{"report_id":"06426a2b-00ca-43dc-ab48-a78f190b128a","version":6,"status":"done","tags":[],"date":"2026-02-14T18:00:50Z","url":{"schema":"https","addr":"spinempire-fr.org/","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"spinempire-fr.org/","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"title":"Analyse complète SpinEmpire Casino – Meilleur casino en France","dom":{"size":68291,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (24807)","md5":"56beaabb10c1f222c42262f35ad805d6","sha1":"5fbc8a9cbade2b26b33d1cbb79ff9981fcfd1ba0","sha256":"85853190476490a0cb008565f72f7fd1048a5ebf5ca50acaf1a3a0eb2e892b09","sha512":"1a9a71ab9500094da60f6fb05f610d69bed2b29235096616a542da371e16c5fe9e9accb4b89abeb7f6bfd069b8664282ca4a64bac29da5be3e52ea5f393e048b","ssdeep":"768:CbTII5OEqEIEeEZEXEyE9E02FsUH0AYrd/n0ENnfHslXePKZ4qiSjZN6DgItAH:CbTII5r/5b6UXmJL00u80r4","tlshash":"e0630c35b4c16c3342bf58c6f469bb0b6192c11eda77298022af97d3bbd2da0cc7145a","dom_hash":"domhash56e691bc40dd14d3c62e1c63287aaf0a","first_seen":"2026-02-14T17:35:08.765651Z","last_seen":"2026-02-14T18:00:51.641352Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"spinempire-fr.org/","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T18:00:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"spinempire-fr.org","ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-12","domain_rank":0,"first_seen":"2026-02-14T17:35:04.830623Z","last_seen":"2026-02-14T17:35:04.830623Z","alert_count":24,"request_count":24,"received_data":1635278,"sent_data":10951,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Hugo:0.147.7","description":"Hugo is an open-source static site generator written in Go.","website":"https://gohugo.io","common_platform_enumeration":"","icon":"Hugo.svg","categories":["Static site generator"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"spinempire-fr.org/js/popup.js","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d037a860696b00470acd95943d4d1b13","sha1":"93b9942cfcc2ee9c0e23259d3aa18c9850327fd4","sha256":"aa622e64eaeb5531007c582ebbb4d38684e79f36be5ac47231595517e351cb75","sha512":"2479ca6a60bef932d6c4965fd4dcf548a395c6d5164639358f31c24cac2f68256343e8fc1f1bbab4fb4d03526817e7d18cd2555318f52dd6f6dbe9beb1e692c7","ssdeep":"","tlshash":"0201d02e79e0363044ff9678619e610d32302053340ace217d7cc1802fa4e59953ecfc","size":725,"data":"","first_seen":"2026-02-14T17:35:08.783018Z","last_seen":"2026-02-14T18:00:51.654044Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/js/main.js","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e9dee4000124480ba9e756f1b3d3a25","sha1":"1894796059e219b0d4dcea1c28ba66a9e9804cf1","sha256":"3add1e15f14a029baa87e6bc80c74fe49506a4ac2d5c853d3540d935162f9682","sha512":"1bf541f9e53209cd024b80d9f123da15696ad2933f1b265ee93a962ed736a0c43e49d4453806d4998486e3f342d0d38154e8100e11f64619bc56c8a39eaf6361","ssdeep":"","tlshash":"2551cb3ebea91973407ff3a4b58f618ab55050034655cc023d6cc6ca2fa5ba11d3cad8","size":3095,"data":"","first_seen":"2026-02-14T17:35:08.773412Z","last_seen":"2026-02-14T18:00:51.644554Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/js/minify.js","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"246a682c7e5042d0cfb50be3b376b1f7","sha1":"3607f7fece4316a5df68b71be9990677f9500bbb","sha256":"f454be6618b89fb3beefe92eed4a324858af79bdd2025982f78ebdb1eb0aebf1","sha512":"614cd7bba5bc816430414a21efc25a66fa80931291b112bbb931ce15574827a6a7ceade8466d8d54de923b6569eecbe34862b2a20c8b8bb3f9d8779162820382","ssdeep":"","tlshash":"3311ab9964e3367f146b64b85d2bfa0936271887205ed4617d0c89803fcc72d4af7a8b","size":1007,"data":"","first_seen":"2026-02-14T17:35:08.771249Z","last_seen":"2026-02-14T18:00:51.643776Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2165a8fd1e8d59ea929477eef41095c","sha1":"b93e9bad725fa68f70a66103045fa69804fa8e87","sha256":"d68a3f8ea3102b908858acd0097a66d0cb56dcbe426be371a8428059618390b1","sha512":"0ecd3150ef43d06e81d01aa992f7b44f7cdf615682ee480eecbf0e560ef999cb1f6886a931a6fe9bcf77d4aea8c5c25f7136449239a433c48e406ed14628f22a","ssdeep":"","tlshash":"97e0c0f335528cb00397b67b3199e351275a014270455109041d0c8a0df8e8581796ca","size":339,"data":"","first_seen":"2026-02-14T17:35:08.787602Z","last_seen":"2026-02-14T18:00:51.657831Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"spinempire-fr.org/flags/en.png","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinempire-fr.org/","date":"2026-02-14T18:00:21.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET /flags/en.png HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinempire-fr.