{"report_id":"05e76b13-243f-42be-8c9b-b9d20ac3cdc5","version":0,"status":"done","tags":[],"date":"2026-07-24T11:36:52Z","url":{"schema":"https","addr":"xposed.casino/","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xposed.casino/","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"title":"Xposed | Decentralized Web3 Gambling Site with Provable Trust","dom":{"size":41476,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (41476), with no line terminators","md5":"fc2f45795786ae25486fa248f4354786","sha1":"84bdcd3a455da49cb25db3e228139cdf60b3d489","sha256":"18216efca776b0e7e8df12f021aa13df4c44237ba69ecbbc67006233c89f9604","sha512":"3fbf857b325781344bc24aa4d15a069ba21585a69927f2eb28d27af9bfa25e911c6c1d8d36fe82d3dd88baa46e55afc0dd3bddab69a4262158cb553a3862140f","ssdeep":"768:g4l16uv8IytupzR46XOUs3Ss6WcUMaAmaAZmNpxU4:R6gdR3kSs6Wytmt6U4","tlshash":"0a13a9f69418d595a40baf68f43b6d3a95ceacbf9f948dd8c2cccdd842519f44ac8c80","dom_hash":"domhashc2652d651dcf832d704611c90d2621f6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"xposed.casino/","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-28T11:36:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xposed.casino","ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-24T11:36:55.345097Z","last_seen":"2026-07-24T11:36:55.345097Z","alert_count":74,"request_count":37,"received_data":2384356,"sent_data":20482,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-19T22:23:13.155676Z","alert_count":0,"request_count":2,"received_data":12348,"sent_data":1139,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":1,"received_data":73777,"sent_data":555,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/16rmwuk.q6kce.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5cbdef62f70832a02868c81bed4d0cd","sha1":"4d77c0b7342c6700e8dce963de3136d937d75b23","sha256":"1772b49f52d973040f54ddfecd3ec3c5333a06566491f44d881a06852d94ab32","sha512":"fcde5221d5f85fd6c9077fe4092dfd79e9901552845905b925e095b1be1cc2de0d1ab165ab5aa309fc9db126316de67fab111f21da93129d2c8887c87f886d9f","ssdeep":"768:7AJ81OugdCHq8di830F9Lpl/v+GMd9mML03RnyiGM:7AJ8I+xdi830Fwq3","tlshash":"aa33d6b172d5faa2429380e4d43f2017f23d0c7124ad7470a7e89cdb754898da6bafe5","size":53814,"data":"","first_seen":"2026-04-17T19:00:52.214884Z","last_seen":"2026-07-27T06:42:45.65926Z","times_seen":774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/06jljm--ci~tu.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aedfeefa1e80779099b9587ea3b1db29","sha1":"6a48447697ef6c01db549d36c6e38f1d20060ced","sha256":"1f315feaa50045554919b51284afb4ac2967751c6f67f84fe41687a3f01c55f8","sha512":"db2350c028befd1718dc036246f4541da89160807ba1159f058fcdf8d99e885a6b0eb8a266f3a7d35c64ce5938a06ebdf6b3a08a252b94c0b5e6ecf3710ed20b","ssdeep":"96:UXsY3Gv2/EP3DwgZA4b/WMJYBSaWHn5GdYLIa7sbc3DXTNDXTrv2P:UX33h8PDwgZNWMJYBbWo/a7sbc3DZDGP","tlshash":"0eb1c7b776c6fc70415685509837834bba182e37309eb0d497eaccda327ce4a85d1f9a","size":5218,"data":"","first_seen":"2026-05-18T06:46:56.921829Z","last_seen":"2026-07-27T06:42:45.669795Z","times_seen":774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/verifyjs","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03ddefdfa987afbb0f3344c9fc3d6c60","sha1":"9211cd488789a491193bec341ca8c3cefc578186","sha256":"1de531c948473965752aee3fd2d34a9826eacde6bf843b6583987984eb8aedb0","sha512":"7d4f73b9bce273b1833c4f4ca65cd6f572300fa57f43d810b0fad836e4a7708e23b8cb720c2ba51dcb729e582c06aa750e1c68765568b8437f18964bfadccf38","ssdeep":"3072:43iH592QSLlV1m1uIo3xMI7s6iEatghQmrVGpTZ3APxV:FZ9sVgkIoBMI7s6fhQmrVGNZ3W","tlshash":"6504978129ced10c86e2daa642373bc9e8855c2d8b461cfbbe0af2cde55c453b1f7594","size":189140,"data":"","first_seen":"2026-03-27T19:01:58.946492Z","last_seen":"2026-07-26T03:43:53.514267Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/0k.g_i_ucclyt.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"54271f2979c4136a541c1a337e441fe3","sha1":"c752df0903c1aedb0c5b207e755820248301287c","sha256":"80e41d5100983ef55413acfda129dd012ce558cd02fa99f4a0dc6783c6acfc4c","sha512":"215148d7c2bd8743c4939c02bcf15ddace1f2397858f0b6f35fced449b610177ee00cba90b076721e3ad4ea933ab5ae35d74ca2352718f9a5fd2223a36e41c11","ssdeep":"768:e8ehunucesw7F7sKaMrxwkXRoOiRLhFHM8XzR46XOUYpJ7NzWxaH3PMbtJpy6xkM:e8ehsuuiQKa0oHMUR35IW","tlshash":"fd33f9e2f1d4e2d9e4061b80f81f9808e52e39bdde45ddb466bcaca11f204d8b985fc5","size":51973,"data":"","first_seen":"2026-07-21T02:52:09.017797Z","last_seen":"2026-07-27T06:42:45.673171Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/155bi7ep2xvb5.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10849f5c50fd247b8474e2fa814c102c","sha1":"29ec98a9b1d4011dc2915ee1f8e2647b5d5bf95c","sha256":"172af026257cc0c461fb8a91b872fc6a36615b13af56fe7203737bc181e0fc67","sha512":"8270248e1a353e9d5e53f5c5b698d97f75e6227b3f6c3d96b1c1647dd9d0414ebbe61ca93b2c11f3bf444fe6a1337150ed13593b1b2b46ee9ab21fe1a97d277d","ssdeep":"3072:t1wANU+dlIu9NMBzhtW+fYuJ1qci4fn4NHDShvOsN52TItb0:t1wAm+dlIunohHfUHD+FN52TItb0","tlshash":"c134fbe83955f6626ab302a710af1803b338252b280d4d60a351fd9db57845fb17bfde","size":231723,"data":"","first_seen":"2026-05-17T01:00:58.350766Z","last_seen":"2026-07-27T06:42:45.659848Z","times_seen":852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/global/twq.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f4d9e824f13f7d27acdc868f36f7208","sha1":"125a712d37aefe5d3e52ce2ae8986e109eb473de","sha256":"d6768cdba372d919e6d9322bf3cf3a0dfe427d86293aaf16f23d096028a00a1a","sha512":"d6395459961f34c3efc4c55ffa6bd873fbf20cf9aab17d31ec926d7ff645cfb9ae0cfea469b98e0604c5de162b60eb1bfc7b06a6fe91e3497f3a4fb32d29c20a","ssdeep":"","tlshash":"66e0e7f12d093d631fa11374117f931f3143210575595b91d59cd540376249f8037b8c","size":308,"data":"","first_seen":"2025-03-19T10:41:28.935479Z","last_seen":"2026-07-27T07:20:05.58977Z","times_seen":26831,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53d91fded33212fe58bd9be3f207aca7","sha1":"c826eb762a0334b2665751ad9f8dbacb8b38a9bd","sha256":"b69f93b0fbace6cbf11f7b4acf901a3b3a937d1e3ef45e2ab8fd5f969e56a161","sha512":"b335624a40c35480d2e64680d3ab117547239f6aeadfd16413e1dad0987abf09f95e9d9408150427d4a532bd7ba43b08fca4f2876dc8eac3200474831c16c754","ssdeep":"96:xichOxrAngg3lSUpRNfvoZQarjLEbXNS6kjnul4Rt2+am:xich+rAngY0UbxAZv/697kjQ4KG","tlshash":"d9a184c5b90132a49f7676635d3f500afe2b5c80348fc2a4f090e5b0ac7ca49847aea5","size":5014,"data":"","first_seen":"2026-07-08T18:21:04.349928Z","last_seen":"2026-07-26T03:43:53.535639Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/0rsb4m2yeeple.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"789738e245b265ba78bea3e4db7b1188","sha1":"821320ed2cc07e26d0b25989eee42f81a61a003c","sha256":"854808101ab19c1c5da55085c39dfbf68c9063d1d4df6bd35c5995cb8daf9919","sha512":"60a76aae9681bde302efc0ec22ff966cbc4d8433bd5ce5781c4da4a17e93d5b260224575f3af36cf3602eafc7e7ae649f8da2b4638748a787e23ee3e9045ac0b","ssdeep":"384:KawN/B22tHVGVj+jt3t6jbwmzM5VKW0KInG/as1D:hw322tHcN4dEaJ0jG/5V","tlshash":"237219427498fdfa0b57d39cec6b8004a17e2a7ed8cc81bd8f6cd9a0317594a7094f69","size":17192,"data":"","first_seen":"2026-07-24T11:37:00.22478Z","last_seen":"2026-07-24T11:42:17.902065Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/12lp94j-.c_mt.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e739de1547de36405dedb135277b1f71","sha1":"a2ae6c5a9ccd2a7b0a2c3513af23ce6027350983","sha256":"516e6be72f41061589fd880467eda5e65367f672bf3965d39f04192c54064b22","sha512":"38d927879984614c350d69095ad051428407df75b772003b1a9a02349b8cb9fc11ed9e4f70e82db8494ece45b4c391f9686b521446c0a75b74d4fa7b7c8287ba","ssdeep":"768:YhBJUosw2zWLEImqD9nhKFXA3tkBOfCCDkZRQqwQV:YhNUAEI/3na13V","tlshash":"8943c8b53291faa342db91d9c0370012f2780d71309d64b4b3a4d8af799dd8e92f6f69","size":58029,"data":"","first_seen":"2026-04-09T01:35:59.256618Z","last_seen":"2026-07-27T06:42:45.673617Z","times_seen":784,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/0sgujaefuis1t.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f133aa10289ae4b70b203dd609a4b73a","sha1":"1687fb2c35d60cb93271d7256bca645bae852209","sha256":"9b468199277c85be9766b4f401d4196f42bcafd731354cca372ecbafa92bf16b","sha512":"3ba2db61109fa08e43efd76489ef5699f4a8e9bae28bb6452b70ba2fb2c66e288abed34c68c65f03efcd18034ce21f4f8b03f410d0f86d8166abe9a4ce46bfff","ssdeep":"1536:IRqtdBTaezAxecSsuoJgD/8YYwDNBuLNcYKw4CZIl:IROacR/AGYKw4CZIl","tlshash":"c773b956f1f4e7fba04e165ce41b4408eb9e2dfdda846df4c7acacb012118e0768178a","size":74902,"data":"","first_seen":"2026-07-24T11:37:00.250488Z","last_seen":"2026-07-24T11:42:17.920673Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/00txjv18y81xp.