{"report_id":"2804a6ae-86b9-44d4-82c9-ddae13ffb8aa","version":0,"status":"done","tags":[],"date":"2026-06-30T21:40:00Z","url":{"schema":"http","addr":"casino-betgrw.com","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"casino-betgrw.com/","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"title":"Bet GRW Casino - Top Slots \u0026 Fast Payouts","dom":{"size":227423,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (700)","md5":"155cdecc161aa6ba95302a7b9e323ff2","sha1":"68226ad7a253874bfd3d321e77a1f0febe637b30","sha256":"e03c1ad9831a60799a1d088edb992fdbbe2f4d12d15d73cb6c325c320ccd689e","sha512":"d17417c17b0b5e8c4b0521de0b735903bfa00f440eae2ab1ba9865dd1101a44d90d2dbb902d999cd2055c016bc96eefeb1ba72a20e1f2302167c96c3887a5848","ssdeep":"1536:xFAVfpuDFiI0JTwC6zIDLA+4Nj9hDuBrmkumk9mk2mkKmkKmkkJZmkqmk+PQO4UH:Rau92KKAq9O47pc","tlshash":"0424d4b0baf0b2b60543f3b2a5153c1f6a95a46b8a464d80f75c4b849f92bd7cc7325c","dom_hash":"domhash807317f71303ec21de7aa9e2ca14a361","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"casino-betgrw.com","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-04T21:40:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"casino-betgrw.com","ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-03","domain_rank":0,"first_seen":"2026-06-30T17:50:22.241168Z","last_seen":"2026-06-30T17:50:22.241168Z","alert_count":70,"request_count":35,"received_data":1892024,"sent_data":19029,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"casino-betgrw.com/","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3df7b325b6b6f0be090a7bddcfb9e170","sha1":"777b6334be0727ae6204ae2a55d41615effb7a07","sha256":"8b0803d03ed09ef007680ca6c7df8af6aa3025173713ff658734515261485203","sha512":"fc9882e4cbb6ca29e492cfc7d79a9489800d5a5856e7cded911009d0b64aeb3c56b02a199517c0983f5ee6ae1d73c32330418cb6b37dcb661c5458517cb3893e","ssdeep":"","tlshash":"49112648b0f631ba40a7b0b0079b5ebc263514cbb08bd93dbe1ec7442f950248ef1a99","size":1068,"data":"","first_seen":"2026-06-07T19:30:38.372757Z","last_seen":"2026-06-30T21:40:02.307985Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1aa19bece5bc7decd3b3e961fc7fbc62","sha1":"9bf9ddd4c2a0d149cc5bbc9be64f315d03113c5a","sha256":"f40020c069263a880bfdd5131fc05b045681283cb6528f962f61417351396bb1","sha512":"25d73fbec4c5cf84705b6ed96eef5da1d686800510a5b0edf9d1dff6085ba9e5fd0224b26b2bc3ea4191d291c6b991fbb36c6b58025f525239c2c5fee4f8264e","ssdeep":"","tlshash":"2e01f75daea6107810bbe46fc7dfa70431b9050b2640ae04be3d96905f32d561ee09d9","size":826,"data":"","first_seen":"2026-06-07T19:30:38.373838Z","last_seen":"2026-06-30T21:40:02.309148Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0821b06a137af10a8d9ab8efd23d93e1","sha1":"75c9fd07eeb6fa672cf0058f74b304a18a302024","sha256":"e5376d57d19333ee15a10d11840fb747470605b35c611b56473ee024c62e2b73","sha512":"d6e877d4e56d79c18928ae4024b1e614b2e2a8e37fff50fcf5ad527130c69ea0eb884dd3ba01d31354e647c2e6e601dacc3d6407197875e3a34c0be5d9ba2245","ssdeep":"","tlshash":"c751774d91b235364077b8b693cf9a483226904ba105cd163e5cce891fd20b19af2afd","size":2915,"data":"","first_seen":"2026-06-07T20:32:55.639937Z","last_seen":"2026-06-30T21:40:02.311067Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"casino-betgrw.com/assets/fonts/inter/Inter-Regular-a1f0ef0a29e900e333f5c7dc41612c8e.woff2","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.288Z","timestamp":1782855576288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /assets/fonts/inter/Inter-Regular-a1f0ef0a29e900e333f5c7dc41612c8e.woff2 HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8uEzpFhMOJEggYuCq4MapziqVrvKggwefT4xIzIbPlQMNknAGcVYU9Yt5MqKFz%2FrOChe6kYwruxQa96NsSPk5XoxcsTM1I96ULRbGLcrrq9EeB%2Fi5WAga7ZN%2FcvBrZfZM3%2B%2BGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncontent-encoding: br\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncf-ray: a1405317ec8db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2700,"size_decoded":1716,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"ce3501be93b7464a8a8c1c6726c13d12","sha1":"800a4dc79c4aa00bc3e3a681ef6e17999ecaf5a3","sha256":"295a39130bdecebce6d3498cec8cf3fb2a7d6d542341fc1895cbbdba03fc1dbf","sha512":"6dd64a04dffccbd2629f7acb25aff8e21c595fe76c49587adc8e44943da2e491cbd4bf8ce2c7c8442adb335e944d70007b115706dad9f21d658c65311a55561a","ssdeep":"","tlshash":"7d51311a52851909b17382b4efa36256ffeb0497c20349743bce6263cff186546e7b9c","first_seen":"2026-03-30T05:54:30.500925Z","last_seen":"2026-06-30T21:40:02.270227Z","times_seen":10,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/assets/fonts/inter/Inter-Bold-64a1a969c6d497188ec2db849572b34e.woff2","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.289Z","timestamp":1782855576289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /assets/fonts/inter/Inter-Bold-64a1a969c6d497188ec2db849572b34e.woff2 HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oqmr8yKoy7MzzLcCReS3a9bp0YP%2F1gyAzC4cVGHOTCsdkeq49yomNBfOHIVFrbVxEbMmjfr6rdkH8nXkeY3nUSTYRmdCsHxZOL4KcryOqY5UF3LpGBI%2BD665uUMqgGTYOkzlWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncontent-encoding: br\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncf-ray: a1405317ec8fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2700,"size_decoded":1710,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"ce3501be93b7464a8a8c1c6726c13d12","sha1":"800a4dc79c4aa00bc3e3a681ef6e17999ecaf5a3","sha256":"295a39130bdecebce6d3498cec8cf3fb2a7d6d542341fc1895cbbdba03fc1dbf","sha512":"6dd64a04dffccbd2629f7acb25aff8e21c595fe76c49587adc8e44943da2e491cbd4bf8ce2c7c8442adb335e944d70007b115706dad9f21d658c65311a55561a","ssdeep":"","tlshash":"7d51311a52851909b17382b4efa36256ffeb0497c20349743bce6263cff186546e7b9c","first_seen":"2026-03-30T05:54:30.500925Z","last_seen":"2026-06-30T21:40:02.270227Z","times_seen":10,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/fonts/inter/Inter-Regular-a1f0ef0a29e900e333f5c7dc41612c8e.woff2","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.410Z","timestamp":1782855576410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/fonts/inter/Inter-Regular-a1f0ef0a29e900e333f5c7dc41612c8e.woff2 HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://casino-betgrw.com/static/css/main_300d70.