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 592\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"ad35d7541a2dc7b1eb25f76d65efe16f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z3fqZgnRKfiV52BfHddYaF1sbGLVSUayCHmu1e7rpe52iAoh2VCIpMR%2BS34n4bJg%2Fwv8KX%2BrKrmhkMZ1vG1XK7u%2Fa86xJMb3YlzVU1MpHgjc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cde76eeae4986c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":592,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 30, 8-bit colormap, non-interlaced","md5":"9f71f6bfe2cb03c98cbca81cb67415bb","sha1":"77ba5019621fca6f3bf56d761711aa7e79bd13f6","sha256":"604c7342dad361f630204146c90875fcb663c9e6322bddf83ac72fa8810e26e3","sha512":"92dbbb437598a69b7b9cfb14efc21838fe0e1848533cfd16cdc1fb668acd20950cd2af854e075af67a36901cf36b8489bd57f29e605de4df0807844f619d3b4a","ssdeep":"","tlshash":"9ff041c243c48df8ea8cc129463461b1495c810643341a7eee82347edc2364761dda89","first_seen":"2026-02-14T17:28:07.177695Z","last_seen":"2026-08-12T18:05:19.87033Z","times_seen":45,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/js/minify.js","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spinempire-fr.org/","date":"2026-02-14T18:00:21.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET /js/minify.js HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinempire-fr.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BdyRPa5gsDaMkG4wZdHWnItOG09kuyzcjjIo9npv7oOb5uPclsToa%2Fuf%2BsTyyqN9%2B1PY5nc%2BOUar9Z65OKzF8%2B4FuPnZouJ79wVnbGhYuHXj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"23d871e283df613ffc898515f8ad668e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cde76eeae4f86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1007,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"246a682c7e5042d0cfb50be3b376b1f7","sha1":"3607f7fece4316a5df68b71be9990677f9500bbb","sha256":"f454be6618b89fb3beefe92eed4a324858af79bdd2025982f78ebdb1eb0aebf1","sha512":"614cd7bba5bc816430414a21efc25a66fa80931291b112bbb931ce15574827a6a7ceade8466d8d54de923b6569eecbe34862b2a20c8b8bb3f9d8779162820382","ssdeep":"","tlshash":"3311ab9964e3367f146b64b85d2bfa0936271887205ed4617d0c89803fcc72d4af7a8b","first_seen":"2026-02-14T17:35:08.771249Z","last_seen":"2026-02-14T18:00:51.643776Z","times_seen":2,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/js/main.js","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spinempire-fr.org/","date":"2026-02-14T18:00:21.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinempire-fr.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2HMfHyCqrRAwWlet7lH5x94UKdt5b2fEplpSL0tOqCRWukpW0Ze%2BKYK4L5Okwi9Oa3HzVOrBMWCAOxD3Pz0Un%2FZIDhJxdoeFgch3iG3%2BpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"057298273ca5132320dd6961f767d6dc\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cde76eeae4d86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3095,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"9e9dee4000124480ba9e756f1b3d3a25","sha1":"1894796059e219b0d4dcea1c28ba66a9e9804cf1","sha256":"3add1e15f14a029baa87e6bc80c74fe49506a4ac2d5c853d3540d935162f9682","sha512":"1bf541f9e53209cd024b80d9f123da15696ad2933f1b265ee93a962ed736a0c43e49d4453806d4998486e3f342d0d38154e8100e11f64619bc56c8a39eaf6361","ssdeep":"","tlshash":"2551cb3ebea91973407ff3a4b58f618ab55050034655cc023d6cc6ca2fa5ba11d3cad8","first_seen":"2026-02-14T17:35:08.773412Z","last_seen":"2026-02-14T18:00:51.644554Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/images/games/Big-Bass-Crash%e2%84%a2-Thumb.jpg","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spinempire-fr.org/","date":"2026-02-14T18:00:21.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET /images/games/Big-Bass-Crash%e2%84%a2-Thumb.jpg HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinempire-fr.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 44629\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"5a91624ae50bd58962c54bb300b12e83\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B2vOMp9ezeZyWaqPRVTQlnIVq63q3nTU0YufNchC2F2EyQkyhwPAjmBa0dlz82fk0uhKIGU%2FhZGrNnFMSkmiqvhLIt8xj4kho%2B9SS8b8OQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cde76f03ec386c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44629,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=176, yresolution=184, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"3a2d7e7469683bd51c74af1408d81fdb","sha1":"e892892266d81b129122e49c2dd78563dc03f71c","sha256":"9c45dfaeb17ce8bc03e22c6f960b8a2febc855ff8732c7356107254de4ccb835","sha512":"69d72e3e69c764a02dbf7428c6c41e8bcaa4da78e252a0f74023c040ef4f6988d63d7c43d3d59413f49172f6dfccd85ab7d0aba58a30c276693c994d84551ba8","ssdeep":"768:Ue4YWNygSW+BnRzWXJdqs+yNMbDc7T6yMBW6RIN6OLEx:UenBgLCRz+qs+smDc7T6lBW6GBgx","tlshash":"7313f104b6535822a430567c48a9236bb946bd9bf014dd4fbc8c0f5b5f73aa8c2fb172","first_seen":"2025-10-25T17:20:34.111237Z","last_seen":"2026-08-12T18:05:19.863617Z","times_seen":119,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/images/games/Fire-Stampede%e2%84%a2-Thumb.jpg","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spinempire-fr.org/","date":"2026-02-14T18:00:21.