{"report_id":"2a6a0e74-7cc4-465e-a3c3-d4410f222e66","version":6,"status":"done","tags":[],"date":"2026-04-28T16:37:47Z","url":{"schema":"http","addr":"casinos-nine.com","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"172.67.158.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"casinos-nine.com/","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"title":"Nine Casino | Bonus de Bienvenue 150% Jusqu'à 500 € + 50 Tours Gratuits","dom":{"size":58184,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (46281)","md5":"b10ece63e4f546bec4ac42c1ea0c3e2a","sha1":"269295522db20ecf6cccd0b78bdc246a8d9d880f","sha256":"247b8c98f9b4aed171be9d01752513757a9b3a330d8ce6be653e84a2a883948b","sha512":"7eed5dba4964099f0fec53a5387136a8c59ebc734639cdbe961fcedd54d266052a914d11989681cc3e18c4c565d40a0076374826168f9b6f82a16585e95bd0f4","ssdeep":"1536:eD9B28UpxgjGU9ay4j6NRYoymEuT7K0xVHUH:eD9B21ixA","tlshash":"4043f9a0a988ed27239784d23017df9ee3cd041bd79a5ed439ec4af6f7cb4271561260","dom_hash":"domhashbf1d0f961b812e250c92226ae1edf218","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"casinos-nine.com","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"172.67.158.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-02T16:37:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"casinos-nine.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":47,"request_count":47,"received_data":1722282,"sent_data":22983,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/chunks/4.034d7296c15af269.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"169e4a8ee2e328103eb9e75e551aeef9","sha1":"67df96a07a81d172ede3502788baff25e00424c2","sha256":"b5af1599de85d78b5d039e31f2ac939458a5cea139dd19e90d37a955ee13d99b","sha512":"4d1b4b8eea0977eb373a19ec9b9eec17032f845dffa9e8731e7b2b621f9ed9a88265406428c2ee74ce6f2cb6d14aed1dd8c6451b5fb04321899ec44e8bef02ab","ssdeep":"96:hp1tubabFphMV+Qm69Byph/nXkJM6cFp1Jv1JaPd7oGg1OC0sX4l:TuYhRd1broPloGg1ssIl","tlshash":"a1f15681e287bbb5aeab58c2512f850d733e2d0dc7364cb4f674a8024690cd8b5d5bcd","size":7497,"data":"","first_seen":"2026-04-28T16:37:53.775936Z","last_seen":"2026-04-28T17:03:55.816934Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/chunks/webpack-f4ce0f3f45df62aa.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84ef2de257e550ee77cc6a33e4d3529d","sha1":"0d579225355d8a74fb67aa7bcdf3c9d3d1daf79a","sha256":"4947a0ca5a40166e23517de28da0f3b0b104cf79ebe105adc0feceb0fa086365","sha512":"b970d291e0c83f87fbf456e3b1423b6415f20b07732285073aa2ac721f1e63ef152d2bf34b0b41ad9ef23290924a618c74cb78ac0e50a20b65681d29cc1e648c","ssdeep":"96:qIATpEzq7QnRRjB7EKjmvFqMug1kkNx9F9VKsGV3HGjJE2Uj19QnRVGeTVIfRs89:qZWzrnj97EMOFLBkQ9F9GpGwj1qnRVGf","tlshash":"b1c1b6de72a0f5b6164365e0593f915af03e247b781ed0a0970ac9f4bc35a688533fe4","size":5968,"data":"","first_seen":"2026-04-28T16:37:53.795551Z","last_seen":"2026-04-28T17:03:55.808001Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/chunks/main-69b63e2e16716907.