{"report_id":"ad7a6021-cb4c-4d68-a62f-e10931a8a06b","version":6,"status":"done","tags":[],"date":"2026-01-24T13:40:22Z","url":{"schema":"https","addr":"merybet.icu","fqdn":"merybet.icu","domain":"merybet.icu","tld":"icu"},"ip":{"addr":"104.21.36.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"merybet.icu/","fqdn":"merybet.icu","domain":"merybet.icu","tld":"icu"},"title":"merybet.icu/","dom":{"size":164,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a8bc83e9b210a1e39a07f65a58b9d7b0","sha1":"38b8e1cc06bdf0385a755941c8e9e28ceef5caf8","sha256":"f0b6c08d8e1ed88d828dd947b1ebf03075b1a4c05e78cb7c45d0a063e3df4212","sha512":"97fe6ef87d6ebcbbb4deda725883b3cb342db4da21c99939f151bc74d83746688080f9caa1a5d5c756a4772684d364e064f280a79ab11ed1ff0157df43751067","ssdeep":"","tlshash":"a6c08c4aac838c5a84885ec198d1f5184188f21ab120dc00fdfa70a42e8aace1842ac0","dom_hash":"domhash70ec4ef15b0c0deaa912a572dbde8d92","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"merybet.icu","fqdn":"merybet.icu","domain":"merybet.icu","tld":"icu"},"ip":{"addr":"104.21.36.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T13:40:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T13:40:01Z","timestamp":1769262001,"ip_dst":{"addr":"104.21.36.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":49496,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-01-24T13:40:01.426784+0000\",\"flow_id\":1541402755425177,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.35\",\"src_port\":49496,\"dest_ip\":\"104.21.36.122\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"merybet.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":913,\"bytes_toclient\":1654,\"start\":\"2026-01-24T13:40:01.418713+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"merybet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"merybet.icu","ip":{"addr":"104.21.36.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-15","domain_rank":0,"first_seen":"2025-07-16T14:08:29.795922Z","last_seen":"2025-07-16T14:08:29.795922Z","alert_count":8,"request_count":8,"received_data":363417,"sent_data":3631,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"merybet.icu/assets/css/Navbar-Centered-Links-icons.css","fqdn":"merybet.icu","domain":"merybet.icu","tld":"icu"},"ip":{"addr":"104.21.36.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://merybet.icu/","date":"2026-01-24T13:40:01.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"merybet.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:30:30 GMT","end":"Thu, 09 Apr 2026 10:23:27 GMT"},"fingerprint":{"sha1":"D4:80:C7:46:FB:98:B4:C6:5A:90:71:2B:F0:73:EC:69:30:C9:CB:88","sha256":"E2:A3:3C:8A:DC:C1:22:0E:4E:31:5B:81:C5:AE:55:BA:C2:45:3D:CA:F1:20:21:A9:DA:D4:73:0B:69:45:2B:B0"}}},"request":{"raw":"GET /assets/css/Navbar-Centered-Links-icons.css HTTP/1.1\r\nHost: merybet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://merybet.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:40:02 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 15 Jul 2025 12:28:29 GMT\r\netag: \"3c7-639f6e9ea3a82-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 310\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G9lg5ZcCz%2FT1f8AQUN6Qbg0WTg23L3o8zCK0r33a48dkCYa6E0ZnSjsZgc1wmuNu7O8AHeIAg5o5tvAdKWjCm%2FlkB8f7Ta43Tw%3D%3D\"}]}\r\ncf-ray: 