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET /images/games/Fire-Stampede%e2%84%a2-Thumb.jpg HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinempire-fr.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 69858\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1c0cd23483297ccff42988019898bf16\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GqdRdFGgJMHl8r7g3PvJMxlYT7yU0d1tTOGyAAF0SrQGXBIM6a%2BplFJnz%2Fl1Jmo88yZEI86r2S8BGZWFO5B%2BrGj40%2FliKeDbZ4%2FXDTZk2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cde76f03ec486c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69858,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=176, yresolution=184, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"f924e87c1b6b4c39a032f473e373f855","sha1":"32f4188938101b2bc251788398ef27333f911507","sha256":"9dff992a01bf6cdd60aeb522b8fabfb0d196373c6cd9760e4e61cc2351a49f80","sha512":"728b07fb1f384949d58ed2f98c373aeb1feae68f860db05b4733a0b1378c112188211c1a16d399394ec85c63b806575d6cdf391a24c78e04af8c8573f04f2d84","ssdeep":"1536:piOuDMDkOprOfr9BSRnff3mIQjpswcCc6zjvRw4f/66F:mDL2xffWIQ06z7R35","tlshash":"456302bcbd741667e2afd17006d91c09dac39e342b9074cd348e7b979b8440cbadb869","first_seen":"2025-10-25T17:20:34.154635Z","last_seen":"2026-08-12T18:05:19.838301Z","times_seen":73,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/images/games/Beowulf-300x300-1.png","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spinempire-fr.org/","date":"2026-02-14T18:00:21.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET /images/games/Beowulf-300x300-1.png HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinempire-fr.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 35476\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"5de9adf322bde33d7be7ad61aca3524d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5IEKUo6SmyeOc0l1Nz5wnFUw80U2lXkYyU9s%2BAoWtx0x0X13cw8ZgAMdMyomrYu%2Fa7fMqQpRvL56M9flsKj80ndRBKbfSPV6iPzMLcHj4J8q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cde76f04ec986c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35476,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"d525885e71237104373d7fd867413c1f","sha1":"026f1061f873ee2b41de2057bc512be70ab840da","sha256":"c10477f38e0d8c9f2dc9f5ffd3d03c5ec31037f1a8ba7f05780f212e3933c232","sha512":"4f9a79ad801d04a690422053300d7aaed85e3279e31e6e36befe47575299573167d31940c7f40f22c5e6e7d885e48c2b52c95f06d1a6d6e7ddfe42cc8e9bc2f6","ssdeep":"768:aC8r7lL5bfX8LgTdJQ2Zdg3za3WHabXTP/e4hz0eTKgvuDgnf:a7rT8UTLQ2ZdUk5LTPG2zyDGf","tlshash":"74f2f1ef1885de6eb82a0549981fb40cf30084f68c7b3bf79f4353944e4a594a50e6ac","first_seen":"2026-02-13T06:21:28.688162Z","last_seen":"2026-08-12T18:05:19.87235Z","times_seen":33,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/images/favicon-spinempire-casino.png","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinempire-fr.org/","date":"2026-02-14T18:00:21.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET /images/favicon-spinempire-casino.png HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinempire-fr.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2048\r\npriority: u=6,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d478aa427776aebd63d9ba57f7eb1a0c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QVRdmM5BPgp1UZAsvS8mdZL%2FPyPXoEPqL4X%2BhKxiQsyIDN4aTp6KuA2%2BPz7Yn%2BwQ4InKcqCdPrws6vCkuc%2FQ5JNwC0TxDwpGUs%2BPD7aSRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\ncf-ray: 9cde76f14f2686c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2048,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"6e01c7a1772a830842d21f4779269415","sha1":"724bab33301c8b1861cc0b2f6a07c7ef7abbb09a","sha256":"37f10e553d6bad7b363e02c9fc2a24cc0066e34915a705883688fe24e8382f39","sha512":"951977746c065e99b876fc60ae9f0cb031cd0ffb6a076c1de4636190544d231a95d0fd4f258d795867d3dc0d56c3de50ed7ae415b4f8eb13f2b922ddb9c21cc5","ssdeep":"","tlshash":"c9413cf34bf201b05356c83755e276fafebda835428afd401b417e495116590c744692","first_seen":"2026-02-13T17:40:05.554412Z","last_seen":"2026-02-20T18:05:15.664126Z","times_seen":6,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/css/popup.css","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spinempire-fr.org/","date":"2026-02-14T18:00:21.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET /css/popup.css HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinempire-fr.