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ce6fc1ac19a91ab9b96e5e1a9f282b0","sha1":"8d33c689780551b67888eacf406466aac6275d6d","sha256":"401596fdc663801d8d4aaf96a476f9d2468c085d11f942979cd2b2f4135715d0","sha512":"3d41e06e4f96724a69f2f40c00f8966c19f3e32e9f50aff7ead5fd7bf3fdbb2f486bd228fda15f4804451a5bac96cfeb96d3df1b54f322059f03494fa536655f","ssdeep":"1536:M8udv/NqM7t3AKjSkmE5P1tISAAjJp7BmWok8EO3KqI8GYDNFR9QJn5QExF8:oBAoSkfvtHXjJCOsjI8hJtQ7nF8","tlshash":"be93a657e3241b9a1872727afe4fe181f61d8cbb0799cb50b878e51927c18b87834bc5","size":90224,"data":"","first_seen":"2026-06-08T19:33:12.041169Z","last_seen":"2026-07-27T06:42:45.674605Z","times_seen":769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/0li9mgra_8nfx.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c1ca7911b574ce20daed1f833b108d6","sha1":"bee0a37c5dc9d23fa8e592d34529399de963967a","sha256":"eebd59a42ffd9f0a8cb12ed2797fba5025977de2ab885cfb28df20d9d2f92ef5","sha512":"628e8fcb0dc70c2b54ade8cb8b86552ba3a81882c1d3ef21162f7eadf578a7f1e1f03f0b59fccd849bb2e5e4fc4bf4df4dd9776c2ed575969f07a23c0416619f","ssdeep":"768:6jWexfqnDkUHRqSEyu+bauIS75xh+3BdOkgRt:6KetAkURzRb7xwxrit","tlshash":"c5a342476395e41e8f73dba0e91fb767c2184cb959638926d10d0ea4c94f8e1caf603e","size":103921,"data":"","first_seen":"2026-06-17T18:29:29.887806Z","last_seen":"2026-07-27T06:42:45.674132Z","times_seen":650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/global/fbq.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b834c87557376668b3c3fde729a8db5","sha1":"872448d973ce02e75d52b31641d961601167d04c","sha256":"cc63b490224b081fc3bef6a696dc3ecbe7ea7bd45df00c8a53cfe304e7bd5469","sha512":"1c40528c95bf8c5d60ebf3dba6df8ca43390e5239ea50ef08705e547c48635a1f399f2f9d7207b4575822d2ce3dfd6e2b7ef7ee3b431255837cf2545ea5ed4c5","ssdeep":"","tlshash":"e7e0619f2c43b42733e97639c727a67b3763070178c2d919ba05c8151fe08966c96d9f","size":408,"data":"","first_seen":"2025-03-19T10:41:28.92776Z","last_seen":"2026-07-27T07:20:05.547527Z","times_seen":26837,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8a790b9082e3322401ea0f00805cbd8d","sha1":"f2deb7a191c0187b65516091b9ea6f2015c4cefd","sha256":"d4f88cfb3225b90e42942c0e9296aa5d16394a6ab8bb24278c55271c3288d628","sha512":"e00677ab35847e442a90f8c1f25616ba7852a62fe7e4dd21069a4b70a8e70f56f371b57f6af4e320da7e3f43327a739c33d8a6fe195f4a59167c3516ef7e6d9f","ssdeep":"3072:ll+QcznqLi2ktXYO7s6iEK56W6QorVGlbrfAPZN:l0zq22k1YO7s6RW6QorVGprfK","tlshash":"880486812ace514c82e6d2e2522733c9e8855c2d8b465dffbe0af2cde95c843b1f7594","size":185641,"data":"","first_seen":"2026-02-13T17:42:20.359964Z","last_seen":"2026-07-26T03:43:53.526836Z","times_seen":642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/09m28z2r~.w8j.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"295cb7b39a766115859fdd340bd5d661","sha1":"4f8bc00001417248ceee285064417928d803a6b5","sha256":"ec7bce2e98540116bb9d28db10d536e7080f5ddaa0857e69c61ed1be3eb349e2","sha512":"68efe9be524b8e18376d1e860d1005349b1f4a730ff580d5234cb768e006104667501bd4df92408b23368685d37bcaee494016ed18cd363cc1a939069a6493e1","ssdeep":"192:m6QqMOx4O2NbkLEOrd6kFJwiKDcyfKm4i5LEzCQ6aspmi+fQjgEzmQ:mqKZBaj6kFMJCm7Ezsasp/vP","tlshash":"2c62e8ad7155f0a10fa36465407f400bb33929b6286dc5e0e3a2ecf5a9b456ec133f6e","size":15910,"data":"","first_seen":"2026-06-08T19:33:12.049499Z","last_seen":"2026-07-27T06:42:45.662948Z","times_seen":770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/0.tq3hqv052nt.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dc8cb2a59489c1561ab34843f6ea999","sha1":"5af3abb3d1dbb398bb131d6cc4976c6df6113a9e","sha256":"07b5b0a411a49989495c74530e109e477f9342b2dbf476217bfff08e0be0af3e","sha512":"5b14c7c64ba184c60488cb10d5096482538946ccda7801ecdffbec8c2b2cc70394be8baf3924aa04b70b00963afff814b388e8429a9f2bf476ef3c381da6c289","ssdeep":"3072:pbPzjb93YLLBpqE2O4dwg1ZoIUtQJ0aqMuB:pbPzjb93YLLBpT2O4Og1Zit2qMuB","tlshash":"8be3e6f935d1f88207ab50a6c03f0006f22c4d77189e6860e3e5ddda756465de2b3faa","size":144579,"data":"","first_seen":"2026-06-08T19:33:12.034645Z","last_seen":"2026-07-27T06:42:45.662341Z","times_seen":769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/0v0ixs97.v7n5.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95ef99c841282f013e4d316bdbf10391","sha1":"f80792622b31b0dd0d1e74be890cd66f97e0d423","sha256":"7235294725f74bc429f63b3c0547001aa7e7e3f3d41af140d53b973f5e2d9368","sha512":"8a0be5bb197316d7444f9b8f3a62d528e5a286c8cddf782fb8bd0ea1fcf5c488c7d422dca571d7d0efc18eb47b3ef33e19aad8b9c097396fbbebf3d80388d481","ssdeep":"3072:yXi31G2FJlN+XTGKDXKBGchpLjdLWVwNrJqhWq15014BWiJLe:yXi31G2FrIhz15G6WiQ","tlshash":"dab37dea7342b435836b805e416f8506b23e2d64580e0c19f2b9d8dd39b4949d2fbf7a","size":108049,"data":"","first_seen":"2026-06-08T19:33:12.050394Z","last_seen":"2026-07-27T06:42:45.660424Z","times_seen":769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-07-27T08:03:35.10942Z","times_seen":236308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2512414f817df8312569d55032748f81","sha1":"13467df6e962aa77bb36867ff1412e1ba9f8feb1","sha256":"e193735f8d500f10e2cdc6a94f5a43fb0257c1e2f8afc10fa04f0e3761d258de","sha512":"db6e4298746d519b0987bfa0feb89c39315718e178418e482b1c10c76439eae343afabf2db35ffaaa26c7ee6a3855084d39e9b88d35b11f87c354ceaf38874a0","ssdeep":"","tlshash":"a590029525c25101965295d4455b5c8450658675249569809180956259550205125cbc","size":47,"data":"","first_seen":"2023-04-11T22:25:25Z","last_seen":"2026-07-27T06:43:53.966286Z","times_seen":22844,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/turbopack-0ecgschtaudos.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ba2cb91d34ea9e9369784ebe9af4389","sha1":"384f6cf4bd44ee8abdfd3c2b3239164fd7d59351","sha256":"54a5acf97d9eae9f3ec52b7fa09d3b076f41747ab972ea5c3a84d6ac1cc71439","sha512":"c7e178c33990e900f1d7720cea3451698680da7947b01a43114f47f2ed2c308964cd3f024a682e9937d87485ac64f3e708048a435e3bbbdaeef1641c78a0dc62","ssdeep":"192:z4gMFB683Esgdo2YE0hBG/lhjTNWn+S3sBT4fCT3cXXqroor2:z4gMFVgOQ/lHW+ssqCTMKA","tlshash":"8622c8da37a6f07343af94e7906b4004f17d84a9145d141cd3aca8eb2c394ae85e7f76","size":10581,"data":"","first_seen":"2026-06-08T19:33:12.036767Z","last_seen":"2026-07-27T06:42:45.672654Z","times_seen":770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/0sr_xcnnnospa.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5a480126322a009269ea5ed2e0be780","sha1":"8b82466380b782920002cc5f42b1c732379e5464","sha256":"e7b0832a6cee33dc76c48abc0a8d8579a07301add396a3ee939620750a2bd2f6","sha512":"f0a6f4ac344a29b08c4a440d34481aa65dbcda320a116402b7d7df13f9e8d69a2048d655f916d86824c751c06ace2f0dbad71e31d611accf613b24653dee179a","ssdeep":"384:KawN/B22tHVKCjpjtsFUjjvmz13hKW0KInG/as1e3:hw322tHAE526qJ0jG/543","tlshash":"6f720a527498fdfa0b57d39cec6b8004b17e2a7ed88c80b98f6cdda0317594a7094f69","size":17274,"data":"","first_seen":"2026-07-24T11:37:00.253074Z","last_seen":"2026-07-24T11:42:17.90431Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/07b~lfkhc7~f6.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"109cacd54b4cb00227ca58e34d8168ca","sha1":"9af3b7bed6b65acca8080874a47307e6a0d6b3a1","sha256":"4de148ca2676f0ca606715a307cd028d1cfa6f63a59f5ec45f259e0bfea61faa","sha512":"9c40e0ce244052efb8a56fcb6146993d50584716e713a4880726a2dacc446dec383d3f16b1e2f3888a414c83f0b633b3cbd87752e4d338764dcaedef96abdbf0","ssdeep":"3072:79zcwGUN94sY8YzaPnx1ll779zcwGUN94sY8YzaPnx1llX:JbBN9nQwZJbBN9nQwB","tlshash":"5ef3ef35d8d0aeda231c7be4d9051ac64bd1f0920022e9b6ef76709be8f4295f7d1836","size":172200,"data":"","first_seen":"2026-06-08T19:33:12.017045Z","last_seen":"2026-07-27T06:42:45.667675Z","times_seen":769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/0gtqnwqp2jd2_.