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88ac3c4d4d8044e62af740c79450b794","sha1":"204aee73c4d44e8b1ee68be86228e42488153b13","sha256":"174c4c9955f35a80888ee630b848e2122b15bf6b47baa1c2d3529e924c79bbb9","sha512":"b079ff7c1455a3fe79f8481578928b8d8fa37701e8b15c9d704a393f97564dd9edd1073e69461673a79313c3a0c9fecfd72c9322bb1324b144a8949ce3ddc1ba","ssdeep":"1536:MpLDGYjwpNLTvpKp0Q78ILsDQs7G5j8SCmaoaYCOU:1pqCQ7fLsDQs74VEOU","tlshash":"15a3f9b676d1f8a213cb41d4883b1006f2761d7e642f6045b3eadcd6b96098e90f2f79","size":98298,"data":"","first_seen":"2024-10-15T23:35:42.506487Z","last_seen":"2026-06-02T03:03:59.004649Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/chunks/framework-10ae643bd7ba2303.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91eb10e0c5b60f80501425850b7ebf82","sha1":"8344750bc431fbb9e8a5170a82d08c7664639609","sha256":"4c185f58731fad68b5e3ef26e102ce9b3cb56aa8257d39aead25b675152a339b","sha512":"bae75fd66f5ebfd2cd4b3904defe212456502a8cc1ab092c8b58605c6bdeba1d9fc2fa0200ba9a6699df89af547ba3d51b8783dad8061210ad62f240b6ff18dc","ssdeep":"1536:2YjvmNg6kMuR40esfdznYBSq6vvnwGzQ2N0mIQa:Djv4hudzno6nwq5a","tlshash":"33d308e87996f6516ab311a700af2803733d2a1b280c4d60e215fd9e75b841bb17bfdd","size":141013,"data":"","first_seen":"2024-08-19T23:48:37.498483Z","last_seen":"2026-06-02T03:03:59.000906Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/KGAumpjrjHCCABx72YG_6/_buildManifest.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fe31734574ee1c28e79113f58327bcf","sha1":"381b15293d95f356b27b711186a077c0af68eb2e","sha256":"7df5814a195cffedf3f307a5bf83b98add0221393ec3895cdb2d3a315e143bc9","sha512":"3035eb642e1c64019c36ec23ac94d1bd12d5f604014c52ea267d7d8f6b5b49a2b632b893708813e5da097fee478be6ae033bb273a7a3ec61505faa8b1ffbb872","ssdeep":"","tlshash":"c711bd82010aea1a2ce8ed47373f13a3af528076663c0ab78bcc1d6c51904675f2b861","size":1014,"data":"","first_seen":"2026-04-28T16:37:53.760525Z","last_seen":"2026-04-28T17:03:55.788393Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/KGAumpjrjHCCABx72YG_6/_ssgManifest.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-06-06T23:10:39.808192Z","times_seen":232184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/chunks/pages/_app-07db9d5739b33117.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"510cf0ea962a6e81c60d755f02287be9","sha1":"d945a8285104d38d62ce0a1f2eeec4366c47e4a6","sha256":"33a6f1f8ac1905b1b3afc288c7838a1f8a6beb87aa16349a40f9bc18414a70ef","sha512":"e0b6929d863c1c70e165d779cc41373b4dde04b16c2574028d11a1f112ccf63d74f19fb52045da2878ee678f9412744f3cca5078eebfbb77dd4a98368391b820","ssdeep":"3072:ii1PkPUKsWkGa4HtlYw0kn5DU+djxlozNm8ad6/QQX+uhuxOEowsB489M4cJkcxN:iiCcKsRGH3dCadhQ7wqNJiRs1+HZ","tlshash":"17a4f7d97282b062839760b6847f010af33e6a98240d802cf6add4db7f7564d9277f79","size":487956,"data":"","first_seen":"2026-04-28T16:37:53.796661Z","last_seen":"2026-04-28T17:03:55.795495Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/chunks/59-111076122bab2d33.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ac5151aa7c675b87e693abc2b43f924","sha1":"b9a2c0917c3ca721957350d7d8978dcb10aeac16","sha256":"b11c93cbbd990f8b59807e9ad9a7ee52e0826fdd5c13336ac3d9f9044ce3d0b2","sha512":"2955eee605e950c2aebc63bde4bf8c7577c52c2674260e6fcacf82950c18e746bf04250ed4f478648d03c286b85d13d91850be6bf6e96a6542a0ad48c80e433b","ssdeep":"192:CzBOuoWlyVDyuyK3AP4g/blhMs1fqnp40a5anY7mF9:CzBOnVsP4GJhMXp4r5Gx","tlshash":"b062b56e49464cae9abd98e4c427410cd3ec6646f144bc60f7a68513b1dbddc61b33cb","size":14766,"data":"","first_seen":"2026-04-28T16:37:53.79068Z","last_seen":"2026-04-28T17:03:55.785996Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/chunks/927.a7dc7992c436ba78.