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gjFrluN9m2zgSPR%2BiTc%2BmvPzJZlDUIAOI%2B5GRgi2Ekb7LPub5p90rb8XkilNsABzpVlitFEcAvWJEmSv9zbAyyki4AcyAWNLMIGaCv3373lz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f32225c9ef82676e864268971e3347b5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cde76eeae4886c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2203,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"869b4c3b9de4dcac8c956f83ab1a3888","sha1":"48d423cba24c489fb3e0a5ac85f5eacb66841fab","sha256":"cfd7a8ad56f04fa98dcc6e80b0274cb0893971b810698f8ed11ebdc17584afe9","sha512":"82a34ba723d7170e5b3329c291bc7ee3c648fd93e729c7e5b06518379acbd6ea6258ed22484d135625fb4ed5dc070e2ef8ffd8453d1aca30984af9769a4335a4","ssdeep":"","tlshash":"1741cd14736439642e2fa754bb4a178f53a8a001e812dd7c12ea108c6ec57edb5fe77c","first_seen":"2026-02-14T17:35:08.770222Z","last_seen":"2026-02-14T18:00:51.647514Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/images/games/Starlightprincess_Thumb.jpg","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spinempire-fr.org/","date":"2026-02-14T18:00:21.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET /images/games/Starlightprincess_Thumb.jpg HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinempire-fr.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 50241\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"ff359b8eb458f5cf9b3998a7726f9ff9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UKoYlC9hD9txWeU%2BIdTVmmEZDN7OYtkqwErSO06AD%2B9cu6wYXeDx%2Fyp2P6tH4OOhPkhpxZCKIsCrnVw05SlAoIk7t9nxSWCBo2B98g7ma1wF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cde76f02eb786c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50241,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"ad6b42646eb1d8bd39738c850813db33","sha1":"d9fd192e14b6608c3581eb7bf1a786e413abd1ac","sha256":"62281a2cd19904856bc9c8260386c5c4c43cb323dc47cc0283ac2c23f95a4b9b","sha512":"e7b9ccc9f42970928e3955f9c1129d580fec9d85b5d951516aa2b3d42a952489c19f09b26dcf710dbeda952f70e250038b921efbd185615d8d474066e5de96e2","ssdeep":"1536:FpwiLTkZVlwlYythkT1KjwzBH2n4jeAV1GCjNF3EYAJi:vSohthO4j6524sCxui","tlshash":"3e33f109dbb2aea8554ee17c0ce944bce863d38e0851395ebc8dc8670f84791d22d5db","first_seen":"2025-10-25T17:20:34.088619Z","last_seen":"2026-08-12T18:05:19.832562Z","times_seen":119,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/images/games/supercharged-clovers.png","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spinempire-fr.org/","date":"2026-02-14T18:00:21.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET /images/games/supercharged-clovers.png HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinempire-fr.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 391997\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"384485900ca152429071cd519ed76e98\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zc3cvkYBnhOlmslp9T6KfiZRnWhei%2FR%2FkgjMWPXmy6IgVBERkBn%2FwWdrhxt3QVyP2HrrWtFWdx5gdBbG7EljZkOL9wMpIgw1btVEk1QHkJYt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cde76f03ebe86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":391997,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 800, 8-bit/color RGB, non-interlaced","md5":"81824ff803020cb8fc1b67671b5698ae","sha1":"c1fa426b3f28ed42eecb08f0411eae42ac55a87c","sha256":"430aa80e06ed77054005a690fc10a1ea095f1f79bb1c0a807490d35020129c22","sha512":"8cc18e4c2d10901d66932815df720496bdc247bc267ddfd537e8bf135fc31f6596016d3ee08c5aa241db4c0b34c7ceb3d48f0fa07caccf25816c10cdb5b57103","ssdeep":"6144:p/vuQaVLc9pxLctLYqFIEX468fm8BAJbHf/LZQyyw6nwY/Ch9sINMK6:p/vuQ2yc0+8fmFJbLZqw6nwSesINg","tlshash":"29842300fc44d3a046128d274447ecba364ed4fbfea6762d6e778bc2e187d19d689688","first_seen":"2026-02-14T17:28:07.156391Z","last_seen":"2026-08-12T18:05:19.862748Z","times_seen":31,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/images/games/aztec_magic-300x300-1.png","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spinempire-fr.org/","date":"2026-02-14T18:00:21.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET /images/games/aztec_magic-300x300-1.png HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinempire-fr.