9c2ff0b75cc2569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":967,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"befd8a398792e305b7ffd4a176b5b585","sha1":"9e667bf3ca36885674a0410d0a4c5eb9cfe513c4","sha256":"e70b03eec37d9c4ba1bcdac4af99a47e0281860c88f015c2902e0b0949445b27","sha512":"4052b10be6044df1e7c8ff2d5a11a9ba9059171bcfecd1b7cda57ed5c489377f36a652b3fb4939f32087c322c09dd8594deea97d4a1e71390105c114e4bf4924","ssdeep":"","tlshash":"09110be8d5b5ab282f5a51c12a0fdfc8222b148cccd6cd1a65d75c1938b4e792813af3","first_seen":"2023-05-28T20:08:41Z","last_seen":"2026-05-18T22:01:11.257039Z","times_seen":122,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"merybet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merybet.icu/assets/img/logo.svg","fqdn":"merybet.icu","domain":"merybet.icu","tld":"icu"},"ip":{"addr":"104.21.36.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://merybet.icu/","date":"2026-01-24T13:40:01.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"merybet.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:30:30 GMT","end":"Thu, 09 Apr 2026 10:23:27 GMT"},"fingerprint":{"sha1":"D4:80:C7:46:FB:98:B4:C6:5A:90:71:2B:F0:73:EC:69:30:C9:CB:88","sha256":"E2:A3:3C:8A:DC:C1:22:0E:4E:31:5B:81:C5:AE:55:BA:C2:45:3D:CA:F1:20:21:A9:DA:D4:73:0B:69:45:2B:B0"}}},"request":{"raw":"GET /assets/img/logo.svg HTTP/1.1\r\nHost: merybet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://merybet.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:40:01 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 15 Jul 2025 12:28:29 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wY40GGkh40ZVfyzJLYVzyOpxJKOOzcIQ0qMC28VgBtGOKPiklb4He6ba1nyOYAsgWO6hI2MlvB8dpPEvAZ9rM8ufxAAz%2BSXSVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"4f62-639f6e9ea6d4a\"\r\ncf-ray: 9c2ff0b75cc3569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20322,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"db9c838b53c3efd874c0487b7f257720","sha1":"bf1350e39afff6e61ce5178d0e810d418957b1c4","sha256":"60affc6d5317d1eb86177ae1e5f939f6e31ccafcf25b42424982979f2cf76229","sha512":"eb034a7b0d57617cf00809c04193c9742bae5061f66674369bfa990d7ce7cd2b39d371f4368242b5bb87c3ed2c8a3f34da3bda2e017d834c32032056841feb7d","ssdeep":"384:kWL9JcEJYg94v474GzH0/0TCJ6IQM7Zm44Gg6eT/Nzifj:b6EJYguQUGzH0/0T/Il7c642","tlshash":"7792995b636d679c694e1380896722d33291d8c7d285f38cb3e7fc16c5478b05aa8bb8","first_seen":"2025-07-16T14:08:34.322711Z","last_seen":"2026-01-24T13:40:25.787114Z","times_seen":3,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"merybet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merybet.icu/assets/img/ethereum-eth-logo-full-horizontal.svg","fqdn":"merybet.icu","domain":"merybet.icu","tld":"icu"},"ip":{"addr":"104.21.36.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://merybet.icu/","date":"2026-01-24T13:40:01.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"merybet.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:30:30 GMT","end":"Thu, 09 Apr 2026 10:23:27 GMT"},"fingerprint":{"sha1":"D4:80:C7:46:FB:98:B4:C6:5A:90:71:2B:F0:73:EC:69:30:C9:CB:88","sha256":"E2:A3:3C:8A:DC:C1:22:0E:4E:31:5B:81:C5:AE:55:BA:C2:45:3D:CA:F1:20:21:A9:DA:D4:73:0B:69:45:2B:B0"}}},"request":{"raw":"GET /assets/img/ethereum-eth-logo-full-horizontal.svg HTTP/1.1\r\nHost: merybet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://merybet.