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=92HnOxnj7X7PQMh4b4GEkGTrXYtkIk%2BtAgQlM2IqrcrREWmxLjV%2BqNtjotO%2BNDC%2FaH8lmP0fB7x0Kvl9dUZYXCRv5wR6gjIT5pl3krmd0OkQWUeubwUmsx%2FLWVIyoUmYqvTI6g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\ncf-ray: a1405318aca9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2700,"size_decoded":3415,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"ce3501be93b7464a8a8c1c6726c13d12","sha1":"800a4dc79c4aa00bc3e3a681ef6e17999ecaf5a3","sha256":"295a39130bdecebce6d3498cec8cf3fb2a7d6d542341fc1895cbbdba03fc1dbf","sha512":"6dd64a04dffccbd2629f7acb25aff8e21c595fe76c49587adc8e44943da2e491cbd4bf8ce2c7c8442adb335e944d70007b115706dad9f21d658c65311a55561a","ssdeep":"","tlshash":"7d51311a52851909b17382b4efa36256ffeb0497c20349743bce6263cff186546e7b9c","first_seen":"2026-03-30T05:54:30.500925Z","last_seen":"2026-06-30T21:40:02.270227Z","times_seen":10,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/wanted-dead-or-a-wild_dfc772.jpg","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.479Z","timestamp":1782855576479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/wanted-dead-or-a-wild_dfc772.jpg HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xIeHmRT2jsAp5Xkv%2BMi2ZqJTjiQrLLHxG%2Bf85Hxq09Irao4ukYRWSO36t0yAZJmaUsteVhPWG1F94ncVuNlbH5b2kAE4Kf6DvoTguoj6Ozyj0jOfHlTf9hY0jE8chgnzpFTJ2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"dfc772a4ca9aa1aafe845149f82b9907\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 64297\r\ncf-ray: a14053191cc5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64297,"size_decoded":65111,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 450x300, components 3","md5":"4e8bf246981cac03dec7bc1d1b5cb70e","sha1":"6a9c3edf6758d90de2caa7c81585a47afd2f9d47","sha256":"dfc772a4ca9aa1aafe845149f82b9907c9d1307ad6c2b9a826583d873f93744b","sha512":"c1ece907df2cf514008189c95dd8f6e9008ca8b35b1063022f2055e0d5f937f7a0239d10152649bfb276f1d2afd4cb21e5e0832f6b738b4c252706f7e91fa033","ssdeep":"1536:ImIuP7agldw/qp1paYEbMhCdcKnrXKlvybQMYlqhiQe0N0c1EHV:IZuWgUqVaZb9LGv9MJvJaHV","tlshash":"01530212d94ffd6806ce26621362ff2c4775d7d66f835d86e0f6b1027a48ac1c7849c5","first_seen":"2023-05-09T02:53:13Z","last_seen":"2026-07-15T02:47:03.132459Z","times_seen":59,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/book-of-riches-deluxe-chapter-2_7eb231.jpg","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.480Z","timestamp":1782855576480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/book-of-riches-deluxe-chapter-2_7eb231.jpg HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jo3djMad8RHZf9gG9froiFCgqCOxoI2ZUvo9cc0VdGenSOopOC6mul%2FRjpunWKVqVsy8vXqRJSiFEQtNhmIr3d0X1uS2iHsLwRB7tbGeeBJmOSAF9hAjY6NEFSl8SiKNTQx45Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"7eb2312a16b30eda014105b3e982ed73\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 68231\r\ncf-ray: a14053191cc7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68231,"size_decoded":69043,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 450x300, components 3","md5":"62782d0d296ca627488af5e762e5220a","sha1":"c6f0905770f84942e66e4ae99fe493de7570432d","sha256":"7eb2312a16b30eda014105b3e982ed73d517a2fa06e6aa7c0ba568349b0c3864","sha512":"ce5be63d477cbeb27ea0504e131e25025f209db2c6a61cb0e406069125b756fce186640e4ced7267fed6d9fcd5103d7bc4d43a4317b6b42db4fe237dc9302536","ssdeep":"1536:4wDTWSjdhfoSSTTdv+D5kx2y85BmRvElPFj5fHql:4wDphYckxZbREN1fq","tlshash":"f46302f02bdb09a6e7c1e9b1e5c0de616f446fa33467f99231bf6c2023643471e59688","first_seen":"2025-10-27T19:19:51.874735Z","last_seen":"2026-06-30T21:40:02.273532Z","times_seen":8,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/Premium_casino_banner_with_electric_violet_purple_-1772120433713_43f6c8.webp","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.303Z","timestamp":1782855576303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/Premium_casino_banner_with_electric_violet_purple_-1772120433713_43f6c8.webp HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UAaPF7anf8C0KHvYH1dtI2ESrxcb0KOGGd9UHTic7wgB1z00rBsBKSwCHxdWEp%2FTnm4Mj807Sst0kReXmoI%2Bmcev7narGU%2Fm5SSt%2Bqn3EBH9gSkRoYVZOyAmKe16A%2FW0%2Fh%2Flxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"43f6c89fb80ddab09576c9a2d86b7ff4\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 125082\r\ncf-ray: a1405317fc95b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125082,"size_decoded":125907,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1584x672, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3261a96ba6dcdf2bb44e818916fcb6f9","sha1":"f4e24921087732ab89f3f1fe051747c82e1c182e","sha256":"43f6c89fb80ddab09576c9a2d86b7ff43893ebf3c22ebb977eba808c38bc9256","sha512":"12eabcf7aa869843436ea27480c6d2e5771697287f2a92cee9ddc4d3fe7e9217388ad961e3d6f0ddba6c7f294894577b64c73c05b2e0dfa1aa753dc7b6d5375e","ssdeep":"3072:9g0wODVpp/jtWJ+5RP4aDUhS1SlEToYeU6g3KkuK:9gWDV/jtQiRP4CKS1WYeXW","tlshash":"47c312e7642889c277b96b5691309819c030779fdd339da68ce7620592f34beef1d860","first_seen":"2026-06-30T17:50:27.130672Z","last_seen":"2026-06-30T21:40:02.274664Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/media/slot-machine-68d2ca80a9a1f725685584.svg","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.421Z","timestamp":1782855576421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /media/slot-machine-68d2ca80a9a1f725685584.svg HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ii3vw0OJiCIZRh11wInJVRWHhmjfeQsNBRQWo%2F3vt2gGMqO5rbfu%2F588Jgzf7LKzN1iMDFJxuox25TUPnrVkeOXzGj1SWecfnK8ejtwbtun4rWoEJDFXcIeRPx%2BK34ST4KCPJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npriority: u=4,i\r\nserver: cloudflare\r\ncontent-encoding: br\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncf-ray: a1405318bcaeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2700,"size_decoded":1709,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"ce3501be93b7464a8a8c1c6726c13d12","sha1":"800a4dc79c4aa00bc3e3a681ef6e17999ecaf5a3","sha256":"295a39130bdecebce6d3498cec8cf3fb2a7d6d542341fc1895cbbdba03fc1dbf","sha512":"6dd64a04dffccbd2629f7acb25aff8e21c595fe76c49587adc8e44943da2e491cbd4bf8ce2c7c8442adb335e944d70007b115706dad9f21d658c65311a55561a","ssdeep":"","tlshash":"7d51311a52851909b17382b4efa36256ffeb0497c20349743bce6263cff186546e7b9c","first_seen":"2026-03-30T05:54:30.500925Z","last_seen":"2026-06-30T21:40:02.270227Z","times_seen":10,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/deco-diamonds-deluxe_48716b.jpg","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.469Z","timestamp":1782855576469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/deco-diamonds-deluxe_48716b.jpg HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C5APqVQ%2BplBy%2FdbBC7xeQmPpI%2FNfqVNHj%2B31%2BwtDhn3P1VjJ12%2FFYiWr6xee5K3TdYYXOR0rRB7S4mdko2eLGJveA%2FQ3pT4L9Zn0gVXiQX9im%2FBoZw8i8%2FhyRkuqEjYYWRdUwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"48716b25072d970d21e85f87041f728a\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 76177\r\ncf-ray: a14053190cbdb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76177,"size_decoded":77005,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 450x300, components 3","md5":"6c2b9a31ea49e7f486ef85446566e33b","sha1":"ac31149f8ab865c8c83b6bcbd52723271453b1b3","sha256":"48716b25072d970d21e85f87041f728a4901441b026223c9f78b4d169429aa51","sha512":"8dcd7d71c45e8e372bca7f604c7240ae0848edd7e978aa0218803463a0edc2272f64525beee78233f66fb3a42257b2119ac8e0b12495d283c9bcf6fc6e463809","ssdeep":"1536:4inOqinNWzwDtMopzC+CyanHHmKQmTAAKX0Y6PV1cxlyP9z:4i9i/DaopBC1nH/fOXJ6PVtJ","tlshash":"cd731213f5a43f08fefb89fe2cb0c162a5453b45a3634b6daeab096c350068a1d855e5","first_seen":"2025-07-27T11:28:50.704551Z","last_seen":"2026-06-30T21:40:02.276498Z","times_seen":11,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/xxxtreme-lightning-roulette_2c6453.jpg","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.494Z","timestamp":1782855576494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/xxxtreme-lightning-roulette_2c6453.jpg HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZZQky%2BGUXzDlp0zEKfH%2BMyJN9fIfj0jO%2FuFGALXph1IZpv6RnSgW%2FJzn1V6D2xtQcXzOgf1U1FwbgwjLhdoF7QylpT6KY1LhXR32LtQIBcNc3nOKVPJj96UGb1H8hsrArwipbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2c6453a9be35cb1c29cc5e46edca34ba\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 61469\r\ncf-ray: a14053192cd5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61469,"size_decoded":62287,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 450x300, components 3","md5":"adb3666b07f69bc2abf0b7a72d66d9ec","sha1":"052d8f4afc1a1632f26032b882c9f6bd72f1f2ff","sha256":"2c6453a9be35cb1c29cc5e46edca34ba4a80afce774507bf2ef46ada337f4216","sha512":"fe3702a8c8e47a79786bec4c39db4364a617d99be36797137d7fd290f30bbb1abc9d3dfafaebd9d664ad14376bab48a7b6b049b96bed63d7a73a93fb8409c5d7","ssdeep":"1536:4jF55WnxzYxN3Av4sdLYPfLK13Xpv1pUtX7T4:4hWnxy9oLY3e9pv1pUF4","tlshash":"9b53022bae645760c2f1023cb850eb10a0f441621b2b3bdbed44fcd7784a5839da4e3e","first_seen":"2023-11-27T19:19:33Z","last_seen":"2026-06-30T21:40:02.27753Z","times_seen":4,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/casino-holdem_41490e.jpg","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.497Z","timestamp":1782855576497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/casino-holdem_41490e.jpg HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GPdt2Weaa3wkiv%2BGWGVScc5sPfSxNjahblzUr4mXqL%2FdAqlULyAA3jGISaZP%2FXg1ewC8uW11%2Bh0AoiMcIGBaWSXnrL8aWcJREuXl0ptMvAQhOG2bT%2BtUe11vsbBieBVIZOnLhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"41490e9b23e4de1c332a75c141e66dd9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 49729\r\ncf-ray: a14053193cd7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49729,"size_decoded":50549,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 450x300, components 3","md5":"282da25df7553c7946061cd2124c8d25","sha1":"387232c2e4f3a3b3e8ce3bc70926ee2b47b89247","sha256":"41490e9b23e4de1c332a75c141e66dd9b074e29caa84d1a45b99afb848100abc","sha512":"edc8da51e2d0b282244ed3b8c141891ba0bfef2ebd6924f4f2ddf62aa603c3a66bad2bfe57180deacb159f1070d0a2939a8b3b2161d2776cd4796d53595d9144","ssdeep":"768:tNmjEocCgOxBE0DDjCfUaB7/cJnBEpol//MfJSt8jHn:tN+ExCgO80DGPMsol//M6AHn","tlshash":"5823f243d2ebbe1be9ce21ae45f286fcd6487887df6f10acc81158c176b86944a1117f","first_seen":"2026-04-27T22:56:47.668338Z","last_seen":"2026-07-07T21:24:08.0838Z","times_seen":4,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/css/style_31e23a.css","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.295Z","timestamp":1782855576295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/css/style_31e23a.css HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rN3T%2BOStFF5I0MUHLdmoweW5u9XbVyO%2Faaj8LawLaquxAyk27xh%2Fly47DVPGC5lJmbKKHP%2BBNzPlUNeqGDi9mK0D%2F5i1kdY%2FGJ0h0ejv2bPrTexp3%2Fayp3cqn6wdjurQAoVt0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"31e23aac804266257eb924f8f4fc7324\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncf-ray: a1405317fc91b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":565,"size_decoded":1047,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"76b65c7c1d5077e497d9154e8cd4e752","sha1":"e1d266c6a784593f9fabfe3fc8350a2e3c79f93d","sha256":"31e23aac804266257eb924f8f4fc73245689fb55f8eebd533063a23ceb574946","sha512":"3e58d04a3fa3e917e8bf796c1c2f3fa0605346015a1ffd6f66e42605f4d002180d898b9efcffab48c217195d6a5762d4f5c3f24121ff958ca8859581f62ee67e","ssdeep":"","tlshash":"63f0179968b473582bfa96033bd82c03f1b16813e2687c5576c7e8d96f360028178a1b","first_seen":"2026-04-02T05:23:54.296543Z","last_seen":"2026-06-30T21:40:02.279549Z","times_seen":8,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/book-of-gold-multichance_9b6f20.jpg","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.477Z","timestamp":1782855576477,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/book-of-gold-multichance_9b6f20.jpg HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ij2mfJA32IUmrkTX9p32rLcnJ9V93Fvf7PAR23UOaCHHca%2FW7PIkkbEX17kXUdUxaxwlFvOg3KBNTqi75Yv3XmpGR8RYfbtp5BP9RAdirBB6jdBB2Gcm17tfkskL7vPTNkbo9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"9b6f200d6f961fb55ea702fb386f1755\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 62457\r\ncf-ray: a14053191cc4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62457,"size_decoded":63269,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 450x300, components 3","md5":"cdf4cf928bf42b371da04022a32d312d","sha1":"e94a167b9fbdcb80fe199e30197cf7e8f48c4b77","sha256":"9b6f200d6f961fb55ea702fb386f175535e3d3ae205f03f83d9c33f058d6e4e0","sha512":"6504668637c335f7e1ee245f77c254caff9700a632c92c0f1352375854962df7a01a90f4f7dc9067dc5e5e0f0b9424693d8c33c968568b82fea0f7e76cbd02f3","ssdeep":"1536:4Paeg4fq4Qt8QCuuWdFwKFfZ1IA5bNcOhYuuv6EsBdGD+5R:4YSQtHHwIzRRGOCb3vm","tlshash":"e15302ed8c17ce27dee9e2b8b84683b2710822fad12318056bd42437b777a00177e5e4","first_seen":"2026-03-30T05:54:30.520108Z","last_seen":"2026-06-30T21:40:02.280737Z","times_seen":4,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/mega-wheel_3c958d.jpg","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.488Z","timestamp":1782855576488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/mega-wheel_3c958d.jpg HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=adCadu%2FepwN6DkUOpAkfmTuXZpRHMwhwRH8txO5I9AVEAwQJ3yHaeht0QUTgI1BaL0oHjRfA7P%2FuXtQaEm%2BogSCJ2hOiBNtAFdtovgQnEDd4jWUnNXn0Tqg0cMiBD7%2FhoekUEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"3c958d241559d1ca03b00cba833249b6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 65062\r\ncf-ray: a14053192cd0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65062,"size_decoded":65880,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 450x300, components 3","md5":"c461c8f87f4ba851459bc45ae007f762","sha1":"791071f1c92fd24998b9249278e0f862f55aefa2","sha256":"3c958d241559d1ca03b00cba833249b6256fa22e73c902614aefda700d8d1281","sha512":"236b4c0a7834c64d8e4656acf7a0c4ec647a9c66e3fd765bd47b78b2c06d0f4f3f69578be060b9fef671eff348faecfd2bc36db944fa4aed6a52d75bbb47f1a9","ssdeep":"1536:4chS9pXAaSP8CgNUltRAIOAfHketYWk4e/oOqoyuAv/d:4cYXhS8CTDfHkm0/oONAvV","tlshash":"dc5302258d012bf3e1af4335e8daf7da5668f81ae63afd8411167d81f6019e1c22c227","first_seen":"2025-07-07T21:11:04.244984Z","last_seen":"2026-06-30T21:40:02.28213Z","times_seen":26,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/double-ball-roulette_f707bb.jpg","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.489Z","timestamp":1782855576489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/double-ball-roulette_f707bb.jpg HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f3Ci1ZIubfqkEAHOYAj7VzIkoLMHh0rKutxgL1hODrubMGdduV9fJ3bxAdz6KCcL6WUfrKw8ASMPk6fnrpU%2FQNwr0A%2FUxmGc1BpzJrmvLFvUsm9jWGGQl4CIX9f106LqL%2B6Uaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f707bb6af6d17d2af0fbb43536a56931\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 69345\r\ncf-ray: a14053192cd2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69345,"size_decoded":70161,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 450x300, components 3","md5":"633ef3511a0c84f632bad4627c1afcf3","sha1":"82b3fe39086bcce71b9803500db9981dab0e071f","sha256":"f707bb6af6d17d2af0fbb43536a56931a89f8115c72d16bb05c818ca23b63d63","sha512":"050a9b80f5f4aa2641b32fd1e504218692710db6f8d9766453838d7e88e41e6d8be5c77bc1d3126c2829cec8d13a483167997d507eba1e6804cdc3eb061f6ab8","ssdeep":"1536:4G6d5Ec7P70T+IRCd4ffuzOtiiXJPlPo17rBsDMDsQ1O:4x5pT4+GCCnuzOg6o1aDMY5","tlshash":"756302407f96ca11cd90a932547acdd30043a35a6bfb7feb25e4b6282dca15136ee163","first_seen":"2026-06-30T17:50:27.14499Z","last_seen":"2026-06-30T21:40:02.283138Z","times_seen":2,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/mega-ball_13050a.jpg","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.492Z","timestamp":1782855576492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/mega-ball_13050a.jpg HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A21oNlnB6dvOZnln3ISvEFFtqCMXJi9zOhObqCL8JG0VXW5RZmbpnxjORUCm7obFufryzzcowwdgz7vW4Lb%2BgkRs2Mdmy3X2EzVWU8bFiMRrzBuNlhoFa4VRZDNHxi%2B%2BAiqvtw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"13050a83b27b75be07536f18ea813c00\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 36675\r\ncf-ray: a14053192cd4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36675,"size_decoded":37491,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x200, components 3","md5":"edf23c0b88e58318bf727fcee3dd9458","sha1":"6d3fe28de95688b72cff5fd328976671f40b2299","sha256":"13050a83b27b75be07536f18ea813c00770795f87f625f0c6abb768ee6fb69c9","sha512":"d44068a649e0060ca3ee143dc44b678cb8dd0cb5fddd6a513f38df8b48726847bdf0c22701510ef0495bbc3b7cb0adad19faf882007a81c84f1a716ed7f25a33","ssdeep":"768:sPw2TQmGaQ5yz1uFFFlecICqBDoL568X5Exmlu1516:aV0SQ5s1uFFFlecICqB8LseK1516","tlshash":"b8f2028800d72f1557c7897788d3cf247dd450506e929b8ba86b695bff8c21c1abf4d4","first_seen":"2026-06-30T17:50:27.138874Z","last_seen":"2026-07-15T02:47:03.129805Z","times_seen":3,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/roulette_fc0cb3.jpg","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.495Z","timestamp":1782855576495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/roulette_fc0cb3.jpg HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6jy4e%2Bfvg1nV5qmWzgQb30pxwqNBimX7DgcymjrzbAOUqXMvBFJ8Lc2PibLt4XLgwUroLcjHeMj8YGWzgfIQ8rqXURSmosKBGN2pdTzMFI8EVYcUZ8Xd8NoXMznMrhO5ur4A2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"fc0cb3aa78e1f6aa609272941c427b06\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 27744\r\ncf-ray: a14053193cd6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27744,"size_decoded":28556,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 450x338, components 3","md5":"b1d9e09cc44d77d09d7682c10134a2aa","sha1":"87cce4821091bbedf87ac4b92e187b5091159cda","sha256":"fc0cb3aa78e1f6aa609272941c427b0603b40bb9fa56637aa9df52510e9c18f4","sha512":"985dd0c8d1f842a0bd2e08b4538afed37e08d8d254d1fe0fa3f992bb8f9c17ddf4cdbb001871bbbd191d9a916dd382d75edf0c95baf3da3cd85957c2585eb6f9","ssdeep":"384:bWEx5pFHIvLmKRIGzjh3l1XXbN07wJgH4oLKxPomRz+ZTWl8qXxxN3KDjcgPlSbk:bLDeblvXyAVNhz7SqXxr0V9Sbk5fIu","tlshash":"13c2e1332fe2962899080beb41391b736f2c4d4dbd81e775a57ed2d09b708f05a77216","first_seen":"2026-03-29T22:46:39.30448Z","last_seen":"2026-07-15T02:47:03.136658Z","times_seen":6,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/french-roulette-gold_e0a170.jpg","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.499Z","timestamp":1782855576499,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/french-roulette-gold_e0a170.jpg HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5TIwUteDCCQSHZbfQPLoPf7%2F28F2g%2BZOMhu5cE8REqxFslwc7ZZF2yu99yotk5BGvViUKiAlnGyXPxKH1ISL9q%2BfFyOYnwa%2BfcdldkILDFYkJ2nDBrOR6DmCIvEeWrVv4VkewQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"e0a170c595053d30338fb8d402c8706b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 77376\r\ncf-ray: a14053193cd9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77376,"size_decoded":78194,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 450x300, components 