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 46694\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"16a8d227cd2abc3f7047c1c97c66c934\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7n0Z%2BrncJgHb14y6djnVByAK23ZQlV%2BdfOC2R4q9thhoNgp0yTl1cd7060dEsK6BJex328MTL39lZjxU7eUw3f1V3rkwFWsGrsKUcYn3Ji%2B2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cde76f03ec586c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46694,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"c464a42667987ec8f28ce31ebf0793c0","sha1":"ded68b987320d9191632866e26e9451e608cd4a0","sha256":"c6ed02f20a1d88bcf8fc58f57250eb562e0bbe26c716ed1453182b204b5e3108","sha512":"a3b30b59f25b963d66f11d48aae30614e7cef9f32c3d2b7f2a0b18c69360e71563c1696610cc2e9a4fb7727e93304436496da18d9e9b0ab9efa5e8d537d041b3","ssdeep":"768:UZMY80UWYU28YoFttMXP4h4UFkR2ajcoJUI6iod0gf+Oyytge9cAl68tc/2VYXXM:RY86BV7MXQhlORxcoJwi42fytWAlHc/i","tlshash":"5623f1edccf028219dbc42887685982ac109bb7444c37fd26639d07d3d27c208e6ee4b","first_seen":"2026-02-13T06:21:28.767595Z","last_seen":"2026-08-12T18:05:19.841425Z","times_seen":33,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/images/games/380_bookofpyramyd3.jpg.jpg","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spinempire-fr.org/","date":"2026-02-14T18:00:21.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET /images/games/380_bookofpyramyd3.jpg.jpg HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinempire-fr.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 51981\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"7ae6034bd089ad5b255dc7c1fc2b691f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SzCSQga8cmRpQCAKLKQRC3cIJhZ%2FGyXdRzWNLfKAw2R%2FInGzQ9iDF8FXTp34K78S0oNoqv3wIZftXHjBz0DCfupjYm%2B9%2BkPXck01aOI%2BRF2J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cde76f04eca86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51981,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 380x380, components 3","md5":"aa22586cd6caf851ae32ec9f0581b1b6","sha1":"f104b6e13cab80d4220807a6cb8ae280b27261e0","sha256":"582650d423ade14d681bc9ba2e118658b968dd7bcd22b1cd188138fd86bf2570","sha512":"1c868ccd45d10bf0eb7e80a7bf1c5a090783731472478d659941d28a6891d39cfac4db262db5bdd1ad5046edb2809d84e3c65bd85173050d425a148887cb4d22","ssdeep":"1536:8juAheOgwKqh/lbO1KpRRRRR8ylhApFwyr5ZQ1YYqNJGi/AJCFt:86AhenFIlbO1CRRRRR8+h0wyzQ1YYqWg","tlshash":"7333023552aa2c56b10b2f71b281ea7b6354c0d324dbfb24fdc875cd31a1ae225d0d1e","first_seen":"2026-02-13T06:21:28.761397Z","last_seen":"2026-08-12T18:05:19.842754Z","times_seen":33,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/images/games/brave_viking-300x300-1.jpg","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spinempire-fr.org/","date":"2026-02-14T18:00:21.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET /images/games/brave_viking-300x300-1.jpg HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinempire-fr.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 36667\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"11a784e0e39eada6a3a1022739ad8928\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hnJ%2BVFdlMqpSYZdrL1Pk8Ue1S4vIyHGMv8jfVme7DPqkHMnSFLRwdK3r3aCitM3b8wtQav6yXOnmxawTt2wVk9eRf6lR21Yzj7DhJ%2BCJuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cde76f04ecc86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36667,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3","md5":"1fd02623974880864f68578dfe8ddb05","sha1":"701e5e526e9036a79191b593c26fec70c5ca64b4","sha256":"f0db8d3f0ca77335b59f04d4111f46d7620bad47f1ee058768fd9c8cc31058c8","sha512":"ea5daed6f2308d26eb0dd9e835be9e6492f5a85b1c32adb9aee6345c1ef30066d687d713abd1243c0a4c69748f947bbf3032c4e10e96c7474d8286aad44addd0","ssdeep":"768:UjMBlnJWvn8smE96z4inDUsK9scs7YddXRqkQRALK7+:KMBjonFmE96tnQsBH7YddVVK7+","tlshash":"02f2f2630ea3e642c297469a134817f2b3434b727923e73538f0d7dd36af20a09e8761","first_seen":"2026-02-13T06:21:28.775899Z","last_seen":"2026-08-12T18:05:19.844024Z","times_seen":33,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/images/banner.webp","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinempire-fr.org/","date":"2026-02-14T18:00:21.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET /images/banner.webp HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinempire-fr.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e5bNFiIj4FAlv%2FS20XULkWE1oNHEmvZnd3LAoRafRkU8v1usubl8XDD3UctsjCgjnWNbUJCu4UH8ziofyaB44nVriOB%2FXaW3jY9NCb2hvWh5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9cde76ef5e8386c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":828,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (822), with no line terminators","md5":"16d0ed51e13da8ab98c164e45af0c750","sha1":"e77e7aa7fa4030a9c261b8c2cf3b8697616817f4","sha256":"2ad42ef9edfad1fd0ae8fe957a54620be689228ce6ba0c21b4b64846c3170082","sha512":"2a06f84f6808119bc35e611ec9d9bc1380fa7858ff17074e216dba931a8fbf3cb1d16f5ca5f5722e2b5567a6c31a28e849de2270b00b0f860bd785ef5b8b3cb0","ssdeep":"","tlshash":"2d01122d7084804f931a65d7dc8bb91dd9c381054bf6472027ba243b78c07d04e79505","first_seen":"2026-02-14T17:35:08.772306Z","last_seen":"2026-02-14T18:00:51.650958Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T18:00:21.