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"169204fe2bcc42c380af5e1ac2be7fe3","sha1":"8a03ce5223655c895c434033b81080a819fd917b","sha256":"e77204d4fe82687b08d2c78d02e066935c1b0c697a95682b12decbf3776b528a","sha512":"d47937c3eca1582d992d537eaccc779735e73d5450fdacdb27f801abff617ee8dd60a5fbdbde063b15a402746facd53cf439b115e864099f1c7537b218b3aed3","ssdeep":"","tlshash":"905131059986fdf9f9ba0cc9925fd53e762eb40f990c8da8fa7488414c098843603be6","size":2571,"data":"","first_seen":"2026-01-03T15:12:30.935058Z","last_seen":"2026-06-02T03:03:58.989391Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/chunks/546.767fc6323cdbff4e.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dbc38029da6bf4e8577f4ea86070313","sha1":"ca82c27f54ccb29ac2c9bafc04c6daf8bb697fe4","sha256":"cf8e5651bbd6a6c3e0b4ead08245c2038a435f51aebfedbeda73c51e16f8ebb8","sha512":"d111610f37cdf70f5536f4072a26b0793c7c03d0255cc14ffa6a791132b186d7947a57b54f5359596d682538075e3fb42c2bee26aa8690b2b7fa14852f3798fc","ssdeep":"","tlshash":"e2410244f0d5ff60a7bfb0f8866b5466a22f294897980c92f3e2ec4d145028c63b36dd","size":2376,"data":"","first_seen":"2025-03-27T03:50:55.681244Z","last_seen":"2026-06-02T03:03:58.995982Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/chunks/pages/index-67c545f8362cb3f5.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"045dc07f95969c2df33cd4a214e83717","sha1":"b89af6510652f59367921b09cf4a68bebdb27dcf","sha256":"9d8c30be80230957002ab1fdbc8babe834fdefd49204879c1e609a5491fa05aa","sha512":"76205eb0e13934fa7b15710243ed9e6da746e20ff36b77dbed304ce80c27d6c9bb9ee005c6be3125aec1b75b9ebde613fe9d54dafae5eea366e872085eb026f7","ssdeep":"","tlshash":"18011298b493be086b2750f8462f310e63be795e153e49a0b25284c83af231d1a91fcd","size":828,"data":"","first_seen":"2026-01-21T17:57:31.276517Z","last_seen":"2026-06-02T03:03:59.017415Z","times_seen":251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/chunks/966-2601235ce9ca419d.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3916183d5387e7871a478a2753108c78","sha1":"d6c20ccfb0ab889c2783026c0faba3360097942f","sha256":"5e1379964fee60bce05cde87c8c634a2600371fa60bba4aad38e1ad9b2737bcd","sha512":"d8900dcd34a78a6964c4deb4f6b17e6af8d6120e7081a62a7575c5238d6c1ce129df74a73a69c24b534e4e770ab7e9cb0655a3871da3ea81f188ab9231632edc","ssdeep":"192:vbZDMNJAQDemeCjuUZXXmwEy4HxpEkduQh:v9ba/5z4kkduQh","tlshash":"95f1c6b27782f90623c5d4a4c17ab01fb5ac9c2b5d0b50f8b569cdeea9e015460a0f75","size":8192,"data":"","first_seen":"2025-03-27T03:50:55.682304Z","last_seen":"2026-06-02T03:03:59.001644Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/chunks/492-27fcff75637ccad1.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33a3b66aeadc3f947af1a3e6b40d8dc9","sha1":"571b79088328bec4ff380e3bdbda28ae5e49b676","sha256":"cedc3412d27395c225ff730e22f06a0a579dff72b81b4dcfd1e9cca6633dbd0e","sha512":"3313106d76774c6a8a8235284cddaeea6ba1e92a25d46cc3dfd438c92115bc818ee82004aca8bb2e952b1f1c4efc0b8ac19758cbe5a13d6e2f4f96d8d5f5cbf3","ssdeep":"1536:hwu9CI02UwAnwvb1gxTdIZHolguxq8fyBh9GpNjpCq30H/atJU71cuz:G3JJk09Icuz","tlshash":"bda308da7361b1b593eb12579269c141e3b608887409842cb1b88cdb697d99c13ffff8","size":98327,"data":"","first_seen":"2024-10-15T23:35:42.529902Z","last_seen":"2026-06-02T03:03:58.991334Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/chunks/927.a7dc7992c436ba78.