3","md5":"00b661f3bbdda4ea81a903c4adf98d86","sha1":"956a4405ca6025f66aa9fbba1326d3f78ef9af5b","sha256":"e0a170c595053d30338fb8d402c8706b4760cfab0586cdcd56d1039bbb22eb3d","sha512":"d1459f09634ef9657f07e0dd212e7c09ce76a6ce91238a400f56605b152eb547a51c94cdd6199f78816373b41e76d3c0bcb81cf01f946dbddb2251b136732e33","ssdeep":"1536:qRoLgkY26r4wWqB8rGfLoDGSeqWy2U119sgwyoB8qBYQ937NBIM6h17mDYg:KS1qcGfT5UV9wyoy+rNXw17Pg","tlshash":"fa7302bbb9b865a48b0d57130875ec16db05c6c0c7c6830710ada78ba190aea9f59b83","first_seen":"2026-04-02T05:23:54.322779Z","last_seen":"2026-06-30T21:40:02.288556Z","times_seen":3,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/instant-roulette_dfcaad.jpg","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.487Z","timestamp":1782855576487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/instant-roulette_dfcaad.jpg HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IqgaFuNzM1DGXdBsk99%2BmM6M4yEr3hiB9nwFv%2F%2BWEHCabuxMh7hRmexHnPYmvROrTfZGqwekwDfnxZUBkFv%2F0ynMQCJirMv4DLYkAjf5igZV384KcG8mWC5p5nLYkCBN65ar5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"dfcaadba7183ca02d769319aaaf9be98\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 74830\r\ncf-ray: a14053192ccfb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74830,"size_decoded":75648,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 450x300, components 3","md5":"31c11b7ea3eb48d1646d3c1b9e5b6c04","sha1":"11baaeae434b195159cb5eb72e3c9ba741f01fd5","sha256":"dfcaadba7183ca02d769319aaaf9be98e5d1a00df148dfc0bfe71d5fb6e5270c","sha512":"2ea19dfbffb3ae792f17c6c88457207b737e48e2cb606ea0484b9f6ce9fd418c61f4d22b23e42af4cc5117fc0467d171d5fb12c0514b92f349dd871786aa51a8","ssdeep":"1536:4ZGm/popKi0eq0kN/4aEa9/mTsJALGPsPbihYcO63O:4ZGm/Op70BJKa1K5qkP++cOd","tlshash":"79730110069f492be7ccffbd5286a39070535bb09472e800519b6f0174bf691e99d6ae","first_seen":"2026-04-27T22:56:47.610218Z","last_seen":"2026-07-15T02:47:03.133012Z","times_seen":4,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/css/main_300d70.css","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.297Z","timestamp":1782855576297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/css/main_300d70.css HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w91PFdYosgm4oIENv2SQ0IewKCl7IXEUTUFW58iG7PeEBdL1KIVmg0ExFr%2BoJwDqbrHMkUVt5fW8oTcqttJPsUdwinqU12Kl6FmUU6TZzMOkTGqwdQnpCDzj5lxql2BESOx2AA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"300d708d5e9f37acf01d7fdd47a69e8f\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncf-ray: a1405317fc92b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91495,"size_decoded":14317,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (564), with CRLF line terminators","md5":"3d209d7f26bef5c0e5286f6835446fcd","sha1":"1384fed464e2a4cc0eded783b60f1598cc6b5e1d","sha256":"300d708d5e9f37acf01d7fdd47a69e8f77e2675418b79607b131927ef660f56e","sha512":"cf70d55a7b9cd403549436aca522f2ded4c86badfda3ee757db85dd03bb5157947197332eb364300cb1027da9bdcfcb9fa4e594656e3566e0d22af3d18ba25bf","ssdeep":"384:MH1uWon5RUmwMXwOj6cjxff+Xj4jRXj4j4jSFb3aRLmEiL4GyK4NVGZ52cv7F1gw:dtOMGF7aRLmEiL41Vu20Bzx6xulobQm0","tlshash":"97930f5dee3262e32a33f739a755b64de2146013ab0012667fc9a12d4ff13ac8195f8d","first_seen":"2026-06-07T20:32:55.629367Z","last_seen":"2026-06-30T21:40:02.290656Z","times_seen":5,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/css/casino-betgrw.com_1dg4_KaDnDD5mh4mL2OTQifg9giVP0smH_21817b.css","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.299Z","timestamp":1782855576299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/css/casino-betgrw.com_1dg4_KaDnDD5mh4mL2OTQifg9giVP0smH_21817b.css HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yLsgwkWyK%2Fq9b8lsK%2FMWv6x9BT7U3cKvbvfv%2FqJ2decxQWpmDwFmjeoHRebAbAgke0lH6sSwpUDyGGxe%2B19K%2BjNwdI8XWXPdCz4EGy9LGqd2HcHRP19ivVF4sYk5lSy8B8C5wA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"21817b208d53f5df27ee17b6639f0dd4\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncf-ray: a1405317fc93b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1515,"size_decoded":1133,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"22ddcf171cedb9acc7135e3a2f065e4b","sha1":"9852fa601defdbdec3ffb2eed23a8b666af985c6","sha256":"21817b208d53f5df27ee17b6639f0dd4cf023ef6c7b1cab740bf26d5fe6b7fb6","sha512":"441e2cacdaaf23598724b44da3cecb028a233fb973db48dbfec3de6fbfacb4ebed283279eddae95e6475d9af16452bebad26adc659c249ee0b27d88454a4d54c","ssdeep":"","tlshash":"17316a6adf48f576320b801ee618de563268008576549b7aad87e0bbdbca3402c7d786","first_seen":"2026-06-30T17:50:27.146046Z","last_seen":"2026-06-30T21:40:02.291494Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/sugar-rush-1000_251aa0.jpg","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.468Z","timestamp":1782855576468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/sugar-rush-1000_251aa0.jpg HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BuBX%2FDO4QMPF8Q%2BeSlL2JiwbeYhG6b8N69oTz3NC9mzS%2Fgapr2qod1ZLmsvA%2FeUyBcQucbEudM8yeaodQuV8RF3B3MWWu6d0IgMBRbcgDIMSoz6qMkSDJ9pVD5hLJkaVj%2FQE%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"251aa012a58f2db01b5e7680c74c2ddf\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 84812\r\ncf-ray: a14053190cbcb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84812,"size_decoded":85634,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 450x300, components 3","md5":"92485d20e856d26b38313ce34a916555","sha1":"baf735034566cc68c51bba335607b32976419224","sha256":"251aa012a58f2db01b5e7680c74c2ddfed5ec5f214aac5f26d62b57720002ab3","sha512":"fcac2be159de4ee98f177e3ae84ec4d2f0ba816c08e4199f4329463ecabee124814b90b2c70d1b65b6816fca93f4a69d1c5719867411b8aca5f736a70364dbe2","ssdeep":"1536:V1bDwOpPKN5SY3ttDf5b6eZ8W8wRPaXDPQ6hENrHnUJC4iJ+9CJH5upLfQ5G:B0R+C81t4SENrHuyJM9f1","tlshash":"7983029274f10c375d8efdf212a7b16bd3024c5abde2a8292498ca27d77017485386be","first_seen":"2025-03-10T01:40:23.165206Z","last_seen":"2026-07-14T15:34:13.619476Z","times_seen":14,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/mighty-wild-panther-grand-platinum-edition_a2a765.jpg","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.481Z","timestamp":1782855576481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/mighty-wild-panther-grand-platinum-edition_a2a765.jpg HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iqswlIjKUYQ2pQUjEjd%2BQtp1yQnrken6E66I0TDq9f7Rn9Q5kiLjYbF%2F7kTfFX87VIuVqAVO2TbWyEyhkYiuXqTTWlCGBl2WjPdW99qmM8rb9PHybnVfirW32olverMedc58Yg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a2a765f072d4bed87a7b17aa82377b29\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 