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fK6Okwn9oiVqe5dOE5XMaBrpgLviDLVFwyO3QmGXSK5GYHOIjOJUZYK3ZRTsCzDKmQoBqc8i5OEBMc1U%2FhGcKXyVP%2B3qIYUsyoP1hNRWp%2F3X\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cde76ed0d884b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hugo:0.147.7","description":"Hugo is an open-source static site generator written in Go.","website":"https://gohugo.io","common_platform_enumeration":"","icon":"Hugo.svg","categories":["Static site generator"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66203,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26215)","md5":"2a5a0641f48e3e06e186762e7a20b0fc","sha1":"821fc50620f272ef2502254ab7033070a21efd6d","sha256":"1c137eab574054e618b16ba57463698ddb5ba6a59d1b45be1340d93f51a09be6","sha512":"2374b53baf6a4a69ac1b422bf00fba1fee645f51ab05b0a34e1bb37281afec7455b3aedc63ac66fc3b6490c5f71762f1b0dd25c5eba6092bd3f5ac0e5d2692e2","ssdeep":"768:XyAGwgIIhESEIEiEBEJEGE/E+2bHsMHEaYra/aul20zX+JslXgIKZVtG5TFfZHnt:XyAGwgIIS35nyKTMdxAlqbhN","tlshash":"d5531075b4c1a837a23f98c2f0697f1f7152c225e633570052af5acabbc29b4dc72945","first_seen":"2026-02-14T17:35:08.781436Z","last_seen":"2026-02-14T18:00:51.651557Z","times_seen":2,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":234,"dns":200,"connect":10,"send":0,"wait":62,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/css/style.css","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spinempire-fr.org/","date":"2026-02-14T18:00:21.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinempire-fr.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FfxbrsSvtiDpwlrXg4W9gqVHFQ24jN9vEx9zsbdUhEnbuAuNpnw6GbCxpz%2F2wg7zVgCj%2FuC4TKrbdG1yrc8DAV0Vh22txCGX51LYUCSfOtiZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0b67966346d65a329c1ce7ee59f62501\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cde76eeae4486c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31544,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"6e95a4ac42d6623cdda7635d82aa364c","sha1":"09faca7e097a946c76b2364a58c6d8d448980cb0","sha256":"e279a3366ad0b7dc224135a32cc78388b3ac8a0025995a3ebdbb6d6ae7bbb07f","sha512":"c08617a0408ed17a0baa874745b39beabff7b98c69fac27f7af3a133095af6fb7ca1b7114f45a327da5845622a916541e1c025039677a9b41bb7fa44ab5762e9","ssdeep":"768:rDk7dg6Fns//0NEuO50xPX0EbErEIEvEr/1bEBDglekV/BjE1E0:rqHFG/6xfZ9gQ5c71lleS/aO0","tlshash":"dae20048f62069716a3ba278f74f87876398e004cd25da6c7ef510086dc93fd69f6748","first_seen":"2026-02-14T17:35:08.767896Z","last_seen":"2026-02-14T18:00:51.652235Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/css/palettes.css","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spinempire-fr.org/","date":"2026-02-14T18:00:21.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET /css/palettes.css HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinempire-fr.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YVwJm1e9%2FAH1RrUcDEk4TkD1Q23Zj9hB6O25drwf7xOf79Z3QTlkca%2BNhdQcxgz4Hhmle8yM6YsSef6jN%2FgwSLsXdTjLl%2Bb6RqybolOLB9hx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"bf4d22805b16f1b99c53fe4429a1bee1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cde76eeae4586c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9262,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"7a6a2be1d7d14f3a31e534576e6d28ea","sha1":"93b0077c2ea5d2a368fa78deacc1e56a279573d8","sha256":"ff580f585123ea58364c9661b4e230bb4eeb9f894216903e6c826f032bcda298","sha512":"be8e09f9d87b27af8fbae8ad532910c72306cca376a9e0ca5a515068b0e59feab627e4787a227753d36246893ba75825819372ca93db1be7108333fc48bbbd98","ssdeep":"96:EjrZLMUUPPga46LBeQyFboUxUpLMUUJIQyR9FMUU6jttQyCjt+MUUi9YUQyq9YyN:UqYh6usUxE4xiwycvK9Yf9YRlUqLM","tlshash":"9912f114fc86ba13363f95ffba96c946ebf57116a421eb4e3dc694201d4c3ab80f8911","first_seen":"2026-02-14T17:35:08.769098Z","last_seen":"2026-02-14T18:00:51.652868Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/flags/fr.png","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinempire-fr.org/","date":"2026-02-14T18:00:21.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET /flags/fr.png HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinempire-fr.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 101\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d3018c89518510f9b864057db3574228\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hXMeovsx41BelG9vu8dDxez89Rnch2ph9ZqEY%2FzHQKgn8omY3wxUO6JY0Ic6HD1hr3jXYi85N7fW3kiUZ%2F2IFNLMwUBNPI8zV2SSDE%2Boj1h4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cde76eeae4a86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 40, 2-bit colormap, non-interlaced","md5":"7c2ccc8401ec9b8716d455e89f6b4804","sha1":"b96669ca8fb908199d131063cef8e9d26c2de88d","sha256":"f30275acd0284d5bf934aaec35003d524e4c6516c39c09345461d703aa47705d","sha512":"5f22d4a35962526b6e553d9cb1cf6f8629efdbdb5db6ce280f89bd5061a2340f40b7d333adc2d11ec3b32164e662b27c5d62fa68676a60c0e42055ce0375eb75","ssdeep":"","tlshash":"80b012f7a2b09df7c988202735940012dea5462403205d439b0adc313900218e186ac1","first_seen":"2026-02-14T17:28:07.162434Z","last_seen":"2026-08-02T11:19:15.942383Z","times_seen":29,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/js/popup.js","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spinempire-fr.org/","date":"2026-02-14T18:00:21.