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/chunks/927.a7dc7992c436ba78.js HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"a0b-19cfc415091\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RJVmOIIuOVIw8OnQZG3o2JsgXcly32eGCpL9LJMEV49GAn8RE%2FBBSnfVwBQlRK43dfsc77uijlcDO4JK1sVTksEfzZISBnB6xozK4uoSLhBMRl9Il%2FVRTAHQZJbRvxKbQwTm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dcc9a4a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2571,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2571), with no line terminators","md5":"169204fe2bcc42c380af5e1ac2be7fe3","sha1":"8a03ce5223655c895c434033b81080a819fd917b","sha256":"e77204d4fe82687b08d2c78d02e066935c1b0c697a95682b12decbf3776b528a","sha512":"d47937c3eca1582d992d537eaccc779735e73d5450fdacdb27f801abff617ee8dd60a5fbdbde063b15a402746facd53cf439b115e864099f1c7537b218b3aed3","ssdeep":"","tlshash":"905131059986fdf9f9ba0cc9925fd53e762eb40f990c8da8fa7488414c098843603be6","first_seen":"2026-01-03T15:12:30.935058Z","last_seen":"2026-06-02T03:03:58.989391Z","times_seen":183,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/KGAumpjrjHCCABx72YG_6/_buildManifest.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/KGAumpjrjHCCABx72YG_6/_buildManifest.js HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"3f6-19cfc41508d\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZXsjGrAdnCij4IjMkOGvOS8TfTGr3Z%2F7GlXzx0b8FOcdip2xu7jwpZ%2FyhpyrpyQv4OrQwz4Of2OsPAAoWPq1mZIjBc654VsJ9IbanT3hqzSbIA2x0j7n5YMpu1y9chDYS5Gf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dccaa78723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1014,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1014), with no line terminators","md5":"2fe31734574ee1c28e79113f58327bcf","sha1":"381b15293d95f356b27b711186a077c0af68eb2e","sha256":"7df5814a195cffedf3f307a5bf83b98add0221393ec3895cdb2d3a315e143bc9","sha512":"3035eb642e1c64019c36ec23ac94d1bd12d5f604014c52ea267d7d8f6b5b49a2b632b893708813e5da097fee478be6ae033bb273a7a3ec61505faa8b1ffbb872","ssdeep":"","tlshash":"c711bd82010aea1a2ce8ed47373f13a3af528076663c0ab78bcc1d6c51904675f2b861","first_seen":"2026-04-28T16:37:53.760525Z","last_seen":"2026-04-28T17:03:55.788393Z","times_seen":2,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"89fc-19cfc41508d\"\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oClPWyUsPdNnhuvEIF%2B0o3NfsNz8OOdM1uvqaDdSzZeSWWaLKgaOA5ZCyY1MAQCn6CZMy1x1npu604o%2Fj8%2FBoKo9ScLn%2Fv8jcpMaK0vXobVhOzC0Bdacl%2FORglXAbDsHpYrQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dce3f19723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-06-06T15:56:41.92608Z","times_seen":1777,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2Fredgenn_Black_Wolf_0a8ec1c933.png\u0026w=1920\u0026q=75","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2Fredgenn_Black_Wolf_0a8ec1c933.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21852\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: -U77pMGf5wIflLXK5FT16xq39RkD7+2Vse+9BiIQbMs=\r\ncontent-disposition: inline; filename=\"redgenn_Black_Wolf_0a8ec1c933.