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbcb0a523d301ba7e15c269d3a124232","sha1":"fd263d422ba3e2f5182f6a75b8a96fa1d3ed4112","sha256":"96fc85ad0a723d02940ba6592f17047ebd25055c1fc7e4fe0b171ab0a8b1cb10","sha512":"f9b75df2b08996a17fd9a03d7107a02c50487bddd3fc081e685f5400206f13692a054c49917a6a720ab7e70797d72a6a4e4dea29ccf7f320431daf86a5d421c8","ssdeep":"1536:c5gCTP3oPWPyx34NhAG2CGpDWLmLFCKxgogH69pca719HnZh57+rzDgdjruQ8CpS:o//PyxoN/Lex1gH6JRRwDXwpVol","tlshash":"72b31a17d24423f217512695740f69c8b3bee9c41b62946cbd99803d23ac9e8b1b7fec","size":118151,"data":"","first_seen":"2026-06-17T18:29:29.90313Z","last_seen":"2026-07-27T06:42:45.664757Z","times_seen":646,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-07-27T08:05:13.75993Z","times_seen":203957,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"21dc58c2d7b3cf7cba263ab41b357a41","sha1":"af8592e25107c0f275ff86948e3093a07c204f74","sha256":"b0a7aa2e2be98719f7c3e6ee7ee1377805424f04fbe0a23a0f5837565509cbd0","sha512":"41b1c49d7ab426fa839cc39d47b1a49004a8f6477875f85cdef701d5e5f8642786e51232d3c4db118bcc330b56d676bcc0eef8a52141e66b3121d424a14a634c","ssdeep":"","tlshash":"a651694ae84ff8112930de9f062f4f3a88d49e7b82b5916cb79cc8c94162db70388d81","size":2545,"data":"","first_seen":"2026-07-21T02:52:09.031127Z","last_seen":"2026-07-27T06:42:45.686963Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dde6c0aef7010edfa64d55909d7fe046","sha1":"4781970abc77ba7eadf47e7fc71d7845749335ae","sha256":"4b63ca58854402adf15e752773dc7792f867bddf9a885206fa811bc92b3a2ec1","sha512":"62caa34bb3ddb684646a3ee8c322d9aa1ac472b1b348f3b482839d64864c1c827faadcb2d686a77a3c63b06c52b110cf5e04a6b94bedf440a857b6cdc5c8ccba","ssdeep":"48:LZVODbWa/+aJTQhV1fhV1ZoWnnBn6V06r/XnSDnBn6V06r/og65pbX73Op9/+Cjx:LCDs131ZBmFSmFxgp/DndDmDAC","tlshash":"b7c1e41f6809de06dc3e7c6d023e9d3654ccce7b8761daf8819ece491a065b62bd9881","size":6072,"data":"","first_seen":"2026-07-21T02:52:09.032354Z","last_seen":"2026-07-27T06:42:45.687534Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d272da3a9b09210f4dcc16a89c5ad139","sha1":"af672ed622ef035da837f84c4d60dd22f6ad235c","sha256":"ad146a41054785a01620614b59e02ca6b0b8cfd0a8871d751947994107118fc9","sha512":"dfdc9b90c57dbe296e15394b5f12d96c3249d12f61fe6c3bff42dee4875cf4ff97dab3859a889bda322207959b2e82588f7fe8e51407c6469d0f0b9b76a94969","ssdeep":"","tlshash":"15b09b64f015fff555a91571653de445325f50cd595c1470151391a51709d142717ec0","size":123,"data":"","first_seen":"2025-12-17T10:01:40.746958Z","last_seen":"2026-07-27T06:42:45.688121Z","times_seen":942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cde1220258a0ac4f98ce24972b2503cb","sha1":"b1aaa250b15bfea94c39a28d82e32287252d6643","sha256":"8c86109b5ed00e9594541eec16aee2ad26e11888c01124da7d8676fea0833751","sha512":"e78b962007d08d0e1cc694bc59d202f052e6f7fff1350f65d609e653facb4f7af6f9f17e8aba6fe434a4a884c30ec43f37772c0238acc74ac648291f2787ecb9","ssdeep":"","tlshash":"b5d02ba1cc13cc0dc2560f19287e6c3521ccc9b403055107a895c97c1d86a3449e0d86","size":268,"data":"","first_seen":"2026-06-08T19:33:12.080994Z","last_seen":"2026-07-27T06:42:45.688661Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8710e033cc3113d8c8501736861608b4","sha1":"bd240f74bca3b515c0ff268d82726ab44ac76688","sha256":"1cac4203234e0b58e0510486f1c9e0a5fc2682f24eea8fe47576ad59680d6ddc","sha512":"9f9c86ac34c0d41c5a35934e4189e88b41c67b5d1c47ccb3066e06aed629be0782d78eddef858830bcc5ae78d5611a0b8ecbb342505648da279f226e347ffe60","ssdeep":"","tlshash":"08f05072ac15ef514f97d53c2a3b5cc524dca665450053c4e924c81d11575788debfc6","size":501,"data":"","first_seen":"2026-07-24T11:37:00.280877Z","last_seen":"2026-07-24T11:42:17.97312Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/0514pcijmsasy.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed3d466c2d251d739ca14bdd80caf061","sha1":"38eabd2cd88e7589c09720b23fe926fb69e7bf2b","sha256":"290816770359c2131dc4f5bced87b4de8567a75148300b6d38673561b0e80fa3","sha512":"b56e083f791bc181b92e28bdedb61e18924c835f4b3a50de7cbb37862ac0dc18305a4621ecf1f2ab5615551286ef133723ee259929a8db034d10c06dd5f4d370","ssdeep":"192:k21OmPkG5HtOCdVC8+BrTvk+0tDq1ZT643MN3WYtdUo2RBRmuk:J1ZAEKcDqf23Tso2RBRmuk","tlshash":"8c122a94f1a07936035746a3a1ff0702733a89595c1f84ecb1b888882b71e8d11bff9e","size":9691,"data":"","first_seen":"2026-06-08T19:33:12.061464Z","last_seen":"2026-07-27T06:42:45.667172Z","times_seen":770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-27T08:04:56.291582Z","times_seen":734021,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/03fg85j1c363f.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"05cda99838f3df07eb438b054ce7d2ae","sha1":"5d7ba1308daf2a223c780b365a7123a12d2a56af","sha256":"72a35adf797fe33e0548ce20a161ab102a616803284bfb50f3755bcf8a8ae9b3","sha512":"b5a255650f22adcc0c518c24a86d52d2ac36bc52845302fa088afff62f41fd3467d822b72ca1f20045b35c4f9e9abbb7754bffe1d4355563a6cf60984e3348ae","ssdeep":"12288:yibu0iI0QXDQnq5u0FxIijiw9LUoXQM+M0qizOVNkUoReh+YoJLPP8v0hxQ0zPV5:tbDiX+NRv8tB","tlshash":"fae45c696025213897956090c15b3446efb1682f2dc944acf7b8ecef57b4e8e332af71","size":667746,"data":"","first_seen":"2026-06-08T19:33:12.046227Z","last_seen":"2026-07-27T06:42:45.663583Z","times_seen":769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/global/ttq.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9fee0345463ae9db403ccfdf7e9ae43","sha1":"a41d7e9cf88057c1e115bfa15c632eb581d56524","sha256":"00f81e0e1d50e29f9d80af0ce5defb723da6f1ab93334197feea23f4bc5bbe3b","sha512":"0e5678617c56124e7807dcd3a00a915349339cfa0e1fbbc279854159682e513c9eb390d0e4cfc2f7e6c1a9222b70a8649fd1796eb8122e0c6b0e94d5b25c489d","ssdeep":"","tlshash":"4d11985c38fc649c839991ef327fdb4c822d90270c40cc48c40dc5150435eabd451e7b","size":1006,"data":"","first_seen":"2026-06-30T22:42:59.712514Z","last_seen":"2026-07-27T06:42:45.670316Z","times_seen":784,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/09m28z2r~.w8j.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:27.968Z","timestamp":1784892987968,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /_next/static/chunks/09m28z2r~.w8j.js HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AMvnMAGgdog5oMOnVNpDJnVYTfKUPXu5v9pRI2o6pK%2FxR%2Bylhc3LBrvmLGuRTv904UD2n3aF1GZrZEVHQdERD9lynYb8r9zehQ9vptUCjWKnSsoKi0Ebakk%2BbYIjog%2BJ\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a096cbbd56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15910,"size_decoded":6708,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15910), with no line terminators","md5":"295cb7b39a766115859fdd340bd5d661","sha1":"4f8bc00001417248ceee285064417928d803a6b5","sha256":"ec7bce2e98540116bb9d28db10d536e7080f5ddaa0857e69c61ed1be3eb349e2","sha512":"68efe9be524b8e18376d1e860d1005349b1f4a730ff580d5234cb768e006104667501bd4df92408b23368685d37bcaee494016ed18cd363cc1a939069a6493e1","ssdeep":"192:m6QqMOx4O2NbkLEOrd6kFJwiKDcyfKm4i5LEzCQ6aspmi+fQjgEzmQ:mqKZBaj6kFMJCm7Ezsasp/vP","tlshash":"2c62e8ad7155f0a10fa36465407f400bb33929b6286dc5e0e3a2ecf5a9b456ec133f6e","first_seen":"2026-06-08T19:33:12.049499Z","last_seen":"2026-07-27T06:42:45.662948Z","times_seen":770,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/0rsb4m2yeeple.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:27.977Z","timestamp":1784892987977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /_next/static/chunks/0rsb4m2yeeple.js HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dQiJJJ7CIfsRR4FfagzJq1f96BTvY6WmueGZLDeIgoyftuepK7Y8rYK4olL5H5ppTZ0St3iKDXWoNuMb02VEDwHeKI6OXrUNCbiSjbzc2d1q4lrYz0eEuwhSZ9W0dg3c\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a096dbdc56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17192,"size_decoded":7581,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17192), with no line terminators","md5":"789738e245b265ba78bea3e4db7b1188","sha1":"821320ed2cc07e26d0b25989eee42f81a61a003c","sha256":"854808101ab19c1c5da55085c39dfbf68c9063d1d4df6bd35c5995cb8daf9919","sha512":"60a76aae9681bde302efc0ec22ff966cbc4d8433bd5ce5781c4da4a17e93d5b260224575f3af36cf3602eafc7e7ae649f8da2b4638748a787e23ee3e9045ac0b","ssdeep":"384:KawN/B22tHVGVj+jt3t6jbwmzM5VKW0KInG/as1D:hw322tHcN4dEaJ0jG/5V","tlshash":"237219427498fdfa0b57d39cec6b8004a17e2a7ed8cc81bd8f6cd9a0317594a7094f69","first_seen":"2026-07-24T11:37:00.22478Z","last_seen":"2026-07-24T11:42:17.902065Z","times_seen":2,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/0a21ve5v9f8f~.css","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:28.451Z","timestamp":1784892988451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /_next/static/chunks/0a21ve5v9f8f~.css HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7m2bMl6QR2XX08dxpi8%2Fnmm7u8CbruPawfGPyt596OApSpbeFwSMdKeGMIRQf1so5XsLI2j70LfJ0Yu4K4GdMF1D5%2BT7KE%2Fk3FhCxTBj3yLypcCeZ7Ke6d8e%2B4T7QEBT\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a099deba56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2687,"size_decoded":1403,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2686)","md5":"73412fe569e1f16f6b670c83c1b7fec6","sha1":"fad9338a1b36ee3fecd68653cee6c826390b1df4","sha256":"de4bc1ac4c5c1364679bb70a6f6e16426987f6f3d0ccdb18e32dc374212fbd93","sha512":"c77bf771f7bd0383ff28e3382a3819428c13a42a5f7b1651b4c01caeee04808b4250f9924cd247b70a11476689c6dbb9573e317c6172695e4ee8a72873be0caf","ssdeep":"","tlshash":"78518b199cb483ffc8496012f5582c588642edd4dde29bd14c0b2ce38386af32ab1739","first_seen":"2026-06-11T16:29:30.383583Z","last_seen":"2026-07-27T06:42:45.661048Z","times_seen":768,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/api/mammoth/auth/check","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:28.909Z","timestamp":1784892988909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /api/mammoth/auth/check HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xposed.casino/\r\ncontent-type: application/json\r\nauthorization: null\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/json\r\ncontent-length: 38\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kQCxwrBgXOHHyHcYyAf%2Fe2zfzHqeoUDfSZvS852SIeLRpi50uOhtRR3PStyK6SQ29Wz%2BsN3RRkjNxyyPG%2B1HU3csk7JcVTTCdv7mI5gougg%2FYNG6XJhhMFGwuDv5BeFj\"}]}\r\ncf-ray: a202a09ca93b56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38,"size_decoded":716,"mime_type":"application/json","magic":"JSON text data","md5":"aced0d4c1bf7b416bd8757e86c69b12e","sha1":"242609e9dc75daa64e55af8d8254cdc02722ee92","sha256":"831690950d50aa783757553ff7dce0e549b2bf0c29fcc850ee8ef7a7f6bb54fa","sha512":"8c854561d71566fbd9d1e18c91f1bd391cbedf2b2e8b52d84205d4f773f36b14bfd5d3ca2cba9f5a300b8d96b025ab3eee5d5e3a19985e78386e04584e24d0b3","ssdeep":"","tlshash":"8d80040115000173f4001144113c1d115c54533745410014fc7cd0c4c7530d53043c17","first_seen":"2025-09-13T11:18:32.558363Z","last_seen":"2026-07-27T06:42:45.668195Z","times_seen":18726,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/090a6r7kb8eqn.css","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:27.957Z","timestamp":1784892987957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /_next/static/chunks/090a6r7kb8eqn.css HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4zBL5e4ajGvbERsWDlxteOIkrUzFMrTTLRnEP%2FWwuJkyWhd0Gf0fNoLyLT94IYlMbOoNUjshOCRnSYJeVokad4QMWsLIZlcuEUalTaySgBfWqnvj7sn1TwQM4cCo%2FMlE\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a096bbaf56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79308,"size_decoded":11816,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (30091)","md5":"6325d92868fb3bc97f29a3668b4bf291","sha1":"0178ef58fe1afd80afa9790ebafd61b806530f59","sha256":"6d36d452b2dec5e9c5df5c4578806b470fa08b07970510de0cceb6fdfd3835b0","sha512":"546de16adb202ffe9f329d8edbd89ed4d66274c2670cd024f8015bd4a1b77ec98f0d4c0b710ae8a7344cfba8d3da165a46f798eab483296638027c3f61ea79e0","ssdeep":"768:FC46pj5uEvGLesaFORUDAKqS+ESoDUp5LlwF14IrjHXZ:z1yZukDU5JGp","tlshash":"b573dd6d51b447bfe41db011f2c468188fa7eac6e9a24be5480c69a742c2ef115f3b37","first_seen":"2026-06-08T19:33:12.056103Z","last_seen":"2026-07-27T06:42:45.670939Z","times_seen":770,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/0514pcijmsasy.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:27.975Z","timestamp":1784892987975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /_next/static/chunks/0514pcijmsasy.js HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wH8NL5mB4L9NDAGJmYt%2BHZgtMu3%2Bt2O5NwSxTKvJrlxQYUTNzdKLYFDM2WG7AwZVSyExRNeXcb9ZCdPKomSz6z6C135ZIjZbpRSQeQUXSu1r3TrIYhloPSm7bI%2BS09pt\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a096dbcf56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9691,"size_decoded":4816,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9691), with no line terminators","md5":"ed3d466c2d251d739ca14bdd80caf061","sha1":"38eabd2cd88e7589c09720b23fe926fb69e7bf2b","sha256":"290816770359c2131dc4f5bced87b4de8567a75148300b6d38673561b0e80fa3","sha512":"b56e083f791bc181b92e28bdedb61e18924c835f4b3a50de7cbb37862ac0dc18305a4621ecf1f2ab5615551286ef133723ee259929a8db034d10c06dd5f4d370","ssdeep":"192:k21OmPkG5HtOCdVC8+BrTvk+0tDq1ZT643MN3WYtdUo2RBRmuk:J1ZAEKcDqf23Tso2RBRmuk","tlshash":"8c122a94f1a07936035746a3a1ff0702733a89595c1f84ecb1b888882b71e8d11bff9e","first_seen":"2026-06-08T19:33:12.061464Z","last_seen":"2026-07-27T06:42:45.667172Z","times_seen":770,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/0k.g_i_ucclyt.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:27.983Z","timestamp":1784892987983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /_next/static/chunks/0k.g_i_ucclyt.js HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5zCKLHKhaRw3GxcNJ4T5qimAHkpn2F0%2BewbRjcfA%2BXdQTRTZQz3xjvmkcElaRHKjgX8ZtOoeUyqLQEMWguLrRoRbBLHxIJ5Vnx9fF0T2ke9RYyiiwmyKoKSM9x2xKlFx\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a096ebe356ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51973,"size_decoded":18207,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51915), with no line terminators","md5":"54271f2979c4136a541c1a337e441fe3","sha1":"c752df0903c1aedb0c5b207e755820248301287c","sha256":"80e41d5100983ef55413acfda129dd012ce558cd02fa99f4a0dc6783c6acfc4c","sha512":"215148d7c2bd8743c4939c02bcf15ddace1f2397858f0b6f35fced449b610177ee00cba90b076721e3ad4ea933ab5ae35d74ca2352718f9a5fd2223a36e41c11","ssdeep":"768:e8ehunucesw7F7sKaMrxwkXRoOiRLhFHM8XzR46XOUYpJ7NzWxaH3PMbtJpy6xkM:e8ehsuuiQKa0oHMUR35IW","tlshash":"fd33f9e2f1d4e2d9e4061b80f81f9808e52e39bdde45ddb466bcaca11f204d8b985fc5","first_seen":"2026-07-21T02:52:09.017797Z","last_seen":"2026-07-27T06:42:45.673171Z","times_seen":35,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/global/twq.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:28.453Z","timestamp":1784892988453,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /global/twq.js HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GiBO5cD%2BgqEfDc34oeXEaezXmGVC%2FWsk3CJg7Q5pHJFEO5KkMOvPZWXhesBB6t9zol1wSiFWeVB0Zrv0ttxBS6AZHXEHOIa9cnRrIlCguQn3Cg5hRQk77G3ZR9vt749a\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a099debf56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308,"size_decoded":923,"mime_type":"application/javascript","magic":"CSV ASCII text","md5":"7f4d9e824f13f7d27acdc868f36f7208","sha1":"125a712d37aefe5d3e52ce2ae8986e109eb473de","sha256":"d6768cdba372d919e6d9322bf3cf3a0dfe427d86293aaf16f23d096028a00a1a","sha512":"d6395459961f34c3efc4c55ffa6bd873fbf20cf9aab17d31ec926d7ff645cfb9ae0cfea469b98e0604c5de162b60eb1bfc7b06a6fe91e3497f3a4fb32d29c20a","ssdeep":"","tlshash":"66e0e7f12d093d631fa11374117f931f3143210575595b91d59cd540376249f8037b8c","first_seen":"2025-03-19T10:41:28.935479Z","last_seen":"2026-07-27T07:20:05.58977Z","times_seen":26831,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/api/extra/pixel","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:28.741Z","timestamp":1784892988741,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /api/extra/pixel HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xposed.casino/\r\ncontent-type: application/json\r\nauthorization: null\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OA0sPjn%2FyO2tJxDbJixFwHG6sfkNOoa3kI0glfgJ3P50qNsRIpg%2ByTYdelNpb0b1JxSAI6Zqa%2Bk5W2BysobFrfRhdmRl2aPYnBOUERrjmwJtv%2FAtnVrEk9sGg3Oxf8pR\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a202a09bb86d56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":509,"size_decoded":896,"mime_type":"application/json","magic":"JSON text data","md5":"73bb84d4e227cacd78d44fc4b7ea4c24","sha1":"101f1be18fd6ba22a3a870b2a4db8ded92da6cfc","sha256":"4b03b5bfcdf3a38d0982996e0d75c6c32eab463398a1cb2cd235f6274bf219d1","sha512":"344a5e9964f1e4f13fba85c905bc7facf82ee16a77095ab4a332ed2c2a3edcce224af325f5ea8d6c6c90d0503b9f4aac6472852ef51ab28d731e45f2b989c195","ssdeep":"","tlshash":"55f0be4702b029ca5e975a52dc73de8c9c9d06ca1a01277ecfb90336426c9e19dc9bec","first_seen":"2025-11-15T16:43:36.871347Z","last_seen":"2026-07-24T11:42:17.896015Z","times_seen":10,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/verify?r=4047a310f32a8f191e66a06a546c2191","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-24T11:36:27.828Z","timestamp":1784892987828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /verify?r=4047a310f32a8f191e66a06a546c2191 HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-back=/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 24 Jul 2026 11:36:27 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nset-cookie: cs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=3600;HttpOnly\ncs-back=/;Path=/;Max-Age=0;HttpOnly\r\ncast-score: counted\r\nlocation: /\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wu4ehQKR3cjPPzEqTtNn7y6bV2Bh8z09F7Bh1dOz5Y3yRvmCOrT%2BElDhmd2EO9xatEksxDyGhpMsR1qYhDj%2Bwn7yZ1eGkQSXGMbHuob5ZTaFBJAoo5vt7wrZ6JxvXTUm\"}]}\r\ncf-ray: a202a095eae956ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T08:05:06.274073Z","times_seen":17559078,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/16rmwuk.q6kce.