372fd45a2bd01e855120b790e4c2e5e46fa95d1f","sha512":"961767c43953276b455a5729497ca59b6c7bc85b62a32c53978e9fd3b9ab1fb428d94ddbfed098a9ce0ad9cd0b09a0b68b9d4b65199813c768fece8d33c26020","ssdeep":"6144:8NluBpG9OnkhHS6RXgueHEZQMBJbKdda6JEu7GZSpjv8I67pe4anCr+/VK/Ft:8NlqfnkVS6RMkOMBJbqducpjkIid+iFt","tlshash":"4e9423870d279431afa7457b28f602283189728e7cd9b67c8374bf6327cd63b2567819","first_seen":"2025-10-20T01:25:07.42429Z","last_seen":"2026-01-11T02:36:30.150993Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":592,"receive":866,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/apps3.png","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/apps3.png HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 69560\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 9d825a598b6e1a127b28383d9b9d6f22-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.774\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":69560,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f28f4bec950e266fdee348345cdf8c50","sha1":"8184c3308586d1e04974d431d98b92bffa4bca4a","sha256":"4809b8a9c9b498b2b9b403474a21230eb8026c0ca8c4a943c44878f533932089","sha512":"de2f73040e57123b99ad3c605f1cd559e2271848810fc30f4187d138f3799b75978bb2342ab098a7f3e272c9aa19af88a814afe8a7fba83a967ea613676bbb2d","ssdeep":"1536:IuJBZY+ZY88ZLDahsT+6SZYtkaOzCOka1T2b/w/mteGzIh8/3E:tB/Y88ZLDgA+6SZPaOzl51k1d0hSE","tlshash":"83630253b5421c55cc6b16d7e0c24ad7ca12fcf054e7bf6bb1ce99bce40f221a206a61","first_seen":"2025-10-20T01:25:07.447254Z","last_seen":"2026-01-11T02:36:30.15213Z","times_seen":2,"resource_available":false,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":813,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/parallax-scroll.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/js/parallax-scroll.js HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1815\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"22e1-691458af-5078c28f5144a810;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 7b8b5129851320833a6f9d3f153990b1-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.519\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":8929,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"561cdc1a6dd173750e007c678385208c","sha1":"7b235b228eb2d084652307e68779e3a0863fe692","sha256":"6f190f0c4efea59a0dcea69c2d855e7cd37c56e621a506995654604d7a4e422e","sha512":"f236722f63817fcf59c9d98f1dc59faef985ddb79a89b03e7e04af493836ca9527ac1a877b0baca24a88b1fbef8604cd7a518e241162e9fc0a241fb6006771ac","ssdeep":"192:3tVmEaP3FCCCqeekidblijli0K+/g+67PzU6kB0g6:7Hq3Eqeeki07iP3","tlshash":"47022004e4a30521d5e771358f5e024ab72eb51b82a5d928bb0ddacd4f8093493d8ff6","first_seen":"2023-03-08T02:13:11Z","last_seen":"2026-04-26T23:22:27.57209Z","times_seen":430,"resource_available":true,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/fv.png","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:57.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/fv.png HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29886\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 6027002c07e7fc3d6db13e5d10e47d1b-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 1.276\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":29886,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3d74c7e1b54938ef4b98ad440e0099bd","sha1":"8c45ca1accca854704d978456cd512e851ee0eab","sha256":"f38f9988623915b10e45715534e3d0ac1920303f927bcdc867ab97f01a1a00eb","sha512":"f5bad219ab9f5230591dbe12465a1473bb87841b50e2626bd21725b9da50a51d296ab72afb0ed4718383d2e8ab9d798eba43313fbc8fe6c96ea2f8e45be6242d","ssdeep":"768:q52jg1GJFbjgg3cgOw77dK5J7qPVgMyVywGpxVHlc:E2nJlMUxA5JeP2VywMxQ","tlshash":"9dd2f1b824ae0824e614d0874c92bf62ac7d0fad12d63f47c14d2f2e83b090b16fd4b6","first_seen":"2026-01-11T02:36:30.153998Z","last_seen":"2026-01-11T02:36:30.153998Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1315,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1314,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/fonts/fa-solid-900.ttf","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:57.