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BIW1lq0DLJTsDjSmg93yP3jwwPUSGI0M3hKlQAruBNGiRu2pDxMQ5vTb1a%2BlZcH9UExJVb4mIe5b9B77dHuZfru1nBkrrBVH06gK6uWDGe9vmZrCoNlMJ7TBQO4wnwMiOo5K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dce6f8d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"53bedb6b67e143164bfa4534fa4f36d3","sha1":"bff968fc4a385ba40ea1a47a2707b4ea24b2e15e","sha256":"fd4efba4c19fe7021f94b5cae454f5eb1ab7f51903efed95b1efbd0622106ccb","sha512":"b63b0dbd6e04300b3c9960af0e34f4cbbbaf938bf476da0fb5556a09c96f312bcf26594b575a17e6d880532a64d9f2668468353b7f4e7aa93c1b6ed670806e2a","ssdeep":"384:pjrM7MlwcHoSV9gGVyZMmz+BZLG6qR4tycM9VghKWHKC6kZr32KcFEP+YW3U51A4:hrMotISVa+yZruJqjcUqhKB+4Kcw+YWO","tlshash":"18a2f1ec78fe79c856add688316621f5094c75982a727ee88484173760cdc10dc3fb3a","first_seen":"2024-08-19T20:10:03.131774Z","last_seen":"2026-05-27T00:20:53.023385Z","times_seen":92,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2Fbooming_TNT_Bonanza_eab23e7b13.png\u0026w=1920\u0026q=75","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2Fbooming_TNT_Bonanza_eab23e7b13.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21766\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: rsNlfTOM7gxj80vNfJyVjM30TWfAe1BVsRAQbHPKJXY=\r\ncontent-disposition: inline; filename=\"booming_TNT_Bonanza_eab23e7b13.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cM34XDM3N9o7zvSptrfj6UHVb58Pqj8IdEViDwwPt%2BTwlphTunworyA1FEyOOSHT5Ttxp7LIfRNiMplOL7okahCGCtbnO0wPhyH0VT%2FTn81K8FwW6lPUY0s4ZaWawsZAmanF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dce7fcd723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":21766,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7c9d661601d0190b070657e03baa0498","sha1":"2b10101a8e66aab2dfff86c90f9ab453519badec","sha256":"aec3657d338cee0c63f34bcd7c9c958ccdf44d67c07b5055b110106c73ca2576","sha512":"c8f7a1de5ad688b12602fa125026f539f04985c3fc350a308dc8ad8eda8ac7de8be6024e3bc75a738ca40bc66bef6f375034ae5d59befd8de644df0521c73393","ssdeep":"384:0+RzTo+Fne0nvhpFnpdAaegTyLXQbilCH2NljAuPWeRTf9lKjzkHBFLP3WBcoSg/:tRzT5k6hpFpXuLUila2NljAqlV8MHBFU","tlshash":"25a2d183ceb98d29c614272b937155391cb2979f6fc24833aa4a59f871f4ea0f67016c","first_seen":"2024-08-19T20:10:03.101318Z","last_seen":"2026-05-27T00:20:53.031054Z","times_seen":87,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/image/?url=%2Fjackpots-wins-place-3%40X2.png\u0026w=48\u0026q=75","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/image/?url=%2Fjackpots-wins-place-3%40X2.png\u0026w=48\u0026q=75 HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1214\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: ek0UevHZ-FAi0Kfsh5KGMvAuZZH89YxPoXyU38sWils=\r\ncontent-disposition: inline; filename=\"jackpots-wins-place-3@X2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X62DeA5ONo%2B8E8QqoEPgbLoszJ8hFQZ%2Fd7tcugK50ieUHG25TFtMw5TFjHJG66tWnCkOUqk0TNZKLCEkvlL1G7Hb1%2BDv0hA4HF5FI5DQhX4MS2%2FJ90RvoJoeabYYNsunnYop\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dce8ff9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1214,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6460dceeec5235200dceacf11eb0b7ed","sha1":"dc487405685aba83b1df520c2aca70571b903f5d","sha256":"7a4d147af1d9fc5022d0a7ec87928632f02e6591fcf58c4fa17c94dfcb168a5b","sha512":"9bc78b3f48c093a1c113f20fc42273c525d9b47d42e29c3d94b363298e4fd865cb62866064fbb2319664bd40b19a196cb664650d405ca3f78496edc15d613046","ssdeep":"","tlshash":"6921e79fe0b1083d0d800023a027016f42a2419e769b0ae034524e520e1f20d4ebb7a7","first_seen":"2025-03-27T03:50:55.648055Z","last_seen":"2026-05-27T00:33:43.230227Z","times_seen":116,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/media/c1b11e140b58cf5a-s.p.woff2","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/media/c1b11e140b58cf5a-s.p.woff2 HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casinos-nine.