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:40:01 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 15 Jul 2025 12:28:29 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WyS1ZhxqFt69f86Q6qYxIEtoFFsg4jy34Y5NPGvr2BO7vK5U7Ok7PI0rmVIClPE9H9w0GXpv2vLZvGXYPThmeRVh0msLhzo45Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"d1d-639f6e9ea657a\"\r\ncf-ray: 9c2ff0b75cc6569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3357,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5cf7324a952b17ab5d4b06930061ee22","sha1":"aac22279841ce47a1fce72f32b5192cc7ecc28b3","sha256":"58ec533cc0bcd16f3f8f5dd451393242deee5edca1ec268f4410b5c668fa68d5","sha512":"013ea01cdc3c6820549b3a8a0ee2cd254efa20d7c1c2603502a790e8f33e34e9190bf56c6fca035882fd62ccdca5e3dda515c259ebaf89f5c8c17a758f58c0a8","ssdeep":"","tlshash":"1e616cb7c7908bd2c8a9439441e47c5d2161e9f130f4a2d8db536e2be80c8f755784db","first_seen":"2025-07-16T14:08:34.32597Z","last_seen":"2026-04-18T19:17:44.508484Z","times_seen":22,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"merybet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merybet.icu/assets/img/solana-sol-logo-horizontal.svg","fqdn":"merybet.icu","domain":"merybet.icu","tld":"icu"},"ip":{"addr":"104.21.36.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://merybet.icu/","date":"2026-01-24T13:40:01.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"merybet.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:30:30 GMT","end":"Thu, 09 Apr 2026 10:23:27 GMT"},"fingerprint":{"sha1":"D4:80:C7:46:FB:98:B4:C6:5A:90:71:2B:F0:73:EC:69:30:C9:CB:88","sha256":"E2:A3:3C:8A:DC:C1:22:0E:4E:31:5B:81:C5:AE:55:BA:C2:45:3D:CA:F1:20:21:A9:DA:D4:73:0B:69:45:2B:B0"}}},"request":{"raw":"GET /assets/img/solana-sol-logo-horizontal.svg HTTP/1.1\r\nHost: merybet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://merybet.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:40:02 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 15 Jul 2025 12:28:29 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uRhIUicHnBrMlA6249vpTA2261xIQBeCMDmbIA4%2B9HbQbRgBu7r271tTOT3MYWBPlqR6hgv2aJWbWdt7LzdbWZ4qz%2Fh2YxNFWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"102f-639f6e9ea7902\"\r\ncf-ray: 9c2ff0b76cc7569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4143,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"790524ba978065ede1786e366ca74155","sha1":"dea7f2b1803a3db4b313849b8ba9fc94bf5ba3d4","sha256":"d463c4ef911bddb2fe599aac00ee9323d2afbc05eb52c83afd97531553974aa4","sha512":"55a12a1cba1d3f1ee65186cb5451b16f39c910aab59c85b333e229fd307e30ac66182ca298630c33bcf986a816f04fbfa0bdc29c103658a358442c3216d3c9dd","ssdeep":"96:2vfaDjZC6qIFOkUXX3Lnu+OJaOp2Jmw7B9FOGn3EgtSX2fg3YAs:uaDs6Maw9xweuYAs","tlshash":"6681e2768326cbe6ac99d33c231614a4f257dd87b858e1e46b863846ec8cce3551c7ce","first_seen":"2025-07-16T14:08:34.321505Z","last_seen":"2026-05-29T11:20:54.799866Z","times_seen":9,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"merybet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merybet.icu/assets/bootstrap/js/bootstrap.min.js","fqdn":"merybet.icu","domain":"merybet.icu","tld":"icu"},"ip":{"addr":"104.21.36.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://merybet.icu/","date":"2026-01-24T13:40:01.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"merybet.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:30:30 GMT","end":"Thu, 09 Apr 2026 10:23:27 GMT"},"fingerprint":{"sha1":"D4:80:C7:46:FB:98:B4:C6:5A:90:71:2B:F0:73:EC:69:30:C9:CB:88","sha256":"E2:A3:3C:8A:DC:C1:22:0E:4E:31:5B:81:C5:AE:55:BA:C2:45:3D:CA:F1:20:21:A9:DA:D4:73:0B:69:45:2B:B0"}}},"request":{"raw":"GET /assets/bootstrap/js/bootstrap.min.js HTTP/1.1\r\nHost: merybet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://merybet.