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/fonts/fa-solid-900.ttf HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/assets/css/fontawesome-all.css\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 11 Jan 2026 02:35:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 603\r\nx-powered-by: PHP/7.4.33\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 51fdd0cb1f7474a0194db8c3dd1ab76e-srv-edge5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1130,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"fc10f358967a59750ef6fd9a698e2d60","sha1":"3fc472d167c41a4193625aff84ee6e599b302002","sha256":"16ce845440c38f491f80553aee7a8144dcc0a82c46258deaffdd10a0fa3d2db2","sha512":"9664693058cb0573a00cb8497bd5866f523fed0553a51417caaea300dbbed793f9fe2fb1b06a946284c2c4769f888a8ea9e7789c3d143398d5ae9b2a7735eb71","ssdeep":"","tlshash":"1f21ee1fe641194bf25e0064bfe1eb472b1f2167e85c4f713a69e029c2990f568632cc","first_seen":"2023-03-09T10:43:16Z","last_seen":"2026-04-27T10:37:46.027599Z","times_seen":2601,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Quicksand:wght@300..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Quicksand:wght@300..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 11 Jan 2026 02:35:55 GMT\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1263,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"23ded41fb47b652b7e7e714e3b215b83","sha1":"aa414caf1f019b63b7df78a07bf676821a3e4dfc","sha256":"e18732f4543ff24146d711d8a6a03ecf90cf332a1d7302553a1e1554172ae328","sha512":"3371dbc7a6ed36a488038d6f9211b263ada81ec00407aa87cb774dafcfd6913a7b9cd9655403f60c94c4e44b6c7e281b46cf1aeb56e37133ea1f18655eb22ec0","ssdeep":"","tlshash":"ec21afd1447b7510db831cc122ce7d32ae4ea0547061c97daffd1888ac9ac25739572d","first_seen":"2025-09-05T17:25:09.404285Z","last_seen":"2026-04-27T08:57:00.738105Z","times_seen":688,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":179,"dns":1,"connect":8,"send":0,"wait":18,"receive":0,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/s22.png","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/s22.png HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33140\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 796774c634e92e4cd732c249db551903-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 1.205\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":33140,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b14867a61e03192d8416b9849fb91f50","sha1":"b335d974548b2b2fd8a6a71d977842b1833a28d0","sha256":"556a11b11446203a41db3eb5a11dc90e2e471b5c955a26e68ae4087380807b58","sha512":"4798b058d4d80748d357ed4675dd9c151b2290bf33146e3ff8c01c928073f5dec265edb744b162bee0de6bbb977c8927fb28ee794f1014c36ae9eed11acbfc49","ssdeep":"768:m62Xm9SNVABAIzfJEzfScKg8pJ5+hC49J1csK0oQT5:mlXm98AysB77pJ5Mj120jT5","tlshash":"96e2f12e707b7190b7bb9a1e44317a5e72579b386864a90ac9494a70cf91334ff4cc23","first_seen":"2025-10-20T01:25:07.318519Z","last_seen":"2026-01-11T02:36:30.156386Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1248,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/nv5.png","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/nv5.png HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 446\r\ncontent-encoding: br\r\npanel: hpanel\r\nplatform: hostinger\r\nx-powered-by: PHP/7.4.33\r\nx-turbo-charged-by: LiteSpeed\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: e1f00dc1e73f26ca1f04901f8fe5f538-srv-edge5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1130,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"fc10f358967a59750ef6fd9a698e2d60","sha1":"3fc472d167c41a4193625aff84ee6e599b302002","sha256":"16ce845440c38f491f80553aee7a8144dcc0a82c46258deaffdd10a0fa3d2db2","sha512":"9664693058cb0573a00cb8497bd5866f523fed0553a51417caaea300dbbed793f9fe2fb1b06a946284c2c4769f888a8ea9e7789c3d143398d5ae9b2a7735eb71","ssdeep":"","tlshash":"1f21ee1fe641194bf25e0064bfe1eb472b1f2167e85c4f713a69e029c2990f568632cc","first_seen":"2023-03-09T10:43:16Z","last_seen":"2026-04-27T10:37:46.027599Z","times_seen":2601,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/jquery.