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:27.969Z","timestamp":1784892987969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /_next/static/chunks/16rmwuk.q6kce.js HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=52iUpb1k2w%2BoGJbzPzUbt8OOT2UqZZ%2FDrQ91wwsPoYYVoqPuaZ4C8MMn9VbQeD1l777XSo39sVaKETKjpUtmKHVn3O3P65phXSAXpAdZyrG2fFncRGlZcilDAAIO9lhC\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a096cbc156ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53814,"size_decoded":12854,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33781)","md5":"f5cbdef62f70832a02868c81bed4d0cd","sha1":"4d77c0b7342c6700e8dce963de3136d937d75b23","sha256":"1772b49f52d973040f54ddfecd3ec3c5333a06566491f44d881a06852d94ab32","sha512":"fcde5221d5f85fd6c9077fe4092dfd79e9901552845905b925e095b1be1cc2de0d1ab165ab5aa309fc9db126316de67fab111f21da93129d2c8887c87f886d9f","ssdeep":"768:7AJ81OugdCHq8di830F9Lpl/v+GMd9mML03RnyiGM:7AJ8I+xdi830Fwq3","tlshash":"aa33d6b172d5faa2429380e4d43f2017f23d0c7124ad7470a7e89cdb754898da6bafe5","first_seen":"2026-04-17T19:00:52.214884Z","last_seen":"2026-07-27T06:42:45.65926Z","times_seen":774,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/api/extra/promoIp","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:28.742Z","timestamp":1784892988742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /api/extra/promoIp HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xposed.casino/\r\ncontent-type: application/json\r\nauthorization: null\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/json\r\ncontent-length: 16\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MvOkAaIDTMKbB%2F2WW3Iu7AWEc9iJes7RhaBGWkk7Uvpn0wDGYb9OQlHhRQhryO3Gpg0cqgRk5N0TXYtnVgpLMndQLr7moMwFnYclnEdxlp1hujXr%2BE6bVOOhG51b9XR2\"}]}\r\ncf-ray: a202a09bb86e56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":690,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-07-27T08:03:47.390961Z","times_seen":178283,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/00txjv18y81xp.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:28.446Z","timestamp":1784892988446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /_next/static/chunks/00txjv18y81xp.js HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ovYKXJY%2F84j0%2FTorKtudkEN55hiKoPG3XmE2zuzKUaTIvJzuWuRxiVZlguU%2FddXl67UuQ0U5XN71RZrgF7wUZAMGC0WokuB2uwdVNq6pTnmO5IlqzrXt%2BdTTh%2FSS9iej\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a099ceb256ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90224,"size_decoded":28966,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65367), with no line terminators","md5":"9ce6fc1ac19a91ab9b96e5e1a9f282b0","sha1":"8d33c689780551b67888eacf406466aac6275d6d","sha256":"401596fdc663801d8d4aaf96a476f9d2468c085d11f942979cd2b2f4135715d0","sha512":"3d41e06e4f96724a69f2f40c00f8966c19f3e32e9f50aff7ead5fd7bf3fdbb2f486bd228fda15f4804451a5bac96cfeb96d3df1b54f322059f03494fa536655f","ssdeep":"1536:M8udv/NqM7t3AKjSkmE5P1tISAAjJp7BmWok8EO3KqI8GYDNFR9QJn5QExF8:oBAoSkfvtHXjJCOsjI8hJtQ7nF8","tlshash":"be93a657e3241b9a1872727afe4fe181f61d8cbb0799cb50b878e51927c18b87834bc5","first_seen":"2026-06-08T19:33:12.041169Z","last_seen":"2026-07-27T06:42:45.674605Z","times_seen":769,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/global/fbq.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:28.452Z","timestamp":1784892988452,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /global/fbq.js HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YoSpyG1lkpNu2Rm0ZPWESm8hoQOD341XWZcHqjtdPF2Y0gaG58T%2Fcxc3Rv%2FzLSDsCXyG9zZPNIRBcE3UM8OBgChnP8AlftCln%2F24CQMQd4A7ARQC%2Bfs99bD8gbhQPhSy\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a099debd56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":408,"size_decoded":982,"mime_type":"application/javascript","magic":"ASCII text","md5":"0b834c87557376668b3c3fde729a8db5","sha1":"872448d973ce02e75d52b31641d961601167d04c","sha256":"cc63b490224b081fc3bef6a696dc3ecbe7ea7bd45df00c8a53cfe304e7bd5469","sha512":"1c40528c95bf8c5d60ebf3dba6df8ca43390e5239ea50ef08705e547c48635a1f399f2f9d7207b4575822d2ce3dfd6e2b7ef7ee3b431255837cf2545ea5ed4c5","ssdeep":"","tlshash":"e7e0619f2c43b42733e97639c727a67b3763070178c2d919ba05c8151fe08966c96d9f","first_seen":"2025-03-19T10:41:28.92776Z","last_seen":"2026-07-27T07:20:05.547527Z","times_seen":26837,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/api/extra/promoIp","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:29.000Z","timestamp":1784892989000,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /api/extra/promoIp HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xposed.casino/\r\ncontent-type: application/json\r\nauthorization: null\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:29 GMT\r\ncontent-type: application/json\r\ncontent-length: 16\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X%2BIwLyTXsIFcFZvrz2YvLBT%2FDFebYhnOheLYssEeZpN5teSE7aKoezDGLcRpZYqvExSFU5ZtQQ1SdODfkpUYN5uXuxQZjR%2FCZ1svJK2jMCQYhLWe6n14VbunN53m2oBQ\"}]}\r\ncf-ray: a202a09d49cc56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":692,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-07-27T08:03:47.390961Z","times_seen":178283,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/155bi7ep2xvb5.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:27.971Z","timestamp":1784892987971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /_next/static/chunks/155bi7ep2xvb5.js HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lzARvgVa2reGw3uwcq8eDmpj3WWsl8SciY0cTuMnI2UL06Fg1N6im9SMp5fIgHyh4I5YEF1d7LS6sG0oFqI0nuDQ117%2BsnHAiuGibI3jty4%2FVX9RYlniAHqmt4oB2Und\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a096dbc556ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231723,"size_decoded":75224,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"10849f5c50fd247b8474e2fa814c102c","sha1":"29ec98a9b1d4011dc2915ee1f8e2647b5d5bf95c","sha256":"172af026257cc0c461fb8a91b872fc6a36615b13af56fe7203737bc181e0fc67","sha512":"8270248e1a353e9d5e53f5c5b698d97f75e6227b3f6c3d96b1c1647dd9d0414ebbe61ca93b2c11f3bf444fe6a1337150ed13593b1b2b46ee9ab21fe1a97d277d","ssdeep":"3072:t1wANU+dlIu9NMBzhtW+fYuJ1qci4fn4NHDShvOsN52TItb0:t1wAm+dlIunohHfUHD+FN52TItb0","tlshash":"c134fbe83955f6626ab302a710af1803b338252b280d4d60a351fd9db57845fb17bfde","first_seen":"2026-05-17T01:00:58.350766Z","last_seen":"2026-07-27T06:42:45.659848Z","times_seen":852,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/0li9mgra_8nfx.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:27.981Z","timestamp":1784892987981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /_next/static/chunks/0li9mgra_8nfx.js HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CpZ%2F%2Bz93IMMaCWozBUdgpoiTS69FEcFZYsex9u4Ab362dkB2hJG%2FmMXxVlUO4P1I0o8O1rsrR%2FvTnWoEY1FIdO4DyM7ZcpVedSxBmqTnzM4SBQmBzngm4%2FqUO%2BVGfe8T\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a096ebdf56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103921,"size_decoded":20250,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0c1ca7911b574ce20daed1f833b108d6","sha1":"bee0a37c5dc9d23fa8e592d34529399de963967a","sha256":"eebd59a42ffd9f0a8cb12ed2797fba5025977de2ab885cfb28df20d9d2f92ef5","sha512":"628e8fcb0dc70c2b54ade8cb8b86552ba3a81882c1d3ef21162f7eadf578a7f1e1f03f0b59fccd849bb2e5e4fc4bf4df4dd9776c2ed575969f07a23c0416619f","ssdeep":"768:6jWexfqnDkUHRqSEyu+bauIS75xh+3BdOkgRt:6KetAkURzRb7xwxrit","tlshash":"c5a342476395e41e8f73dba0e91fb767c2184cb959638926d10d0ea4c94f8e1caf603e","first_seen":"2026-06-17T18:29:29.887806Z","last_seen":"2026-07-27T06:42:45.674132Z","times_seen":650,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/06jljm--ci~tu.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:27.982Z","timestamp":1784892987982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /_next/static/chunks/06jljm--ci~tu.js HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gUnfUBh5f5DS3dhXmhpTDig7Tnqw%2B2mVVVp637h2E6KsOYst%2F6za1K0tuuISOLeZpVuAjujOQ8ALjBk%2FYI1ZRZE%2BJ9SUsjp0f3YAuecP4glDl3%2Bme3k6k3YBChPHqvFh\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a096ebe056ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5218,"size_decoded":2685,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5218), with no line terminators","md5":"aedfeefa1e80779099b9587ea3b1db29","sha1":"6a48447697ef6c01db549d36c6e38f1d20060ced","sha256":"1f315feaa50045554919b51284afb4ac2967751c6f67f84fe41687a3f01c55f8","sha512":"db2350c028befd1718dc036246f4541da89160807ba1159f058fcdf8d99e885a6b0eb8a266f3a7d35c64ce5938a06ebdf6b3a08a252b94c0b5e6ecf3710ed20b","ssdeep":"96:UXsY3Gv2/EP3DwgZA4b/WMJYBSaWHn5GdYLIa7sbc3DXTNDXTrv2P:UX33h8PDwgZNWMJYBbWo/a7sbc3DZDGP","tlshash":"0eb1c7b776c6fc70415685509837834bba182e37309eb0d497eaccda327ce4a85d1f9a","first_seen":"2026-05-18T06:46:56.921829Z","last_seen":"2026-07-27T06:42:45.669795Z","times_seen":774,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Fragment+Mono\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:28.450Z","timestamp":1784892988450,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Fragment+Mono\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 