40534\r\ncf-ray: a14053191cc9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40534,"size_decoded":41348,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 450x338, components 3","md5":"58ae4b1403a86b102cf8cac88a950a48","sha1":"5e12e3a267726ad60454802f8607cf552e6bc235","sha256":"a2a765f072d4bed87a7b17aa82377b29add915ece000b8c5f9e495bebf5ce22f","sha512":"8020218ff3a7b4f910d2102c7985a01989fb529bfb5f4ccedb3d8e7af5c77cd5f5060e903f7da35613b6aa6afd6ff734db1d237804cf164cfe3b5159cd103889","ssdeep":"768:bkAfZyd9ohCmObVA71n1cGjUjLfway1CVrgH0LF2RS1oYJPq/IBAdR:bnZyd9wgA7Q8ALwgrgHwsR2ZqgK/","tlshash":"1f03023c5fe01be175329d6da9ea51c2ce4e715a8204192e643c1dd3c2b03fbab5d789","first_seen":"2025-12-08T14:35:28.241451Z","last_seen":"2026-06-30T21:40:02.294414Z","times_seen":7,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/infinite-free-bet-blackjack_cb0594.jpg","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.490Z","timestamp":1782855576490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/infinite-free-bet-blackjack_cb0594.jpg HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rz8qIqKRnjtBnTF9T6OWkguBQZtr4oWrzfAacytJJiOl4kZx2nUPM6gSQjAq0WFTvgzuo0cxqBQXap8lxtoO2AA9LlIEhEniIK16kPYi49smuh6JHzfTaWEIcQuu5cq5cQQuPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"cb0594cbdd119d4f681ccd81076b5bc6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 75319\r\ncf-ray: a14053192cd3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75319,"size_decoded":76129,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 450x300, components 3","md5":"ef1e69a86ccfd84765312a8448b3d3aa","sha1":"3bcd6c19928ec6f66bf7f9765dd92be9df6fae58","sha256":"cb0594cbdd119d4f681ccd81076b5bc60cc9a23a05a1b7bdb1c6fbdda97739d1","sha512":"be715e555917d783b73f6cd9441f9b265d26e4d3d65e345cd954856bb15e11e0626bc58e1674b77d7209586274434e692c3549287f62b89a0646039265ae5fcb","ssdeep":"1536:4fNDwmUuQxezNE5uooXlxr0edrCB8xxTltQlvY65GhqZ6lOVH:411UuUeO5zwVltQZY6GY7V","tlshash":"617312adb666b2c7c2f4d53c1cc2f21cc745ae9a80377e0694ac7605f15a420bb6e12d","first_seen":"2026-04-02T05:23:54.303597Z","last_seen":"2026-07-07T21:24:08.102965Z","times_seen":4,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/casino-betgrw.com_1WK91dlAfDaxy40D8fkFIrxpQQlgU4HOG_068bb7.png","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.682Z","timestamp":1782855576682,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/casino-betgrw.com_1WK91dlAfDaxy40D8fkFIrxpQQlgU4HOG_068bb7.png HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fhhHLRXc7vljVi%2FSpJ2NOCDT7VDX5pBpq%2Fhrdoqvj8T7Ey%2FFi7kqcjkYrayCpcWsQK%2BaG6hmZkQxa2A1tRTUUuIJgdgWmO5n125UsowwvSB2gHFe%2BUPoGiaNrH%2FzS4x4U3Kezw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"068bb7a1719023880376b291707986f1\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 1332\r\ncf-ray: a140531a5cffb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1332,"size_decoded":2155,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced","md5":"293abfce7cf9396f743c055006e2d590","sha1":"e0df42823ac93cadc3b422c759f26a8013a32899","sha256":"068bb7a1719023880376b291707986f18192a465ab7ed2c14247e91d9fca3dea","sha512":"88bca95a6a86d0eea480c4ba94ba9e3246dcff0a1e23131843cea4a25fb9d9ef803038a11137cc5c2889c6c1686a10f5ced605cd7db9636779b34bf8cabbc2a4","ssdeep":"","tlshash":"4421d8a8826931a04990ffe3a03da1ded85e2817135a18fc66d98adf778941d47f8281","first_seen":"2026-06-30T17:50:27.152026Z","last_seen":"2026-06-30T21:40:02.295976Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/coin-strike-hold-and-win_3bad0d.jpg","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.483Z","timestamp":1782855576483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/coin-strike-hold-and-win_3bad0d.jpg HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=batcaenEHhj2bw63524OSJHEaa27Yw%2BkgHyZBiJUiKIAXKeg46bKzzSdZGHNVtwP0cybndYQ6UbKjP3dQl%2B%2B72GJ7NpCDkDpaQenG%2B9EpOs%2Fu8xUZ1nVrcMOVCDfpjI8XQ8bTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"3bad0da48d7a55184ea6af341cdbd3fa\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 88225\r\ncf-ray: a14053191ccbb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88225,"size_decoded":89045,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 450x300, components 3","md5":"1779cbf77abd4581abc718ff8b2027c8","sha1":"69211af470e120c808319ad907792769d2ca4d2f","sha256":"3bad0da48d7a55184ea6af341cdbd3fa3ee04095613f188dfb7578435e9b2953","sha512":"8d0924112e7c13c73658481dd31cefc506b0e7475ef5742982c3013942d7a9e6c837ebf052a54ab2aaf65a7434ef2978964181774788c663f29a48ccfe3e1428","ssdeep":"1536:4cBfO9EkvE9kcxjEIpaeRcEeHczuvMWIVILKY8XY5wRHOoX8UD:4cpGvEBjDpRcflMXieY75wuA8UD","tlshash":"008312101e3f89a7de83d836cfe1de797b393518b75bba0e7a91442c8747eca504910a","first_seen":"2025-09-01T12:01:58.860945Z","last_seen":"2026-07-14T15:34:13.74263Z","times_seen":9,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/crazy-pachinko_95483a.jpg","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.498Z","timestamp":1782855576498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/crazy-pachinko_95483a.jpg HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qsRknSmLb9c%2F5%2BVbiyW4KWIkZaX2GTiUzbMqtwM8ujXD9EHGxOkQ5rNocRx81d%2BasZgc3L8BN5v6WdNUYRwywsKF2zZJlIE3j0Y1KelepzA5puET%2Fj1i%2F3X0JBOjIK%2ByHm8hCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"95483a876b07c4349bb5d475d5117a22\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 77175\r\ncf-ray: a14053193cd8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77175,"size_decoded":77997,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 450x300, components 3","md5":"bfcfd881255bd2bfe64ba6ab176e7a49","sha1":"2847de37199a3d54e6d76eeab2aab1eeacde9bd5","sha256":"95483a876b07c4349bb5d475d5117a2298f0730090f406b3dfd18065051fb222","sha512":"dce98aecefc653fe6dc11b207c926fdc76f54d8616a7bfdba003cd28a7606cc57161fe85dd02f56a1fe5fa6881e03f213622aea9cbe56e95121c8a1926d81d0b","ssdeep":"1536:C9R/Qm3chwEn8m8t0Qc0W9Ye+wgrzih1Fl7zR8/7GomiFzj1a676N2Ae3usUgZnt:cJyh9nKRcHYej+zihFB8yl8zpdHUsUWt","tlshash":"e973022105ff6fc9fc612274d0dea891302a19456ab3026b200ef73976119b5f66dbae","first_seen":"2026-03-29T22:46:39.317728Z","last_seen":"2026-07-15T02:47:03.119028Z","times_seen":7,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/fonts/inter/Inter-Bold-64a1a969c6d497188ec2db849572b34e.woff2","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.454Z","timestamp":1782855576454,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/fonts/inter/Inter-Bold-64a1a969c6d497188ec2db849572b34e.woff2 HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://casino-betgrw.com/static/css/main_300d70.