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/js/jquery.js HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 32574\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"17b8a-691458af-57e1cfc2af5444fc;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: ecd3cfd3ef7bd4c6032d1c5ef86c45d0-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.521\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":97162,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"0fca26b5a37a66d68d0f4406976be4b5","sha1":"ee000eb654b3bd37185665d3901e93b34ce1aa52","sha256":"8c2812ded6436715279f8fd8db58de307aa39ab0296fe3cf0e879067c51e9b18","sha512":"cf010995991a8f8b50cfb4b466d3b457b0a6addc4f2fd96c48c33d40ac251de400894828ccd99662b13fc9ca25c676ef0aee05faa4910530ff9996d03c411645","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp94:t4J+R3jL5TCOauTwD6FdnCVQNea98HrF","tlshash":"7a93d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:06:51Z","last_seen":"2026-04-27T14:46:09.989805Z","times_seen":6585,"resource_available":true,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/slick.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/js/slick.js HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 9583\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"a2b9-691458af-93e4c961d45108bd;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 923f04aa561945da5b2e2de72f4fbb25-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.592\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":41657,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"b438330ce2262e12198a51de56121cc7","sha1":"e1258b83ad5d4482bc2488db40a2e0f5394f66db","sha256":"66dac1a7d6c6a959d1851f93520bcc4e34aa36d390c6c5721bfe8b25eaa85842","sha512":"6e5f2bb35ae25c995f7fd3bc2ba1822eff8840a7e854d00783b11e14ca880c25c687811f5ccdb9ed72b3008d4bf33d56eb381f9eb2389d05416012cf2bed915d","ssdeep":"768:p1t6WvsBZPKBt3FPmS3+EYykK1GPzpiN9sJTPdATgjZ7NcohC5orG1Tsh:M0tVUkkK1GPz6ArG1Ah","tlshash":"df138409d205372688eb11e5b105c14ea3fbfababd12c0f076c987d6606d81d86e77f6","first_seen":"2025-10-20T01:25:07.285285Z","last_seen":"2026-01-11T02:36:30.15825Z","times_seen":2,"resource_available":true,"data":null}},"time_used":662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":627,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/css/style.css?v=1768098954","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/css/style.css?v=1768098954 HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 44667\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"58498-691458af-7d6cfbb67d5377b2;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 822ef50be7d2a1e31d3c479331bd3aea-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.550\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":361624,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"0c5ba7124a064467d24d250898f7ce8f","sha1":"28d127ebfdf149257d7084551e418fbec4569592","sha256":"22e703c207357dbc2ec933acc8f0a8af28eb88ad8037e6d9ed23c39db40cffe4","sha512":"ce8ea11280b668f28dc8f35d01859344a836bad25622d766b958c4d2266e9ab5390c9d139d397646b0babe2ad4eb30230951ebcb9624d71b6250d107054e6716","ssdeep":"6144:llo2zDrcibS8GeCTwquWqvdniibh/JWAckcscXeoH1sdE8Sof/hlbDFzDecbRTqu:/o2zDrcibS8GeCTwq5Odniqh/JWAckcQ","tlshash":"0f745516b9402444a21f51bebf95fb90563e50e2af5e4de9a0b6781c83d81e403b7ecf","first_seen":"2025-10-20T01:25:07.213685Z","last_seen":"2026-01-11T02:36:30.159401Z","times_seen":2,"resource_available":false,"data":null}},"time_used":892,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":290,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/logo-2.png","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/logo-2.png HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29886\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 7241cab376653405cbd2a26f62fc2479-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 1.284\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":29886,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3d74c7e1b54938ef4b98ad440e0099bd","sha1":"8c45ca1accca854704d978456cd512e851ee0eab","sha256":"f38f9988623915b10e45715534e3d0ac1920303f927bcdc867ab97f01a1a00eb","sha512":"f5bad219ab9f5230591dbe12465a1473bb87841b50e2626bd21725b9da50a51d296ab72afb0ed4718383d2e8ab9d798eba43313fbc8fe6c96ea2f8e45be6242d","ssdeep":"768:q52jg1GJFbjgg3cgOw77dK5J7qPVgMyVywGpxVHlc:E2nJlMUxA5JeP2VywMxQ","tlshash":"9dd2f1b824ae0824e614d0874c92bf62ac7d0fad12d63f47c14d2f2e83b090b16fd4b6","first_seen":"2026-01-11T02:36:30.153998Z","last_seen":"2026-01-11T02:36:30.153998Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1331,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asonline.in/images/brushes/section-top.svg","fqdn":"asonline.in","domain":"asonline.in","tld":"in"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:56.