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:24 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15108\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"3b04-19cfc41508d\"\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fyxXzaAqDvFiH8BKBGmo4We2Wr3ZpT6v4BsqO4R7hzyo94aEsaGDHyxHR1F9s47OJXfwHOlD0b9e%2BaxXn432lehWEuybYUSGElhzH7aLqlZGAQLqWWVgDdPAK8n92qygSj4I\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dcc9a1f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":15108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15108, version 1.0","md5":"368f3e99ee207a4a2e2584eba7d3c82f","sha1":"9f907e41605807c4bf4f960745698b1e430a716b","sha256":"963fc62d2cf3e59e6f338db71b85b5ea86dd009fff859116d51a31a9b98d1d30","sha512":"2eb180c4cba21fa77eb89d801d6e55fd10acebe3a25e99228e3ca5861447a393aa60420a21f3cd573cedf5107dd391b5e5e1fcf5e09e799f2cbe7a6826eda2b2","ssdeep":"384:VHJTAkiZnTfVU4LSYdh7Db82J2Werb7VVX0m1+cz7aNw:VpTA9xTfVOA5o0erb7YmcGaNw","tlshash":"c562e16e92dc05534d2bd6f84eebd8cc7bd0f8548133af233905a62a854b810f218be1","first_seen":"2025-06-16T02:04:53.862041Z","last_seen":"2026-06-06T05:47:14.560815Z","times_seen":356,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/css/352d5236847d301d.css","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/css/352d5236847d301d.css HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:24 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"644-19cfc415091\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jjsvKbDa5mqNn%2ByynyZTMZiCwWy%2FZ%2BZXM6iZI0jaUmoVnma%2FRz3BHn4ywf3W6Ofx6FcOxydVVqGVvnp4nPJn0%2Bi2RKF1M1sy2mQkWJX%2Bw6i1Ur3hAvR7jNIi2ZPBRRJI1%2BCO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dcc9a37723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1604,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1604), with no line terminators","md5":"d861c7ab0c20ce2a7a153e0a29f1f60a","sha1":"fc6bd3dab3f134d21c58832d9de3f830d62f1ec9","sha256":"4ded20bf9809d391e7e962e1395b3522283ca30f52fe7a86155d1d5b4b3789d5","sha512":"0f8ba9f03c97e33b8a6a9c2cda9bb1a130f8e2b72e70254c382de16ba63d39be6516245f7e740cb52a947fb85c32939217c29b9d982f330bed19c438322db91f","ssdeep":"","tlshash":"0a31bf1195c2af35f9bba4a95fe0367f7816584887fa0ddac2d5f35582ce0d2831c54c","first_seen":"2025-03-27T03:50:55.637284Z","last_seen":"2026-06-02T03:03:58.995344Z","times_seen":268,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/chunks/4.034d7296c15af269.