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sq851rmye4iUfDs9oP4nyp4nvFgf433r4EUj0LDAbQOzRjnqLuS1zui4ZfmNPDCA8J7VKC%2BqUUAINMEPeFSvVPhZvGievJRhnQY1l5qjgNprj1w64b5cFj5VXGxu%2FkBXcm6ivA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\ncf-ray: a1405318ecb8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2700,"size_decoded":3409,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"ce3501be93b7464a8a8c1c6726c13d12","sha1":"800a4dc79c4aa00bc3e3a681ef6e17999ecaf5a3","sha256":"295a39130bdecebce6d3498cec8cf3fb2a7d6d542341fc1895cbbdba03fc1dbf","sha512":"6dd64a04dffccbd2629f7acb25aff8e21c595fe76c49587adc8e44943da2e491cbd4bf8ce2c7c8442adb335e944d70007b115706dad9f21d658c65311a55561a","ssdeep":"","tlshash":"7d51311a52851909b17382b4efa36256ffeb0497c20349743bce6263cff186546e7b9c","first_seen":"2026-03-30T05:54:30.500925Z","last_seen":"2026-06-30T21:40:02.270227Z","times_seen":10,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/crazy-time_bc49fd.jpg","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.485Z","timestamp":1782855576485,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/crazy-time_bc49fd.jpg HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iapbcD%2Bqj6DOUnQ7nnCUhuVHkiQyd%2FmXbyJFmDzxxIGpJpOSFbmOz1wlhb%2F33ZHbswpC5e1biEUUl6c0FKwWvOuiQ2oJZGQ4dUTq8dXpLe4f1mNfRoYtDyRCaZHcZjeusJjR7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"bc49fdf90d0cc1b30050e56e46eb80a6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 43065\r\ncf-ray: a14053191cccb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43065,"size_decoded":43881,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 450x338, components 3","md5":"03e6542b6aba8c5a3c4b8549cad4a1c4","sha1":"14c705befd86a4e6ceb013ea3149784e0509e734","sha256":"bc49fdf90d0cc1b30050e56e46eb80a64b9948c97e9e0f61113b3d8a8ef8f7ab","sha512":"e20b39d5e1b3e05239760e944263ba2d4c2f6317c7b339ef32146bb063b3fef8fb9ca80df3c04434ab921d96f53fe206aa18e29e163f1b08bfd7df5257f4dea1","ssdeep":"768:v7kNXalvmLjtHhHe/QZz/PG7esdSqM80dpdgPeyiDQg6SVBkCajVLZ7uQeFKZ7HY:vA4FmL9hHjZDPGaGSqM8uqfm/6SP0VhY","tlshash":"091301a83deff0677f83f83aeb9881820b41c040ed93780d16e7991e4941d76b698d79","first_seen":"2025-09-27T08:41:22.421687Z","last_seen":"2026-07-07T21:24:08.163018Z","times_seen":14,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/media/type-diamant-2-68c0327148f8a601975776.svg","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.423Z","timestamp":1782855576423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /media/type-diamant-2-68c0327148f8a601975776.svg HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4VWRngT4GoCZHopV56cZOeMUNzWAzF9RLGvfLsz1bLJVRaX45mcwrHv3Y%2FqdItLg5P0YXG5LqMfa%2B5sYr1yRXJOSfKdHyI%2B3N7Ayf%2FNkZjibyCOAn9pXLJdiraKH3SVycOKo1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npriority: u=4,i\r\nserver: cloudflare\r\ncontent-encoding: br\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncf-ray: a1405318bcafb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2700,"size_decoded":1711,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"ce3501be93b7464a8a8c1c6726c13d12","sha1":"800a4dc79c4aa00bc3e3a681ef6e17999ecaf5a3","sha256":"295a39130bdecebce6d3498cec8cf3fb2a7d6d542341fc1895cbbdba03fc1dbf","sha512":"6dd64a04dffccbd2629f7acb25aff8e21c595fe76c49587adc8e44943da2e491cbd4bf8ce2c7c8442adb335e944d70007b115706dad9f21d658c65311a55561a","ssdeep":"","tlshash":"7d51311a52851909b17382b4efa36256ffeb0497c20349743bce6263cff186546e7b9c","first_seen":"2026-03-30T05:54:30.500925Z","last_seen":"2026-06-30T21:40:02.270227Z","times_seen":10,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/tombstone-slaughter_8b0f38.jpg","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.474Z","timestamp":1782855576474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/tombstone-slaughter_8b0f38.jpg HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I11KwFeMU3aQQbV8OzRV4xnnRE9TIUQhxcE7IRjh2cpvzxty6namHUnEUuU6X%2FAwYx1%2FlKcVy1RMfOmOpZFxm3XlRtujBkr6fz5rYO2fYwEUywb8864hyHqZRzGbOJGOPKkvTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"8b0f38b866aac3ee87e656501355c6e0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 73179\r\ncf-ray: a14053190cc0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73179,"size_decoded":73993,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 450x300, components 3","md5":"b6eb884328773d5e85f01b2ab5b7a7c3","sha1":"cfd06555a1340826d0252dd63b11b6b6e3dcf7fc","sha256":"8b0f38b866aac3ee87e656501355c6e0b9799f4a8b475a6780ddb55cd946dcda","sha512":"8300f89c0e29637ed661ecc21ee174d0d915def5274d61beb445e9fafb105b6cb1acdda19b968f99c5b0fcc205a88b8b98cf0c37d38a9c9ce1dfd955d08b1700","ssdeep":"1536:w8tHEjzmJ6X0GgruLbUdQgL5CZk9beG2dHGdT:wOE+J6sAbUdQUCS9AWT","tlshash":"fa63024257213f73d4d7613da1f7a916f2896bfa9027fb028049d2362f9dec3a849825","first_seen":"2025-03-10T01:40:23.18614Z","last_seen":"2026-06-30T21:40:02.300782Z","times_seen":11,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/casino-betgrw.com_1DidjkbPxWFBeh2H6JxedBoNoAEc2RZJh_d0f07f.png","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.300Z","timestamp":1782855576300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/casino-betgrw.com_1DidjkbPxWFBeh2H6JxedBoNoAEc2RZJh_d0f07f.png HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SqP%2Bi80NZrfQsj%2Bq8w5YdYs68JR%2BMNFhZHKNqhwjmgSImBbTkJ3PIvLXzkalzprZK4CfgxY%2Fy7tcRqA%2BGfmVGJd8xbXnyLjemHByW2H8XGIK1LcB0kvLUwr4CusVEHSMRCn4vQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d0f07f888fb1462b2e34bb7d7d67b2b6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 3867\r\ncf-ray: a1405317fc94b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3867,"size_decoded":4685,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit gray+alpha, non-interlaced","md5":"f5565df90dd5df95b078c3169765240b","sha1":"7ea8cd1cdc769e609846b9ed6bacd07f8ef72a03","sha256":"d0f07f888fb1462b2e34bb7d7d67b2b65c512fe2e9c4b00d0f5952fffab89df6","sha512":"e1230d709c009928b682b9626f1d7a40920f417f5497e1dbb85ffd7a7ed2a778f0edcb64b6cd4f40729de0250219d975d7cdcff89c5b629642699414c262f755","ssdeep":"","tlshash":"ba818db5bd1f08a91afa4afc06841cc4eff60b82bc3d2a4a1c979aca116e15421fc484","first_seen":"2026-06-30T17:50:27.114246Z","last_seen":"2026-06-30T21:40:02.301669Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/lucky-ducky_f649aa.jpg","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.471Z","timestamp":1782855576471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/lucky-ducky_f649aa.jpg HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ya2EIIeJS74MmV0yvcKzOMwGNDkZTj3x28r9gOI3iycv7vbc4jd0AHLqiDcnig3Q4HSSEfPvYfugP46dW7TyaWx3FekuffLO0PabpYGRIQVEnuOiOlvud%2BZhJMeAMvpp1rk0NQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f649aa07f6973bb3b57d2310d401a3e0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 66644\r\ncf-ray: a14053190cbfb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66644,"size_decoded":67456,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 450x300, components 3","md5":"1d8521d06d88a5d2b64002bffdd79578","sha1":"60afce31c8f73ffce27adf3dac8cf36c976c2b11","sha256":"f649aa07f6973bb3b57d2310d401a3e0d5523a446b65342837aaef2929f0929e","sha512":"464ca7c12228333f3694e7d1576d0da852265b3b7f6e2adc616ad5df580ad87dbca65d10dd8ff7e7af1019e921c8d8f3a14a211579b9035d3d749d99e7674caf","ssdeep":"1536:PLPgadfeQttttttP7yHh3rqzJ78DnwND8ZlNU5KsQRTRxRlDOn23MI0Iq:PtwIplmnwp87N+ubRVOntR","tlshash":"d6530286408a0993ccc0665e4c18c9be1546bd8bcc16c6db32e895cba5c91fe678e7e2","first_seen":"2025-09-01T13:57:12.646853Z","last_seen":"2026-06-30T21:40:02.303395Z","times_seen":5,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/lightning-roulette_66a4fc.webp","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.475Z","timestamp":1782855576475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/lightning-roulette_66a4fc.webp HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IMN63SJj%2F84JFYPj13kV0vl%2FZGsRoXF4SdyaMJFTxk9gKuKFr89QkAfdI59jAxfAcQRbVEabHY2LZzc%2FOxIU9E9Jotp9rl8rxLonm4XEy3%2F%2BCkQtY%2FSS%2BbSrQIpRVN4pH4O24A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"66a4fc5b0a869e85430111ace9a18da0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 12346\r\ncf-ray: a14053191cc3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12346,"size_decoded":13170,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ccaa2e0c89405d4c2286303bbf8c3c5c","sha1":"c6929e520b0301f43d10730985f2f508f3728dc6","sha256":"66a4fc5b0a869e85430111ace9a18da08aa58b1a05928854a24789a90bbd4bc6","sha512":"a8de63bcbcd48d51f6dd553f11d954cbc6c83d36631fd35f9b9ae893c7e789f1896aaed81313b59699ad7a6ea17e60dec6664e48caf713cb4ce41dc775939486","ssdeep":"384:UwTFqRj8kbk7ZPXfEeCVInx5AmTLZGEUg8mrgsI9sS44:RTFq9tk7NXfpCVgxKmEw8AgsS44","tlshash":"0f42bfd117685308eb13e970e9e20ab561ad188a6cf3eb2bb055d153675c8ccee9d02b","first_seen":"2025-04-19T10:53:23.29495Z","last_seen":"2026-07-15T09:31:40.116976Z","times_seen":539,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/static/images/powerup-roulette_623398.jpg","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-betgrw.com/","date":"2026-06-30T21:39:36.486Z","timestamp":1782855576486,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET /static/images/powerup-roulette_623398.jpg HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-betgrw.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i37vQNkaIHgh1l4WDDNpszJ1GbD8VDEXjqyNV5aTC0qlC%2Fh3BEg%2FeZNxOQT7D4%2BQAg1HZiS%2BvkFUymXOWcE5ECTPbscMF94Xl9g%2Bipbu4uXjxBXXSf0ClB%2F%2F4Pb3OF%2FDWE4sNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"623398ab98bd200ddd82931937f4f1d6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncontent-length: 78924\r\ncf-ray: a14053191cceb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78924,"size_decoded":79750,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 450x300, components 3","md5":"57a354044f0bd0f34913b9cee751c7cc","sha1":"2b82d810ffe4080af1f59333d0327ae2153a7e0a","sha256":"623398ab98bd200ddd82931937f4f1d681206352970862d96f2db53418f26717","sha512":"839f51e39840da2db49ece467dc02d05ede61fe4b05b2c9b0f077b1fdd94d2f03f2943e3924c12d9a4159c1383df916773956b0bcecc436a0b8682a4b8eda1c6","ssdeep":"1536:nLnyzVjCVR3wBIhtCgjZy7CSDuFN32Rb4C0izPFeowj5qAaB:jyzVjAR31OgSCykN3k4C0izPB9B","tlshash":"877302145baef84cf2bd5e34406deed4d1e6031b586f2056e8ab4219c31c22ef40f1ea","first_seen":"2025-07-07T21:11:04.195016Z","last_seen":"2026-07-15T02:47:03.155755Z","times_seen":26,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-betgrw.com/","fqdn":"casino-betgrw.com","domain":"casino-betgrw.com","tld":"com"},"ip":{"addr":"104.21.8.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-30T21:39:35.856Z","timestamp":1782855575856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-betgrw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 14:32:49 GMT","end":"Thu, 24 Sep 2026 15:32:41 GMT"},"fingerprint":{"sha1":"C0:A9:6C:55:FB:EE:95:3E:E8:92:C6:1B:63:E2:ED:34:43:4B:79:7C","sha256":"75:B7:8F:56:AE:A7:E7:5C:52:1A:88:E7:90:45:2F:9B:B0:7B:E9:90:B2:91:86:06:3D:64:9E:77:4F:33:33:96"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: casino-betgrw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KmObAlItLrZSnGzb1%2Bxy1l7iQZ8xiUIIxM2jQzMZ3IoYcvzJbtdO9ZvYHVqGUkW%2Bvwg6dexAEQVZjMDtTJJ3kSHIieVrLphb3Dn36AOtspAUhtmW7%2BnGesjUUbcOwQGRhCIPmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\npriority: u=0,i\r\nserver: cloudflare\r\ncontent-encoding: br\r\ndate: Tue, 30 Jun 2026 21:39:36 GMT\r\ncf-ray: a1405315dc38b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":250169,"size_decoded":19823,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (675), with CRLF line terminators","md5":"a782cde00a4417e6d0b835cc745d24bd","sha1":"4550752387d3092592c5527105a41a134e9edf83","sha256":"7dbbff276e819d4a1100bcffc9373ae845256a392d3ac4acf0b8075cc9521b1d","sha512":"6e7358dc7288e32883eaea5870cdb4ccc1c84b69daa428d903b22d69c9df45aee8de4bd24d782d5f1651f4ee3952bae798e012ca443f457334e88519d77a6290","ssdeep":"1536:lJAj9fg3/GQ0xxZTnE1GsnGcSpGMSEky/mkC/mkv/mkC/mku/mkA/mkJ5u/mka/I:4DY3YU2MALi/wI7","tlshash":"be34f8b06ae1a1b50573f3b2d8153d8efb96606b8a074940b79c6786af72cd7cc6311c","first_seen":"2026-06-30T17:50:27.109834Z","last_seen":"2026-06-30T21:40:02.306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":46,"connect":52,"send":0,"wait":122,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"casino-betgrw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}