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asonline.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 19:13:16 GMT","end":"Sat, 21 Feb 2026 20:08:18 GMT"},"fingerprint":{"sha1":"EB:4B:1C:81:B2:93:4E:7D:AE:D3:19:45:3A:1E:8B:C1:7B:99:D2:57","sha256":"25:F8:9F:59:A6:BF:AC:2D:E2:6C:0F:DF:1E:AA:38:3F:D9:4A:F5:60:43:BD:3F:F1:89:2A:96:BC:8B:A8:16:86"}}},"request":{"raw":"GET /images/brushes/section-top.svg HTTP/1.1\r\nHost: asonline.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 64213\r\nlast-modified: Sun, 03 Dec 2023 02:03:06 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=owAmY0la%2FeSOlCALo%2FaOYKR6Jaaa8UilNP6Jsp%2FWy03Lgs5n%2F%2B3Gb3mxH%2BWDKAfrWBJPU9bVdugQVs2LTmWgJhweouBed%2BSD3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc1060ba88a56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153788,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3cb47ab1e8e98b5b3559a84a1260aa25","sha1":"4c13345ce21e0ef06d12310a069ff7e5648e9fa4","sha256":"a307f86f1274133f4b70df0359d6ca25320f2ba4972c222e55e844c7a20a6723","sha512":"d0c2481bc17cc6739e70d9c63a2ea722c64d4f8a9a57409b6b70c35aebaeeb7f8973f301575b1b21ebf5e0ce88a88a797235ae068c741dad0ec0a4060ab2fb31","ssdeep":"1536:79a6yk4+fmvUkR/Dh60NGR0VNn7qllOZw27nhfHU0T1iPHrFTR3YQxm8j9sOlWrU:ewsZxaF90zw","tlshash":"cce366c65770d7d49ac6c95def33cde8260fa0fadea655c146bbdb48648b8c0f608824","first_seen":"2025-10-20T01:25:07.378692Z","last_seen":"2026-04-09T15:57:25.845938Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1009,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":794,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/css/animate.css","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/css/animate.css HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 4363\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"15cb6-691458af-4fbf54e1619a5b80;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: f4d01e5ba15e2b2d1ae496453ba0e05e-srv-edge5\r\nx-hcdn-upstream-rt: 0.516\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":89270,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1ffd579e3436810c3755a08632648be5","sha1":"64eacdfaa4369279c8ffac09b7006f0137804aed","sha256":"3a6302649a0360800b6f32cae99cfb5e6678a29b9e625524970c9f6368dc2874","sha512":"d4a067615713b83e37e693e760e93a78149abdeff1e69d59ff78d3a2552409083a87041db9545976a5b3183679e09db87e2f06e6ba720dcd421116de77eb7a8b","ssdeep":"384:I1Q1Ah41W1e2e2fVVVqH6Hb/2KYFCoYTwbB:I1Q1j1W1sH6Hb/2KYFCoYTwbB","tlshash":"b7931d5e184111c447734b29d3de8e28eb3d917318121eee72ce598b4fb6f6853c9a4b","first_seen":"2023-04-27T16:41:42Z","last_seen":"2026-04-22T20:00:54.316507Z","times_seen":72,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/css/flaticon.css","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/css/flaticon.css HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 477\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"778-691458af-42c0f93f7bc9b07c;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 856e9d8d963efbc28e0d9693c5b151fb-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.517\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1912,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a8ac8344c998a225d268f54c3b9c2752","sha1":"bdc7ccf0150e3099ee53ac37fe0b690ea9e2cc0c","sha256":"4568c100f7a78d5c561a94e7c5c52317df3189912a790f8bddd084b3d222e61f","sha512":"edd0f7593938443e2a267c998facb3f40fd6b8694fc6775743047616530b9c6ea4b72b059266f2e219fdbfe0683d2849e1e15b91646c75dc4ee4f3542a4ef0e5","ssdeep":"","tlshash":"a241b4aad12e00408b31af5da79b6240db55b02fd8c0dc26f02d5d4eeff1e288781b9d","first_seen":"2025-10-20T01:25:07.241287Z","last_seen":"2026-01-11T02:36:30.163377Z","times_seen":2,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":552,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/banner-shot.png","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/banner-shot.png HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 94650\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: d8a2082a3470579bf5150cd7653398d0-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 1.752\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":94650,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8a0ea6500e0dc3bdf08e1cb00e7eb38b","sha1":"00dc7bb46876fb2e5b0f725854a973468d62065f","sha256":"bb3647f6b9d4169eab3a4e50c79c440803b5459cbbece2ce52808c3f0dde6e54","sha512":"41c59e3a6c1a5cb3ac110b9d1d9f1fca2f444b2f73d8f962d269a4da29f5208781b7569c8037a1a420adb9434541a3a79757da71bdde587af9a1d74ea1b224bd","ssdeep":"1536:VU2UtpOxc5K03hQ5Y6QNsCObdhYaeKcl3/Xat3uydbQeiSRpIxlFEG2E6KCsjG8q:VULHOxc5KV5YrNs9EvFvuOeiqpIx5j4Z","tlshash":"e39312ff46256017cf2ccfe8b5e9f1e0daf081ba7901ec6066796d8ccb819089106ed8","first_seen":"2025-10-20T01:25:07.311975Z","last_seen":"2026-01-11T02:36:30.164533Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1807,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1799,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/s3.png","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/s3.png HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14448\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: af4af0ee948b624bd182353d3e86d9b7-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.625\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":14448,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5d5873c972be8e7fc5256bb30a0536cf","sha1":"e6563466b0c0c6974d64875d92b7d333f7f61990","sha256":"2e9b957552814e28696762ea89fa3a79327bb0f13215e9ead0caa9dde24cf868","sha512":"53856f9989d94af2cea602a1768b4bedfe1cd5cdc75be606b22f401862beca99ad4dae9e487400311adf9e6f1681adf289f786639b1321fdf707d9bbdd2741e6","ssdeep":"192:+l+sLsmYwZLpYsw2w1Pi4TVes/FU8LAsXLXDsLewFkBK3NoBIz3hUYZYbPxYT7a:hsLsmqswNPi4Tx/FU8RELfFgOOI+w7a","tlshash":"2d52cfbe5c4b8c50a78e7af111cd1f24b29df09653daea8a3b0070a40d77301978ae7c","first_seen":"2025-10-20T01:25:07.371415Z","last_seen":"2026-01-11T02:36:30.166495Z","times_seen":2,"resource_available":false,"data":null}},"time_used":675,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":667,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/apps1.png","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/apps1.png HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 66992\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 0c57962ffbc082c97b1de5d1c52a2d9a-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.833\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":66992,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5124afe6c0dcac3a8bdfd053c0c9965a","sha1":"0a08aab5b939a9cd7b854f83fd96664e4a371728","sha256":"1a25f38ea2b0f07691b6ba4eb1656030d82373a1e41d7c0f5198fbd03921f9e1","sha512":"52071d60a9b24cd3508e021b4775dee3a7af34fc63e1853f96ed60d3321fd4b045e5ad48ca8e97285ada2ba34861eb4a35a5e0bc8da78b47ba09c64a1cbe32f5","ssdeep":"1536:/zix/nuC5XYk4IzMI/iZg0SBDv6A3j7hjp5IFU:/WFBoFIRKZJ0DZ2FU","tlshash":"8f6302d97f021848eb66e138f11f3fbbad12a90cb5912267e2b67fd48dd0b95dd90090","first_seen":"2025-10-20T01:25:07.247919Z","last_seen":"2026-01-11T02:36:30.167701Z","times_seen":2,"resource_available":false,"data":null}},"time_used":881,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":874,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asonline.in/images/gambleaware.svg","fqdn":"asonline.in","domain":"asonline.in","tld":"in"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asonline.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 19:13:16 GMT","end":"Sat, 21 Feb 2026 20:08:18 GMT"},"fingerprint":{"sha1":"EB:4B:1C:81:B2:93:4E:7D:AE:D3:19:45:3A:1E:8B:C1:7B:99:D2:57","sha256":"25:F8:9F:59:A6:BF:AC:2D:E2:6C:0F:DF:1E:AA:38:3F:D9:4A:F5:60:43:BD:3F:F1:89:2A:96:BC:8B:A8:16:86"}}},"request":{"raw":"GET /images/gambleaware.svg HTTP/1.1\r\nHost: asonline.