24 Jul 2026 11:36:28 GMT\r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6093,"size_decoded":1472,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ce2aa8e898f250b7c0242ab9077f31dd","sha1":"d002f148d6d3f9736e9014bc0d6555b0fe0d3613","sha256":"8aed4ac843c06ce642e2cad43271e538c73868098e3b5d20f8f339ded465332f","sha512":"4104bae1e0ea8a5db1b0cd1699f68cbcf332c291476e81506501e9b04c97a573d3042b0339f07226ed5bb1d5f4a15967f917dd5592f57d766b6dd587825fb44b","ssdeep":"96:lOEabOEapJc+uEOEa7ONDYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGX:68J05ywfydyGy63gy/yFVyR73xpmj3UQ","tlshash":"89c10c92046f9004ea431cd627cf3e32ad8e51556082e57daffe2ccaacdbd221324b4d","first_seen":"2026-06-08T19:33:12.052545Z","last_seen":"2026-07-27T06:42:45.655286Z","times_seen":766,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":47,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/favicon.ico","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:28.652Z","timestamp":1784892988652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/json\r\ncontent-length: 37\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-cast-cache: STALE\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hir7Oq3x6PeFfiRBE676miaWIEZUZ%2BxAR%2BjCwQOlcJBLElda66ao7yr%2Fb9JqT4fiL64y4uH%2BZOQ6TtOcREiuyMVEgDpMz0kE9EB8uvtCoIPtX9XdhjU9dRnw1f0h18Qr\"}]}\r\ncf-ray: a202a09b1fe856ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37,"size_decoded":625,"mime_type":"application/json","magic":"JSON text data","md5":"79af9efd9c0115a1d73a720c67f885e4","sha1":"d217cb35307108d1062eabf2dcd3dade4777e468","sha256":"60eac3fa3390e47e58a8640ebbd7a968cd286a0fde78c6b85054d49b27318190","sha512":"fd68e246e6f932d82c13bcb35045496a77a1e61cf1bf6ef2315ef32fbb05c91a35586db32e66794ecd3ca7112b1ef3ae244c5db7b0912b16ab93947abaf0f142","ssdeep":"","tlshash":"7480040d114501cf0401f1d0445c1c3011c445c054305c14c104c01dd5410cf545104d","first_seen":"2026-02-17T00:27:37.560756Z","last_seen":"2026-07-27T06:42:45.685904Z","times_seen":283,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:28.977Z","timestamp":1784892988977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xposed.casino\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 10:32:39 GMT\r\nexpires: Mon, 19 Jul 2027 10:32:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 435830\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":72964,"size_decoded":73777,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-07-27T07:56:45.05933Z","times_seen":30798,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":29,"send":0,"wait":15,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/0fghvi7vx5udo.css","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:27.961Z","timestamp":1784892987961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /_next/static/chunks/0fghvi7vx5udo.css HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lDFG%2BfKCYDFzNeVrsnvRb1%2BmLLL0NNTADqXCzm61sVUbNkqq86LOG9%2FzhLCo4EO%2Bd99lnCMisEu4rxwLbOGJBaWgEOpzeT0paYsbQyb9BMNLe1TYYnNz4Ap2FrQvE4zo\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a096cbb356ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108944,"size_decoded":13660,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (33943)","md5":"b0cf461ee26fe850006c123804aa96ef","sha1":"6bb82aa210c7bf738694af85c5dd589e46433c8d","sha256":"626e44ccc49602ee3124c152ed8a7eb2278910e950b851a5bd7ca2821d103983","sha512":"cc7666823fd04d13de0c74e498f3a8d4cde3139e227d165179f93cce5355448fa52a475ca604b522fb5d9f61e78aa6a2e840b9fefb25a48117ceaed5c5469a3f","ssdeep":"768:KQwDsiU3o3ecUS8ZVzvUvyEeNIL4nCR7f3ljrjE4QUllx4:E+ec","tlshash":"55b3f67d91f0577fe41df041f2893c6c8962e9dad8960bd6881d28a783c2df215b2b36","first_seen":"2026-06-11T16:29:30.386725Z","last_seen":"2026-07-27T06:42:45.672141Z","times_seen":768,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/0.tq3hqv052nt.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:27.972Z","timestamp":1784892987972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /_next/static/chunks/0.tq3hqv052nt.js HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vjWbtw86wIuxeaKaZmcnSjSVAdYhPgH5vev634q4%2BK9eDvX8lAEu11bcThaA5KpAHgxRwt16t4xucAp8JpPzwpUK69maJaKyhaSap%2BLf%2F%2BWlQyQehavvhAjE7bqaoKWH\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a096dbca56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144579,"size_decoded":41304,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3dc8cb2a59489c1561ab34843f6ea999","sha1":"5af3abb3d1dbb398bb131d6cc4976c6df6113a9e","sha256":"07b5b0a411a49989495c74530e109e477f9342b2dbf476217bfff08e0be0af3e","sha512":"5b14c7c64ba184c60488cb10d5096482538946ccda7801ecdffbec8c2b2cc70394be8baf3924aa04b70b00963afff814b388e8429a9f2bf476ef3c381da6c289","ssdeep":"3072:pbPzjb93YLLBpqE2O4dwg1ZoIUtQJ0aqMuB:pbPzjb93YLLBpT2O4Og1Zit2qMuB","tlshash":"8be3e6f935d1f88207ab50a6c03f0006f22c4d77189e6860e3e5ddda756465de2b3faa","first_seen":"2026-06-08T19:33:12.034645Z","last_seen":"2026-07-27T06:42:45.662341Z","times_seen":769,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/12lp94j-.c_mt.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:27.976Z","timestamp":1784892987976,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /_next/static/chunks/12lp94j-.c_mt.js HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=usIYpYkt8rLjQLpQJFG18jM%2FXhe%2B4Iox9qIcKJQFlDQP7jybooTCFJW8%2FB3lJ5Q55j8L2QjhI9nJQVVYJ9MaPmu42tbIqSBtmRkDMS3NxbvlUU2rOzwvqKSEc7Y0MNsJ\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a096dbd356ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58029,"size_decoded":15462,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58027), with no line terminators","md5":"e739de1547de36405dedb135277b1f71","sha1":"a2ae6c5a9ccd2a7b0a2c3513af23ce6027350983","sha256":"516e6be72f41061589fd880467eda5e65367f672bf3965d39f04192c54064b22","sha512":"38d927879984614c350d69095ad051428407df75b772003b1a9a02349b8cb9fc11ed9e4f70e82db8494ece45b4c391f9686b521446c0a75b74d4fa7b7c8287ba","ssdeep":"768:YhBJUosw2zWLEImqD9nhKFXA3tkBOfCCDkZRQqwQV:YhNUAEI/3na13V","tlshash":"8943c8b53291faa342db91d9c0370012f2780d71309d64b4b3a4d8af799dd8e92f6f69","first_seen":"2026-04-09T01:35:59.256618Z","last_seen":"2026-07-27T06:42:45.673617Z","times_seen":784,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/0sgujaefuis1t.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:27.985Z","timestamp":1784892987985,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /_next/static/chunks/0sgujaefuis1t.js HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NnOXqbe1ssKquMivjqfckEYP0xcKm2ZZgs92gJe8FegDpOBO5ugaZbNR7t2xTbPYMqWgPGWoQlUj%2Fv4yKyM0THkfyUK4%2FNrbSJCXzIMJJfZRA6lakAm6hV%2Bq3BbdWUHs\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a096fbf256ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74902,"size_decoded":22376,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"f133aa10289ae4b70b203dd609a4b73a","sha1":"1687fb2c35d60cb93271d7256bca645bae852209","sha256":"9b468199277c85be9766b4f401d4196f42bcafd731354cca372ecbafa92bf16b","sha512":"3ba2db61109fa08e43efd76489ef5699f4a8e9bae28bb6452b70ba2fb2c66e288abed34c68c65f03efcd18034ce21f4f8b03f410d0f86d8166abe9a4ce46bfff","ssdeep":"1536:IRqtdBTaezAxecSsuoJgD/8YYwDNBuLNcYKw4CZIl:IROacR/AGYKw4CZIl","tlshash":"c773b956f1f4e7fba04e165ce41b4408eb9e2dfdda846df4c7acacb012118e0768178a","first_seen":"2026-07-24T11:37:00.250488Z","last_seen":"2026-07-24T11:42:17.920673Z","times_seen":2,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/0v0ixs97.v7n5.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:28.445Z","timestamp":1784892988445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /_next/static/chunks/0v0ixs97.v7n5.js HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4n2%2Fnsk7BxIg%2FTJrLHFniRczlLpc7UXlP1tfRTnEeAdAolULMBBUll8en2v6YkZfArg%2FVnNzmdTcJ7AXQKXmwOoI2ynJcY%2B6jnPg9pLfB%2B0hVu9E4LfZ7ZXbTb23AY4R\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a099ceb056ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108049,"size_decoded":42958,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33805)","md5":"95ef99c841282f013e4d316bdbf10391","sha1":"f80792622b31b0dd0d1e74be890cd66f97e0d423","sha256":"7235294725f74bc429f63b3c0547001aa7e7e3f3d41af140d53b973f5e2d9368","sha512":"8a0be5bb197316d7444f9b8f3a62d528e5a286c8cddf782fb8bd0ea1fcf5c488c7d422dca571d7d0efc18eb47b3ef33e19aad8b9c097396fbbebf3d80388d481","ssdeep":"3072:yXi31G2FJlN+XTGKDXKBGchpLjdLWVwNrJqhWq15014BWiJLe:yXi31G2FrIhz15G6WiQ","tlshash":"dab37dea7342b435836b805e416f8506b23e2d64580e0c19f2b9d8dd39b4949d2fbf7a","first_seen":"2026-06-08T19:33:12.050394Z","last_seen":"2026-07-27T06:42:45.660424Z","times_seen":769,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/0sr_xcnnnospa.