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/chunks/4.034d7296c15af269.js HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"1d49-19cfc415091\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=68heV%2FH7FfsMzbcmWREE1Sk47Y2QYznSGUhSMDUtHAwDAaxKjqQNso2gYsvEEwsNvchRb9%2F1sbFjuJtQz5RyDjY1fZWcMJLeo6WHVTJwIt%2FTbhzdTHkddOC2lU8yIEdO92oA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dcc9a4f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":7497,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7497), with no line terminators","md5":"169e4a8ee2e328103eb9e75e551aeef9","sha1":"67df96a07a81d172ede3502788baff25e00424c2","sha256":"b5af1599de85d78b5d039e31f2ac939458a5cea139dd19e90d37a955ee13d99b","sha512":"4d1b4b8eea0977eb373a19ec9b9eec17032f845dffa9e8731e7b2b621f9ed9a88265406428c2ee74ce6f2cb6d14aed1dd8c6451b5fb04321899ec44e8bef02ab","ssdeep":"96:hp1tubabFphMV+Qm69Byph/nXkJM6cFp1Jv1JaPd7oGg1OC0sX4l:TuYhRd1broPloGg1ssIl","tlshash":"a1f15681e287bbb5aeab58c2512f850d733e2d0dc7364cb4f674a8024690cd8b5d5bcd","first_seen":"2026-04-28T16:37:53.775936Z","last_seen":"2026-04-28T17:03:55.816934Z","times_seen":2,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/chunks/492-27fcff75637ccad1.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/chunks/492-27fcff75637ccad1.js HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"18017-19cfc415091\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9P9R%2B9HLmgyxyYmPb6oGozOkftdqf1b5D9l5CX%2BlalrRTdvHbEEQdsGR%2F%2F58TfALNwTtD5jw2L6i0%2Fwlc37d0pZASUPQ3gtVxBsJ%2BLRUD7dIpAMey%2BKdYqPkAMlIo0LV%2Bdv5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dccaa65723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98327,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"33a3b66aeadc3f947af1a3e6b40d8dc9","sha1":"571b79088328bec4ff380e3bdbda28ae5e49b676","sha256":"cedc3412d27395c225ff730e22f06a0a579dff72b81b4dcfd1e9cca6633dbd0e","sha512":"3313106d76774c6a8a8235284cddaeea6ba1e92a25d46cc3dfd438c92115bc818ee82004aca8bb2e952b1f1c4efc0b8ac19758cbe5a13d6e2f4f96d8d5f5cbf3","ssdeep":"1536:hwu9CI02UwAnwvb1gxTdIZHolguxq8fyBh9GpNjpCq30H/atJU71cuz:G3JJk09Icuz","tlshash":"bda308da7361b1b593eb12579269c141e3b608887409842cb1b88cdb697d99c13ffff8","first_seen":"2024-10-15T23:35:42.529902Z","last_seen":"2026-06-02T03:03:58.991334Z","times_seen":271,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2Fsoftswiss_Dig_Dig_Digger_e775d7f45b.png\u0026w=1920\u0026q=75","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2Fsoftswiss_Dig_Dig_Digger_e775d7f45b.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26962\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: AzSFO1WUx2-1VIIgfxOwWyI90fx8TGb3o4bJatAWqNM=\r\ncontent-disposition: inline; filename=\"softswiss_Dig_Dig_Digger_e775d7f45b.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fXzH8PU9VKD3%2BkdkzL8Dw8kcFeMWcYU1OZ0NNfhWLHGoGd2E0Ztjjm25Oa7X0sTzLY6s13AGzNVi2N7uapEk%2BQa0kbOTq3l9oCWVnjQuJXUh64cnglDHRpwmxGqaeNoBsKUt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dce6fa0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26962,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b7f1024608ca6e96df2fd83dc6ceb2ba","sha1":"43bf1e14d076bec914f5bdf95d10dd1d1fb80538","sha256":"0334853b5594c76ff55482207f13b05b223dd1fc7c4c66f7a386c96ad016a8d3","sha512":"392de0371c69d790394b15cbe6bf1abdd3e1652107256547cf341ac78dad216068cfb11ae5e03d697ee99d4fec454ffe79ff13782838aff067b3c0cc7f1aa062","ssdeep":"768:wvBOc9f8BWKrVGs4XerHFP691vwUfCwHrioqXdypEx9iqVfE:w/9frKrws4XerlIvpCwHkNt9igfE","tlshash":"37c2f1217e92890ca77dd0bbed9374a87cf0466c466270378c03829977ddaaecb1d64d","first_seen":"2024-08-19T20:10:03.123447Z","last_seen":"2026-05-27T00:20:53.035608Z","times_seen":91,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/chunks/546.767fc6323cdbff4e.