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2479\r\nlast-modified: Wed, 26 Jun 2024 07:28:26 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2FqK4lPZTmBMsFFLaJqR%2Bp0602Y88udnIfeZtbWj%2BWk%2BOgfEb8Nuesnxpe%2BlyInKMYLGsC0oL%2BykM5A0OSRzGtYztg25DiCk4nqe\"}]}\r\ncf-ray: 9bc106063a7b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6194,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fca820136c6f233ea28fbf3b7a13c01c","sha1":"b39566ee44e03fc30666d754ca00c92ee6d78ce2","sha256":"1b1619075293437300825660f2e36fd620807e5c075b16826cb2ad78386fe1ba","sha512":"5e62507d0bbdcdc2417eaaac5102aa05249b35e245f3ac7b5ad5d85f34ba3508b0b0914cb88bead791fc45298659f423ceecc22c702549e4b9c19cdd2d592b82","ssdeep":"96:jzf2UsjcKJLd+Iof690jZI2jdo4Qcn5cVyfJi3fDR1ZMSA5zHPJOXU:n2hXhttPado4DnmMJ+O/5rhOXU","tlshash":"80d12002434487f9fd894b685725a4e972e1dcebe470e1c06bab2021dd8ccd4799c6fe","first_seen":"2025-10-20T01:25:07.255245Z","last_seen":"2026-01-11T02:36:30.169267Z","times_seen":2,"resource_available":false,"data":null}},"time_used":630,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":617,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/appear-2.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/js/appear-2.js HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 897\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"d21-691458af-ea2533ad1d6b6b56;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 7e2357c418ffbeb6f82ef5f41fe835b6-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.538\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":3361,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"793817187ea8eefd1e46dc7cf2a25d7e","sha1":"3e8ac3b92c087251968264892028c246dd542ab2","sha256":"96899a0bd5ff5ecb3cfb56c1a1d49620c9112ed1797ea612d7caffa3fc3746bb","sha512":"d0bac24fe58c42bbdc3318e99e7df03f33a2ea30420f6f63eebae6e84072a80ea04c4647bf699cb90d07c8d49145423a22c058f1a030d5f2e1a1910d37675c42","ssdeep":"","tlshash":"c961eb4c78e32851183b703e5faf2208b13a82a3120acd8179dc5a987fe1d6995dbbd5","first_seen":"2025-06-30T17:26:50.186824Z","last_seen":"2026-03-10T01:52:24.032481Z","times_seen":12,"resource_available":true,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":571,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/script.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/js/script.js HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 3991\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"6cae-691458af-83159c7e04a35884;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 05347ffaa88e408d2ddf255c652e5c0c-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.545\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":27822,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"d9daf46130c43af7e45816cd8d5b8da9","sha1":"a9d2d3e90b4bf95f4bdb8d2db4f1185437728afa","sha256":"fb5299a2f2bb6edb7a5413b82037630767e85a572221e60637b89993f2e6c2b2","sha512":"f7bd4ce494fdd8daf890ab68fe0f15b0767a981b9d691407efda2dd940faabca26f7b75fb763393000baf28d31f57eed569d2202933e6cd60022fffc01b926f6","ssdeep":"192:V1qTjSpEdfMjbjaOmOKFAaBIXx+PRluR4nVdTkU/cPPKgdwwBKN5+po/qq2y+9gP:qfd+eR2y+9QFel3WejbL/q5","tlshash":"47c246c0fb5c24a7813a70599c2f61c8561d4431fd126cbbfcbc25641a9ea3f12aae7d","first_seen":"2025-10-20T01:25:07.361535Z","last_seen":"2026-01-11T02:36:30.171611Z","times_seen":2,"resource_available":true,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/css/fontawesome-all.css","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/css/fontawesome-all.css HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 7736\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"9bc7-691458af-53d5581502a80ec3;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 174e5cf8aaf53392654ae08cd7cad7f7-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.530\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":39879,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (39879), with no line terminators","md5":"df8b731321a8ef53ce9ce920e60ae2c8","sha1":"17b54eed289b177e11a015509d30a4b54d49eb39","sha256":"7c6a05b7cabe80717b2e4d7076b37304e889d71b0dd3874ef341d24feb3dff0c","sha512":"464737cfcc1020ef9293c7c2bdeaffcc3b6c36ca1b11cfe45b44ad0a398025d7c458504ea1ba8ac816da462fe6133c0eedb1a18742fc8174d8d53eacf0242e50","ssdeep":"384:A6zF6YwMx7qLuBieVSsZ3SfBEL+onwXoeGShajrmgEe:j6YPx+LuonsdSYJnwHGma2gV","tlshash":"9903e9b8e30d10a08715e4c7e780b380e73afb3da5815da9e1027d5eabd1669d2c4bdd","first_seen":"2025-10-20T01:25:07.36487Z","last_seen":"2026-01-11T02:36:30.172879Z","times_seen":2,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":576,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/fc1.png","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/fc1.png HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2338\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: e693eb1fd5af05b4c24db4111e83f63b-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.622\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":2338,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"957e94c9d82b1d0c9c2c2e2cd86c13a8","sha1":"2f8819c3f548664607ee824fa08b4f71efee942f","sha256":"7ba0c99b90669637b61254e5abbab25ab4c9a8060c20ae757bfa4eece94b4eec","sha512":"9110439c99d4ded0441f63b04406b80473d39566194538cf0e28097252d6d7edb5899b6c62bbc98e96bb3b9a340cb8e0c8d7b06693783281b5b638240f927abf","ssdeep":"","tlshash":"c5411a968e6c8ebdf5b3bd3429385f0bbc5990fc6170e4a6722902511e5205b826cdc2","first_seen":"2025-10-20T01:25:07.385559Z","last_seen":"2026-01-11T02:36:30.173944Z","times_seen":2,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/js/jquery.barfiller.js","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/js/jquery.barfiller.js HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1521\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"1864-691458af-f79a4abf645ff68f;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 5f5d496ccd1d5fbbc92b20bda635919c-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.537\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":6244,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"d4f28b59b369febb6ec02c027b36c2d8","sha1":"5c1e57f938a74075a79be5b833246bfefe08ffff","sha256":"868a2e132beb3a36c050503ad0ce45ef3f30cdd53a443a938e9f617c800c1ee8","sha512":"b667c57fe6cf787d0c884b1ecb4e17fe2e7a5a8f886b8733333062753e06ae62ee33da25bbd8df7eaaf73d18151076f1f5244645573ffa4a52936b79d8a57ff8","ssdeep":"96:iufMG1fRhZ4eZY1/5d1dezds2dPrdqACE95+7cWXHTmdkiN3EBz:rMk5hZRY1/PLeZs8PBqACE9BW3Tje3E1","tlshash":"6cd1bc5eaef72e011563f26c2bdf90c8317584272a07de14bc2d32549f0d72866d6be0","first_seen":"2023-03-07T12:23:31Z","last_seen":"2026-04-27T08:49:40.859867Z","times_seen":489,"resource_available":true,"data":null}},"time_used":570,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":570,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.1.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:57.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.1.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ratanmatka.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:57 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 59572\r\ncf-ray: 9bc10616a82d0daa-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"5eb03e5f-e8b4\"\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 251113\r\nexpires: Fri, 01 Jan 2027 02:35:57 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RVNmva%2B5QRrLOvas5b2uCV4fnGTdOFOsH9m%2FV5dvi3Eh9l3A%2BPtKQJhlTv3JRIKsnIILdXG%2BrEMxcvvSZI7SM4nUO5oXzZRnTNi3%2F3Mg5n2drscaxOFM%2FkRujDF8MaWzD%2Bqjyj6X\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59572,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 59572, version 1.0","md5":"18d2347ab2a9f40ca2247cdb03303d84","sha1":"8aba5b59c5aa7f548a1fa663f02f3cdd3757bb52","sha256":"a83079124373d924ad1402fbc08d2e24d0043234d4c26565f1c368745f55f5d9","sha512":"7684b000c722c0ae6f36d877d8caa86d40111ba87b2a6e1e52248ecb3242a8e4741dfacbb6ec1a345e277caead01732d684af8567bb7f9d42e131a8ba5055daf","ssdeep":"1536:6MKVEWaNHBWaLsrqIlxKu98nQZh+pMqGvSQfrs:5KS5NAtdUW0QbZpPs","tlshash":"ab43f1604ccd490aa04589b64f1d03370b74da7c3cfe991e6483f35e5e92b1b32a8a6a","first_seen":"2023-04-09T06:04:23Z","last_seen":"2026-04-27T13:19:24.582649Z","times_seen":2334,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.1.0/css/all.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.1.0/css/all.