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:28.447Z","timestamp":1784892988447,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /_next/static/chunks/0sr_xcnnnospa.js HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EtpPv1shKIKOAqbczXMXgexicduDZqzHfV781DjnDGKw7vgRddf8wT2ftBlB1SHyImDux2qcYRfKYVcw3IGVwbFYvHilhKaW7tMNtWwMmDYYojOCZCszx370eJ3r2bFJ\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a099ceb556ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17274,"size_decoded":7606,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17274), with no line terminators","md5":"b5a480126322a009269ea5ed2e0be780","sha1":"8b82466380b782920002cc5f42b1c732379e5464","sha256":"e7b0832a6cee33dc76c48abc0a8d8579a07301add396a3ee939620750a2bd2f6","sha512":"f0a6f4ac344a29b08c4a440d34481aa65dbcda320a116402b7d7df13f9e8d69a2048d655f916d86824c751c06ace2f0dbad71e31d611accf613b24653dee179a","ssdeep":"384:KawN/B22tHVKCjpjtsFUjjvmz13hKW0KInG/as1e3:hw322tHAE526qJ0jG/543","tlshash":"6f720a527498fdfa0b57d39cec6b8004b17e2a7ed88c80b98f6cdda0317594a7094f69","first_seen":"2026-07-24T11:37:00.253074Z","last_seen":"2026-07-24T11:42:17.90431Z","times_seen":2,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/favicon.ico","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:27.443Z","timestamp":1784892987443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-back=/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Fri, 24 Jul 2026 11:36:27 GMT\r\ncontent-type: application/json\r\ncontent-length: 37\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-cast-cache: STALE\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0LhRTMgkZY%2FziM4G9GmwzDpwRgxfp31HLZizAf9d%2FLR5WySpZM%2BtsvDPtpTnDL5mVSbIGjSeQgzWpwsxJ%2BnTWtg9ajqbyroiFsax%2Fyd1eH1eUuWNVJk8sLszrdJwBmBI\"}]}\r\ncf-ray: a202a093886b56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37,"size_decoded":620,"mime_type":"application/json","magic":"JSON text data","md5":"79af9efd9c0115a1d73a720c67f885e4","sha1":"d217cb35307108d1062eabf2dcd3dade4777e468","sha256":"60eac3fa3390e47e58a8640ebbd7a968cd286a0fde78c6b85054d49b27318190","sha512":"fd68e246e6f932d82c13bcb35045496a77a1e61cf1bf6ef2315ef32fbb05c91a35586db32e66794ecd3ca7112b1ef3ae244c5db7b0912b16ab93947abaf0f142","ssdeep":"","tlshash":"7480040d114501cf0401f1d0445c1c3011c445c054305c14c104c01dd5410cf545104d","first_seen":"2026-02-17T00:27:37.560756Z","last_seen":"2026-07-27T06:42:45.685904Z","times_seen":283,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/04dt9~~_c8v5s.css","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:27.956Z","timestamp":1784892987956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /_next/static/chunks/04dt9~~_c8v5s.css HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UHSelU3unGNAQ3LTgn1EW%2BzSxbQ%2FcoBeRJDmsf6X3QL1Bzea3gywe5rBShJT5u9AfGx4%2F2oTyihHaB%2FnztnaI0vxdDNofThpWf0PbygjeLvUkLHdosoipaVArpwFl28U\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a096bbab56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1177,"size_decoded":1247,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1015)","md5":"bac1111d09f9a0f42404623dd069ddea","sha1":"f7cc20ddbdb329ebe208bd169d40661cba6b9117","sha256":"0405a6a453e6e719d9a1bc04e8010bd99ef5675b77c44ea576f0c5f44d402804","sha512":"7731b68d75610f8113242cb3b3438d767dc05e8183ff8cabc646b69e580fd6c66877e7884c9e6ee108cac21921941bafb005091c0f9f1900ad4262fac871b429","ssdeep":"","tlshash":"0721cd9ca1a4a0b3b4a39b6932dabf7c4829dd82cb460faa6550735143c19f22132735","first_seen":"2026-06-08T19:33:12.053974Z","last_seen":"2026-07-27T06:42:45.665306Z","times_seen":770,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/turbopack-0ecgschtaudos.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:27.974Z","timestamp":1784892987974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-0ecgschtaudos.js HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D4s4GJakUdiQHuIGnM1BEWYiNaw8%2F2NUWxkG99Hyh75GhJAKS6NA2EgfQ8XaCnKgaM8BHaeKov0X89IbgRS2COIgpCvDFio34aIyt8jCr3lYtfzek4K%2Bbk%2BylZ1ZNTDS\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a096dbce56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10581,"size_decoded":5051,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10581), with no line terminators","md5":"6ba2cb91d34ea9e9369784ebe9af4389","sha1":"384f6cf4bd44ee8abdfd3c2b3239164fd7d59351","sha256":"54a5acf97d9eae9f3ec52b7fa09d3b076f41747ab972ea5c3a84d6ac1cc71439","sha512":"c7e178c33990e900f1d7720cea3451698680da7947b01a43114f47f2ed2c308964cd3f024a682e9937d87485ac64f3e708048a435e3bbbdaeef1641c78a0dc62","ssdeep":"192:z4gMFB683Esgdo2YE0hBG/lhjTNWn+S3sBT4fCT3cXXqroor2:z4gMFVgOQ/lHW+ssqCTMKA","tlshash":"8622c8da37a6f07343af94e7906b4004f17d84a9145d141cd3aca8eb2c394ae85e7f76","first_seen":"2026-06-08T19:33:12.036767Z","last_seen":"2026-07-27T06:42:45.672654Z","times_seen":770,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/07b~lfkhc7~f6.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:27.979Z","timestamp":1784892987979,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /_next/static/chunks/07b~lfkhc7~f6.js HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Xfnn%2F9rb4nYbP7UbLTD42GjgqIyPlgsQyHHNn7uLZ4q7CFKSkKH0DOK8w9v8Jql7sfr7adjss9ytsXYGY%2FKCbShS4CT0OHPYzrQE16hjffV38%2B%2FhN4oqMQy2RBXu7Pf\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a096dbde56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172200,"size_decoded":13944,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"109cacd54b4cb00227ca58e34d8168ca","sha1":"9af3b7bed6b65acca8080874a47307e6a0d6b3a1","sha256":"4de148ca2676f0ca606715a307cd028d1cfa6f63a59f5ec45f259e0bfea61faa","sha512":"9c40e0ce244052efb8a56fcb6146993d50584716e713a4880726a2dacc446dec383d3f16b1e2f3888a414c83f0b633b3cbd87752e4d338764dcaedef96abdbf0","ssdeep":"3072:79zcwGUN94sY8YzaPnx1ll779zcwGUN94sY8YzaPnx1llX:JbBN9nQwZJbBN9nQwB","tlshash":"5ef3ef35d8d0aeda231c7be4d9051ac64bd1f0920022e9b6ef76709be8f4295f7d1836","first_seen":"2026-06-08T19:33:12.017045Z","last_seen":"2026-07-27T06:42:45.667675Z","times_seen":769,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/03fg85j1c363f.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:28.443Z","timestamp":1784892988443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /_next/static/chunks/03fg85j1c363f.js HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tpknecBJFWQm9BcnCOqyia2oJlH0B5Ia8OLrQvxQGllgxx5QcaXWqEu54q0rXJCa2Lz7e%2F0bgo41S2yE7VmTQhiEmQKYSYbpalynRnBlVRujW4q50lbsVE%2Fg7KFWFub7\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a099cead56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":667746,"size_decoded":267977,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"05cda99838f3df07eb438b054ce7d2ae","sha1":"5d7ba1308daf2a223c780b365a7123a12d2a56af","sha256":"72a35adf797fe33e0548ce20a161ab102a616803284bfb50f3755bcf8a8ae9b3","sha512":"b5a255650f22adcc0c518c24a86d52d2ac36bc52845302fa088afff62f41fd3467d822b72ca1f20045b35c4f9e9abbb7754bffe1d4355563a6cf60984e3348ae","ssdeep":"12288:yibu0iI0QXDQnq5u0FxIijiw9LUoXQM+M0qizOVNkUoReh+YoJLPP8v0hxQ0zPV5:tbDiX+NRv8tB","tlshash":"fae45c696025213897956090c15b3446efb1682f2dc944acf7b8ecef57b4e8e332af71","first_seen":"2026-06-08T19:33:12.046227Z","last_seen":"2026-07-27T06:42:45.663583Z","times_seen":769,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/0gtqnwqp2jd2_.