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET /js/popup.js HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinempire-fr.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Iay%2BjBLU05g4WY4lBB85B1VHAakTkQnwjmEPbohAvAw28cW4tLqTBTlhcOZPhMuzDELjTpz0aMchclt37%2FKl7ogNnXNd1e%2Bn6CYDzE7ky9E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b3093fc71fde6122c53c9d1a3b45bef6\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cde76eeae4c86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":725,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d037a860696b00470acd95943d4d1b13","sha1":"93b9942cfcc2ee9c0e23259d3aa18c9850327fd4","sha256":"aa622e64eaeb5531007c582ebbb4d38684e79f36be5ac47231595517e351cb75","sha512":"2479ca6a60bef932d6c4965fd4dcf548a395c6d5164639358f31c24cac2f68256343e8fc1f1bbab4fb4d03526817e7d18cd2555318f52dd6f6dbe9beb1e692c7","ssdeep":"","tlshash":"0201d02e79e0363044ff9678619e610d32302053340ace217d7cc1802fa4e59953ecfc","first_seen":"2026-02-14T17:35:08.783018Z","last_seen":"2026-02-14T18:00:51.654044Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/images/games/BuffaloKingMegaways_Thumb.jpg","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spinempire-fr.org/","date":"2026-02-14T18:00:21.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET /images/games/BuffaloKingMegaways_Thumb.jpg HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinempire-fr.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 62106\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"76da1dfb7485633b20b217c9f863af45\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Evg8rsY8dAiRRKCOJgKeDmi9lUZzi88OrdCQE0NLmplgbx5oP8ixs6aTVedALloye6dOT5LA14VeqXPRC3PjfGXO74H2eXjv2XjQCdskdQpS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cde76f03ebf86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62106,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"0566fa4ab4540bf1af5c4eaa1ae90511","sha1":"492a8d4ec04501385dc2024e26f9f191d64cd871","sha256":"2eec37122f2428eaf71abe8fa826b353fe08cb572d7011c1d41a125d12cf4c59","sha512":"4bdf4013c6e387bb4cecf6f4b58e83ab23b686ee3892485cf5b40f63fc959c9770c83ea1652a8a4b0210dd7b58f6b82e7958da7bdcf6a9e72124fff84526fc8f","ssdeep":"1536:ukJcWfGUDlwpfEJIwYYt4XW2yR7POY1cH+CvTabaIB:FCUDCpcdZoAJm1+6T6vB","tlshash":"a453f1fef4a110049801f0be05c13b52e687e306db127458f9ce5b3a6f59f8579992eb","first_seen":"2025-06-29T04:05:43.392908Z","last_seen":"2026-08-12T18:05:19.835317Z","times_seen":121,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/images/logo-spinempire.png","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinempire-fr.org/","date":"2026-02-14T18:00:21.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET /images/logo-spinempire.png HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinempire-fr.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 41308\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"67759978e589734f90e5e9d4d8e8d55e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y97k8f2ahgVdd0bdN9e5gwLXQ1%2Bjv5nHGVQif2TD2BQtFZiXpJi5H07sNac2gcIlZ1UkdPL02U1bVcLMk7LdcU%2FjMUbsKt7E7ZH3DyS7k%2BhF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cde76eeae4b86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41308,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 398 x 150, 8-bit/color RGBA, non-interlaced","md5":"683d2d715fa9dd83e0f4342c9c98efdb","sha1":"127f66274b21abae290764026cd0857697ec593a","sha256":"7ec3430e2d4e41c158d2ae1217ff4460b98165b965a67fe7abc2f8cfa7a41128","sha512":"9d7b3c6df6da5e045755b582f27e6f898debd4cfaf2172a9e328f41b81524faed904f74f82647e8f2af0fd38abb4f748b9441e4f6e483675aef67a057cd4290d","ssdeep":"768:pZ8aA2EqolHK3B49dpuD++PfkoMG5gOcio4eXpiFm6P+dVprsE3yCRXz:pZ8wEqolq3B49dYD+YX5cCeXpZ62jpr9","tlshash":"4203f140eb8b48c2b146bb924c7bf70686284e5502fda3c36da99864ff59412fb8ddc1","first_seen":"2026-02-13T17:40:05.539197Z","last_seen":"2026-02-20T18:05:15.653869Z","times_seen":6,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/images/games/Sweet-Bonanza.jpg","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spinempire-fr.org/","date":"2026-02-14T18:00:21.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET /images/games/Sweet-Bonanza.jpg HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinempire-fr.