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 8071\r\ncf-ray: 9bc10605aab94e4c-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e5f-b277\"\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 204983\r\nexpires: Fri, 01 Jan 2027 02:35:55 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pdrGpUza0zqMR5I6CKUC17EZ2Al7xlAYI0mheU%2BbqDaw3FQ9YiSwJxxaZO%2B1zCf24xee5pcaHHvR2yxdqiAAsDZPOq11BxEFHseBiok%2BXAY1PAw5x5fFp%2BN5YnBUmEq8x7Qu5MsR\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45687,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (45507)","md5":"826c57385f3d35cfed5478ba7b1f5c03","sha1":"20d2d431065fc6b38c1187eda564639527e2428e","sha256":"ce91e2144ea27f82292ef2c87c5d9e1d0b9994df63836130293865aca18fc550","sha512":"6a3854620f090004c315e8ea6de37b29b176cf23db6eacf4e1d80e2f219c60493f3090f757e1c98492cabc9d95565aabaf83f01de1934d6c5b23ef2d780eec9f","ssdeep":"768:j31oUM1Q6VgU2lzkuT/aMdj3hSvWQB8/j:aUMS6VgLz/ms4e3L","tlshash":"17230cb8e54c41d6a731c04fff82b2b861baf73ce5854d95f00e691c2ad26a811c5fb9","first_seen":"2023-04-07T08:09:54Z","last_seen":"2026-04-27T13:19:24.517503Z","times_seen":3329,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":4,"send":0,"wait":14,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/css/odometer-theme-default.css","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/css/odometer-theme-default.css HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 425\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 18 Jan 2026 02:35:55 GMT\r\nlast-modified: Wed, 12 Nov 2025 09:51:43 GMT\r\netag: \"f02-691458af-f9b6d5063f8a5b22;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 30ccedb80a37665d813ef2fb73f59985-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.545\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":3842,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6d7f96a5725bbf9d94f665f4304db762","sha1":"e6229a886370b277768e1e9c7dbfd3c47bda5c96","sha256":"8d4a96db15ada36e910c2057156e39c766fca0850387ab1852ad89fc8f5ea4e6","sha512":"ad1677c419017b4f5a4a3fc118460e25f4a7a1205058bbce706df413a982ee711cf10355f769211ac43096f2c075260c7af7e8dc8a9204cc79488aa51e7f3838","ssdeep":"","tlshash":"a181c1190f61032463393406f7d92ba1befcb5521223d69db71a944bce13db9c288e27","first_seen":"2025-07-01T03:06:35.624908Z","last_seen":"2026-03-06T15:21:03.784863Z","times_seen":8,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ratanmatka.fun/assets/img/hws.png","fqdn":"ratanmatka.fun","domain":"ratanmatka.fun","tld":"fun"},"ip":{"addr":"77.37.83.109","port":443,"asn":47583,"as":"Hostinger International Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ratanmatka.fun/","date":"2026-01-11T02:35:55.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ratanmatka.fun","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 06:29:47 GMT","end":"Tue, 10 Feb 2026 06:29:46 GMT"},"fingerprint":{"sha1":"15:3B:23:2E:27:5B:44:07:7B:2D:A5:7D:97:67:1A:70:97:EF:DF:4B","sha256":"E3:F4:0F:5A:C9:14:24:7C:B8:AD:47:36:03:71:6F:18:23:03:F9:87:30:EF:D9:E2:CF:7D:5C:6A:97:BF:8E:0D"}}},"request":{"raw":"GET /assets/img/hws.png HTTP/1.1\r\nHost: ratanmatka.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ratanmatka.fun/\r\nCookie: ci_session=02e8e8ed833bfa2f3ef8bb30b65b7499deac825b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 02:35:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 129338\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 62564b7763e5e8ee79b8b70cfa27a580-srv-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.995\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":129338,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"499497d3b2d6fe57bc5b53607f8c1d3b","sha1":"6489c27c4fb5fd7e88645aeedfc0d2600e5b42ce","sha256":"67a350506cffe58a9e3b92e8f0a1dd1054efb6181ea05f9fca2acc551bd7733f","sha512":"2c2dafcf5e5ef8ee8d9551696e5a76c4e59bf8954fd40a68deb91622c4ed131298a4b6add56e06b7d00027fc26cfd0d1b962bc057598139faf2ab3b9a7d06f27","ssdeep":"3072:sTxOLgrxwCoHbacaRv7qRpmnf1df76aNZDkPBKA8FTG01rHcIa:bQxUHbkRjqRpmff60ZDkZGTFNU","tlshash":"92c312c0ac6de2e6ef60d47315d97fae8877db52268683d6555cfc090ae7007324eea0","first_seen":"2025-10-20T01:25:07.207399Z","last_seen":"2026-01-11T02:36:30.177133Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1049,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1036,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"ratanmatka.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}