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:28.739Z","timestamp":1784892988739,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /_next/static/chunks/0gtqnwqp2jd2_.js HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F%2F8Ne1kHpKGM%2BNUQW65XhxlPc9ybFh6ctd%2FPFRO%2F8qBrX3IHp9yYMwCeS%2FeXy%2FuLYF5DnRcHmRpN%2FUgY2eEPPIvPyxMoJNzyFefvxGP0iSYjcKmGppgZVyRhZbXPNdoU\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a09ba85c56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118151,"size_decoded":35204,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65510), with no line terminators","md5":"fbcb0a523d301ba7e15c269d3a124232","sha1":"fd263d422ba3e2f5182f6a75b8a96fa1d3ed4112","sha256":"96fc85ad0a723d02940ba6592f17047ebd25055c1fc7e4fe0b171ab0a8b1cb10","sha512":"f9b75df2b08996a17fd9a03d7107a02c50487bddd3fc081e685f5400206f13692a054c49917a6a720ab7e70797d72a6a4e4dea29ccf7f320431daf86a5d421c8","ssdeep":"1536:c5gCTP3oPWPyx34NhAG2CGpDWLmLFCKxgogH69pca719HnZh57+rzDgdjruQ8CpS:o//PyxoN/Lex1gH6JRRwDXwpVol","tlshash":"72b31a17d24423f217512695740f69c8b3bee9c41b62946cbd99803d23ac9e8b1b7fec","first_seen":"2026-06-17T18:29:29.90313Z","last_seen":"2026-07-27T06:42:45.664757Z","times_seen":646,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/mainDSGN/mix/landing/bg/xposed.webp","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:28.969Z","timestamp":1784892988969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /mainDSGN/mix/landing/bg/xposed.webp HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 75694\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SSonulaTrZtfOcmydvfmRAfep%2BuZEGDj799t3CQYxMVa%2BC7oEa0M3G80U0gjDPJAtR%2FUzkDgn47QrWFhk4yFiYX2QAPO3yqKmbGDorRXldtgQ9hfFR4QGQrldBWSq1L%2B\"}]}\r\ncf-ray: a202a09d099b56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75694,"size_decoded":76390,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aa7b933189004ecaa12394fde4ef3369","sha1":"9a65a09dcb2598bb9b5c045330e3a3b09931ce0e","sha256":"0a332f90855ae2418ad7bcd72bb90782251d5418d5de5a9c79a1a33294a6f552","sha512":"e8683324933e324f21a6e3f8e93493afe2f6f1fb5288860ff51f6e48f6dd0cb852a3edcfc708909bb026311395be0d1c2991de3cda7540cef14108c70f7f74cb","ssdeep":"1536:d3y0gFnWhIFjXbry+g8Kvbdgj0h9oHk/uvjhj2rVrP23PjCg0VoO0:F1he+1vbdgj07oHkm7h0V6rWaO0","tlshash":"2573029de559a8ead1407afba78f81a05db3cca6765162f4d0a93b3c498f070373504f","first_seen":"2026-06-28T22:24:10.763686Z","last_seen":"2026-07-24T11:42:17.939048Z","times_seen":4,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/_next/static/chunks/0yzacfavx3j_x.css","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:27.966Z","timestamp":1784892987966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /_next/static/chunks/0yzacfavx3j_x.css HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2oYmxU%2BiAMfKidz4NAhPHVgcS6psvLxVJjTPmQeXB6lFVHFHY5pSj9btnHMiQoae9yOdmp0JlVi7uY%2BdRLkCzGjf9w4ZDfbMUaneeX0sePlHv2p8KxLWy9uq%2BCU%2B2%2BnK\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a096cbba56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118320,"size_decoded":15571,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (14378)","md5":"020326e19fb3e7d6c84eda5cee706b40","sha1":"9dd47b0cbc6cf45f2f596caadd7366b8499b5b6e","sha256":"72f7d70e70941d8ed1a346cca43064d606349852c0cfb71357a50c9057bf2131","sha512":"6c2a74caa4c7975e621eb01ebb7d12575358721340d1a586f50eb607c1b9bd8a14d3553ec5633c4f87e6aeef1dba931fa67634986155b453afec366b6d8653b2","ssdeep":"768:QVbrAx2I1l4B/mkzbBy8ZeVpCLHlbcwTDQ5lojKekw3T8IDN2Q93+scCvmV2ff9S:T4PzbBy2pbcw3Q5lojKek20","tlshash":"87c3e17d50b057bfe81db442f6887c58caa2e6c5e8964ee6480c29a743c2df115b3b37","first_seen":"2026-07-07T03:24:17.584444Z","last_seen":"2026-07-27T06:42:45.665904Z","times_seen":265,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:28.448Z","timestamp":1784892988448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 24 Jul 2026 11:36:28 GMT\r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":1390,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-07-27T06:47:00.8873Z","times_seen":20144,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":32,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/global/ttq.js","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:28.455Z","timestamp":1784892988455,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /global/ttq.js HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EZKuZMBLep3JMDGHL1oV%2BOdSQtA5ww3pjUFQuAhQRkM6Tm5p4UT9njrHm4qZg1o1Aq8896sNe3EFFwxcD8ZLOwwTgFhDZl7bkp7O%2F4NvO6INdcurjvDHc74ko8s2hfMG\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a202a099dec156ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1006,"size_decoded":1278,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (436)","md5":"b9fee0345463ae9db403ccfdf7e9ae43","sha1":"a41d7e9cf88057c1e115bfa15c632eb581d56524","sha256":"00f81e0e1d50e29f9d80af0ce5defb723da6f1ab93334197feea23f4bc5bbe3b","sha512":"0e5678617c56124e7807dcd3a00a915349339cfa0e1fbbc279854159682e513c9eb390d0e4cfc2f7e6c1a9222b70a8649fd1796eb8122e0c6b0e94d5b25c489d","ssdeep":"","tlshash":"4d11985c38fc649c839991ef327fdb4c822d90270c40cc48c40dc5150435eabd451e7b","first_seen":"2026-06-30T22:42:59.712514Z","last_seen":"2026-07-27T06:42:45.670316Z","times_seen":784,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-24T11:36:20.665Z","timestamp":1784892980665,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 666 \r\ndate: Fri, 24 Jul 2026 11:36:27 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=3600\ncs-resp=;path=/;max-age=0\ncs-back=/;Path=/;Max-Age=15;HttpOnly\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fLEE9FYqYT9RfCJ43UuynLPbUvhNZWEdkFe4nlsKQk2PUdmAgypqREFPGnxha2NeshWL%2BPo1TEdvOo8GKlaQ%2BZl7oDFSJ%2FMRaPNDDAamEOwdBh3oDhGfTLXElb0Hqni7\"}]}\r\ncf-ray: a202a0917e3e56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"666","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5103,"size_decoded":5846,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (5102)","md5":"956b643c2454a7e0f579a9286406fff2","sha1":"cc6b5d6ff7546dd603a95dc02021d502cd9bc8b3","sha256":"c396babd7f49262f18a3a2ec34542c8e314cb4d869875152bb9675a6bb6066ea","sha512":"375c33c31b50ec8e51e51007b0c56655678c017509cacf51ffced23eb5f1bb8e9dde5cf6100421ffb97257d5275f47986ec4cccdb8c65c03cadc64a196a71a31","ssdeep":"96:bichOxrAngg3lSUpRNfvoZQarjLEbXNS6kjnul4Rt2+anx:bich+rAngY0UbxAZv/697kjQ4KR","tlshash":"39b185c5b90132a49f7676635d3f900afe2f5c90348fc294f190e5b0ac7ce49447aea5","first_seen":"2026-02-13T17:42:20.295511Z","last_seen":"2026-07-26T03:43:53.493211Z","times_seen":653,"resource_available":true,"data":null}},"time_used":6562,"timings":{"blocked":-1,"dns":75,"connect":1,"send":0,"wait":111,"receive":0,"ssl":6375},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/verifyjs","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xposed.casino/","date":"2026-07-24T11:36:27.452Z","timestamp":1784892987452,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET /verifyjs HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xposed.casino/\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-back=/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:27 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5YDod34wYe2cDMJ6Cg%2BasHJf9HN1LBUXk490%2FzQWH2nKwxC68TeTuZtpgihDaC%2BqfpwSnXHu8hgrFKjAbKiGUjIglvEsciOFFyLC%2Fl3Nz7BdxOElut858WnSrzObdpjg\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a202a093987c56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T08:05:06.274073Z","times_seen":17559078,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xposed.casino/","fqdn":"xposed.casino","domain":"xposed.casino","tld":"casino"},"ip":{"addr":"172.67.160.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-24T11:36:27.891Z","timestamp":1784892987891,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xposed.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 16:23:45 GMT","end":"Wed, 09 Sep 2026 17:22:17 GMT"},"fingerprint":{"sha1":"BF:DF:DC:34:17:3F:99:10:9D:82:EB:60:E4:CD:50:88:CC:3E:E5:F5","sha256":"84:A5:34:C8:03:0E:63:79:18:67:B0:81:43:E4:C0:B3:C8:C2:E0:70:CD:37:FB:C2:3E:90:65:96:AB:65:54:B1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xposed.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xposed.casino/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00; cs-resp=4047a310f32a8f191e66a06a546c2191\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 24 Jul 2026 11:36:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=cc9740851f4bb0004acf68e61e3e0c00;path=/;max-age=7200\ncs-resp=4047a310f32a8f191e66a06a546c2191;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IaeKRVs3Vjw3711moL43IIczQjg7g2LC%2FxxjVPs8NNxYhZfniyXofEipJPWJR6c4yw3LYCqkwQfR%2BOL7IUX7Ezqhizkeds7Snnwk8O2gWuqpL7TiPMqSoZsAqq1ZSdvV\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a202a0965b4856ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14398,"size_decoded":3582,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (14398), with no line terminators","md5":"d50fb0890ed347c189fad9794bdcc15b","sha1":"603c92244ec7d5dacaa6c48f03d52596f37d268b","sha256":"91ac60d12209f411e8132e7326bd48def9764500ea1780d9661008ddc655c861","sha512":"b12901a5917967b3482fb4d9b79b0c6a11cbed7d4030631df5b3f14676e3a85af2084655ed2b9aa355d3c60e168899f8dcc1b11b45f508afa8594617976b93d1","ssdeep":"192:a5RBOBeB0UOj/oa1g1QPNS1z1PnvTfSpGB913M2qA21f10g131Zo5TgVUyDOuqY4:a5G2FOjgUPAvDCVTOuO","tlshash":"a152e01fac09ee069c35ad6e023e9e3b44cccd3b8774c9a8e69ccd8d06125b617d8d81","first_seen":"2026-07-24T11:37:00.266753Z","last_seen":"2026-07-24T11:42:17.914036Z","times_seen":2,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-24","alert":"Sinkholed","trigger":"xposed.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}