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 71329\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"9bbc8ec51810ae9b939623e2fc9585f6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9zeVgGICdqIAgIZyCSAgp2Un1cv%2FMhH1cu4kSdfv2De4tdF4W9E76Z6L8jbFbbsaCM9amiCYhiHaIoV5NrmzkyoFiD8sOZE67Ugrw8It6bFr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cde76f02eb986c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71329,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 530x700, components 3","md5":"2ae9996829aa836ae070e4445cf43c01","sha1":"e540c5d4021db6650f9243dd53b71de12180be0c","sha256":"3762f9bcc291a1822e8e0c7f9adf337ace29a7bff771d1fedce8fae1bd61df21","sha512":"4df995218bbeaa82bd9bf15259d7e8230a900ff494b9427b96234c158aaba6a5a183b688c4c1285ea6fb81e52ad294b8cddf98b7daa53b5b597016dffbfa7037","ssdeep":"1536:muG0vGrbn3pXGxzcarqZdrJMU66UZ5lmZoR/o5HNEyAjRKf+OW:5vGn3pKr2drJM76imZoR/6ND2Ruo","tlshash":"6c6301ca78a1bb648beca35058fb781697a727461fc32dc7743e9b11982001d634f5b5","first_seen":"2024-08-19T21:32:59.743655Z","last_seen":"2026-08-12T18:05:19.871084Z","times_seen":40,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/images/games/sugar-rush-super-scatter.png","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spinempire-fr.org/","date":"2026-02-14T18:00:21.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET /images/games/sugar-rush-super-scatter.png HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinempire-fr.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 555021\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a1515a78a5dcd5ee5845087119cfc63a\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o3RPLrA0GKOxC05H4askwvSg%2FOgT4DRP6gmWeSvwWq%2FW%2Bhy0ROwq3Oz%2Fh5bFskWd4%2B%2F%2FqcrroX5T4VACIEMJEx23S5LxLlHipTW6dpoJmCjI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cde76f03ebc86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":555021,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 800, 8-bit/color RGBA, non-interlaced","md5":"7cef5594b7422515a85fd61e7811ccab","sha1":"46d3ccb21f31a63eead4c0b8dc199d2853e7869e","sha256":"5aaff1694b2fd141cf7e64ed6ae7e4a76524fdd818b73208db2d78559f9e94e4","sha512":"2d974b0a5a5969b58d5e0d71a46452375c5c2d91a1ed7a343d695a715fa967b115c6d5a875899d682ce0277a125bf8d3f7bc0f2ac048e47818e0985ee8d002e7","ssdeep":"12288:EmnQ/E56FYX6qTlAoJDbx/mYK/pNq4381akct+ebpcI:EmOfFMHlAo513KBs7up7","tlshash":"18c4234902c1f2746f23a03506f6d4defd79a6c1f526012cabea86cfe75b05b6c6a350","first_seen":"2026-02-14T17:28:07.179642Z","last_seen":"2026-08-12T18:05:19.861778Z","times_seen":31,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinempire-fr.org/images/games/4-beauty_and_the_beast-300x300-1.jpg","fqdn":"spinempire-fr.org","domain":"spinempire-fr.org","tld":"org"},"ip":{"addr":"172.67.201.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spinempire-fr.org/","date":"2026-02-14T18:00:21.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinempire-fr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 12:35:46 GMT","end":"Wed, 13 May 2026 13:35:42 GMT"},"fingerprint":{"sha1":"7C:B7:2D:64:82:BE:30:45:E3:0A:BB:D7:A8:1F:85:54:B8:E4:A2:D6","sha256":"9F:31:93:68:D8:12:9E:3C:F4:BF:18:F2:E1:B4:A3:CF:0B:90:34:C3:EE:82:C3:17:B4:05:96:5E:FE:11:E4:93"}}},"request":{"raw":"GET /images/games/4-beauty_and_the_beast-300x300-1.jpg HTTP/1.1\r\nHost: spinempire-fr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinempire-fr.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 41428\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"9022cc6d3e7a7a1dd4854d4beb8a3119\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FFA7UXnKcJ2K5JpbARsNuJw3eGcx9mrrWEaYCM9RWicX3WDRwe%2Fe7%2FJNaxjthbHkL6tNB2xpAhb7OSXmLNn8bicYVVl0tH7JJsbV2%2BITYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 18:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cde76f04ec886c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41428,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3","md5":"a170c5e1744b949a9d2bd7768fdbfe25","sha1":"068bae5281f07c70612141909e09aeef8c1e587f","sha256":"84baa382827fe26e806b3d5a20938af400b3945f079724a54bfdd82c0bf1cb90","sha512":"cdf760c0a71875d7eed221c669679a0a7b8c13d7956cbf18bc57283ccfa710d4870fc322bff47863594fceea0a57dc09a447835e1fc89f85be1db6324dc0eb13","ssdeep":"768:1pzUG81QX24/YghLUdeYO1w9/81/pFz6iQdHCLw+Zv4m9/fuMv8gHyI:rUp30G5Iw9/81/pFzjQdHC9Bb/m4D","tlshash":"7e13022db84171a9fd955438c5a34ef21b39e73c84ca6cead1593beab0c03518fd42ad","first_seen":"2026-02-13T06:21:28.680811Z","last_seen":"2026-08-12T18:05:19.871719Z","times_seen":33,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"spinempire-fr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}