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:40:01 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 15 Jul 2025 12:28:29 GMT\r\netag: \"13ae7-639f6e9ea32b2-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 23744\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ok%2B1NNhzc33dZrm60YnX6tamhgydJZOYBs08JQs0IlJWTdlYpXxla22QCdtqF2zk9KkbYq5cZ4B%2Bk3sVEbxorNoY8RhHxvyP9A%3D%3D\"}]}\r\ncf-ray: 9c2ff0b77cc9569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80615,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"d2f2ef0051cf284637b29bb4678c1b81","sha1":"1a18643241dea9ac7c190029ea6d8efbd73e5f84","sha256":"66af34efad8ad6be518c955fb42163a9f1178a2f51b6b16e7864a46973b04349","sha512":"bb64a1f3989866a47001e1b4601dbfb448c4454bbc817ba98c59cd94cc97f0c139baf6af0a16bb9f23e9872a3b6149ee555dce23ee3254264151c8a551122306","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU17X:VwXza3YCl45wZODZTbYRX","tlshash":"0d73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2023-10-25T02:34:36Z","last_seen":"2026-06-06T23:59:22.031889Z","times_seen":469,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"merybet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merybet.icu/","fqdn":"merybet.icu","domain":"merybet.icu","tld":"icu"},"ip":{"addr":"104.21.36.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:40:01.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"merybet.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:30:30 GMT","end":"Thu, 09 Apr 2026 10:23:27 GMT"},"fingerprint":{"sha1":"D4:80:C7:46:FB:98:B4:C6:5A:90:71:2B:F0:73:EC:69:30:C9:CB:88","sha256":"E2:A3:3C:8A:DC:C1:22:0E:4E:31:5B:81:C5:AE:55:BA:C2:45:3D:CA:F1:20:21:A9:DA:D4:73:0B:69:45:2B:B0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: merybet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:40:01 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 15 Jul 2025 12:28:29 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0oF28A9xAItJHfsp2NGoxGovMY0%2Bml%2FJ3an9DvoNoZ27bU7FFJv5UX3D7YKeP6R7LH95GuwRCDi7lcwf3yTNHY8p2s%2Bd0YexVqQN\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c2ff0b50948c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":8128,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1544)","md5":"e87854580a9091adb512dc658d131609","sha1":"46b35ee510418e99e4c18d169e4c51dee5804fa1","sha256":"1b16fc183e5572aeabcfa82084eaac03d3ad53abe207e21b9220d8e47f79cf94","sha512":"fbf5b7ae131313fb1e1eb5b29f4a2cd935b7a4c4af572bd9af9a459e98eaefa298dc730a4f6f8dc8ab5a5d5501fa4a5adeb61ac1868a5c48678348014a485cd0","ssdeep":"96:7njiROCpn8PSZdxUNOllg580FiQrh8yTc1VjlWb2oiuRs733xXKsE2eMrmM:7nGcCps7iQrHTakb2oDq733RKsteMyM","tlshash":"2af1a6e261f0225f408395cbbf32cb196b8e809fe247494475fd46792f86c85ed23ca8","first_seen":"2025-07-16T14:08:34.320392Z","last_seen":"2026-01-24T13:40:25.783713Z","times_seen":3,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":75,"dns":56,"connect":1,"send":0,"wait":200,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"merybet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merybet.icu/assets/bootstrap/css/bootstrap.min.css","fqdn":"merybet.icu","domain":"merybet.icu","tld":"icu"},"ip":{"addr":"104.21.36.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://merybet.icu/","date":"2026-01-24T13:40:01.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"merybet.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:30:30 GMT","end":"Thu, 09 Apr 2026 10:23:27 GMT"},"fingerprint":{"sha1":"D4:80:C7:46:FB:98:B4:C6:5A:90:71:2B:F0:73:EC:69:30:C9:CB:88","sha256":"E2:A3:3C:8A:DC:C1:22:0E:4E:31:5B:81:C5:AE:55:BA:C2:45:3D:CA:F1:20:21:A9:DA:D4:73:0B:69:45:2B:B0"}}},"request":{"raw":"GET /assets/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: merybet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://merybet.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:40:01 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 15 Jul 2025 12:28:29 GMT\r\netag: \"38dc7-639f6e9ea2ae2-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 31210\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XlrYNC2vNyEB2Y0UJjVLWjshgW9ySkTLw4qGMgsNxPBv1Ry8z9ySUESc6t2lI2dRZJU7nAq%2Bb%2BNNWyx0333MKMtez7CDnu2bJQ%3D%3D\"}]}\r\ncf-ray: 9c2ff0b75cc1569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232903,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"308c077484b2e83ee2beea329dde81e1","sha1":"0c731e2cfcc3f28985482a1683c3f2c35bf3c403","sha256":"3b4b080b4438819e21e302be4b5a4c02b6316da27495604c610f25d3c165225e","sha512":"78b69e4914e73d4daf9e1c07bfdb85c98e52d295242c6bafdfb021aa9813bcd25d410a9e00fa98f8feee3be54684bc2487b6a5a51c46ce9e4d0ffb3820138dec","ssdeep":"1536:m9YnIWbn98fhRfvO5wlP7Qy9P3CV98IsYRElV6V6pz600I41K:pnIw98fsV986I6V6pz600I41K","tlshash":"833482d6f590317d9ca7c1499681fefd8a6fa985cb1209a6f003776807cabd30962dcc","first_seen":"2023-11-23T14:40:25Z","last_seen":"2026-06-06T23:59:22.013482Z","times_seen":449,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"merybet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merybet.icu/assets/img/bitcoin-btc-logo-full.svg","fqdn":"merybet.icu","domain":"merybet.icu","tld":"icu"},"ip":{"addr":"104.21.36.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://merybet.icu/","date":"2026-01-24T13:40:01.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"merybet.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:30:30 GMT","end":"Thu, 09 Apr 2026 10:23:27 GMT"},"fingerprint":{"sha1":"D4:80:C7:46:FB:98:B4:C6:5A:90:71:2B:F0:73:EC:69:30:C9:CB:88","sha256":"E2:A3:3C:8A:DC:C1:22:0E:4E:31:5B:81:C5:AE:55:BA:C2:45:3D:CA:F1:20:21:A9:DA:D4:73:0B:69:45:2B:B0"}}},"request":{"raw":"GET /assets/img/bitcoin-btc-logo-full.svg HTTP/1.1\r\nHost: merybet.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://merybet.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:40:01 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 15 Jul 2025 12:28:29 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zi37yaGD%2BUidM2GQNXPVqMBGYFbDWUPvN8mzOE%2B%2BtsQWXmF7qGeiVhdRPtgtosw6l5%2FoGhZZ6nDsmW6x8MYdmDS9K0xcaNOx4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"1c1c-639f6e9ea51f2\"\r\ncf-ray: 9c2ff0b75cc4569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7196,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d5b0485cd6aee98e7cde3ff5057a463a","sha1":"7572418546e0382f9a691e57004e1346f2d0dadd","sha256":"547f52b809c2accdfa28e3e790c046be400be7f80a354e51b3f445fb50be0a21","sha512":"3a6fb9e72afd8757923ff178761ab3caee5a982d980bd1136c88e42540a9af936dcfe095c0a32b3d78cd017e724a05a14578e57cc7e795aa2c757f513611fb4f","ssdeep":"192:cz+P6EjX62uySRAHFmPrfthcRlXl1N+aRXets/9XEC:c/EG26CHSrfthM9+aRN","tlshash":"fbe177a8cba38978cec907f446b45d113aab441f7679e5eccb18e571e862cf940244de","first_seen":"2024-12-20T10:58:56.868453Z","last_seen":"2026-05-26T16:48:43.272705Z","times_seen":31,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"merybet.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}