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/chunks/546.767fc6323cdbff4e.js HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"948-19cfc415091\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7qzx%2Biw%2B1XCUzo8tJfgV5up9JFAGQCsRAXamnuy%2FRb88n%2Fdjc1k0awRziVo%2BuxbMpmmhC7FIa4nZCaYpeoTyXACWPgw5K7hoaAY4akfYWNuvPxQvNtFLZSWUWwktZil%2FnIxC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dcc9a47723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2376,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2376), with no line terminators","md5":"3dbc38029da6bf4e8577f4ea86070313","sha1":"ca82c27f54ccb29ac2c9bafc04c6daf8bb697fe4","sha256":"cf8e5651bbd6a6c3e0b4ead08245c2038a435f51aebfedbeda73c51e16f8ebb8","sha512":"d111610f37cdf70f5536f4072a26b0793c7c03d0255cc14ffa6a791132b186d7947a57b54f5359596d682538075e3fb42c2bee26aa8690b2b7fa14852f3798fc","ssdeep":"","tlshash":"e2410244f0d5ff60a7bfb0f8866b5466a22f294897980c92f3e2ec4d145028c63b36dd","first_seen":"2025-03-27T03:50:55.681244Z","last_seen":"2026-06-02T03:03:58.995982Z","times_seen":268,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/chunks/main-69b63e2e16716907.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/chunks/main-69b63e2e16716907.js HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"17ffa-19cfc415091\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yYzZd5D%2Fn1XKAKgaTjQVIU26%2F0qx4%2Fv4kfd9%2B81SKK7wtMyPwLDs0O9pPtEjesq1AEQ%2B%2FFvISx76mZ9SkztPi8GzMHNlBO0YAeo3Ggi%2FuSoWobrir4BONGF%2Faq%2FXKE792JW%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dccaa61723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":98298,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"88ac3c4d4d8044e62af740c79450b794","sha1":"204aee73c4d44e8b1ee68be86228e42488153b13","sha256":"174c4c9955f35a80888ee630b848e2122b15bf6b47baa1c2d3529e924c79bbb9","sha512":"b079ff7c1455a3fe79f8481578928b8d8fa37701e8b15c9d704a393f97564dd9edd1073e69461673a79313c3a0c9fecfd72c9322bb1324b144a8949ce3ddc1ba","ssdeep":"1536:MpLDGYjwpNLTvpKp0Q78ILsDQs7G5j8SCmaoaYCOU:1pqCQ7fLsDQs74VEOU","tlshash":"15a3f9b676d1f8a213cb41d4883b1006f2761d7e642f6045b3eadcd6b96098e90f2f79","first_seen":"2024-10-15T23:35:42.506487Z","last_seen":"2026-06-02T03:03:59.004649Z","times_seen":271,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/uploads/banner_nine_casino_d2ff7c0a7e.svg","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /uploads/banner_nine_casino_d2ff7c0a7e.svg HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:24 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\nlast-modified: Tue, 24 Mar 2026 08:08:51 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S9D0HrNwINkSVk5Q%2BkHM1rS58DKD0uY%2FEUkT3rFEohFOykBabxZRA65Ll1pRD3jGg5LlMfL42Ij%2F3P0WYy5r72Jms7Rd1Jd2PTjRCpKGCwoKyM2T%2Fm%2BO58a6xdfKgxBRE16i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f377dce2ed7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":244150,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e1e0e4ebb24da49c0758e056016d915","sha1":"9de760b66038221bb8473f82945ed6acbf13814f","sha256":"dbbc56b61d57f1745482cc47a2d0c4711ab2fb3b69071f86bf1ab4f2b7baf7b3","sha512":"a7c9d0608899945e75c882a49edd5be4cd48412d2508a84175328ccd9200395f38a24a200a8f9002bb0ff70ba18ea407fca36191d94a61e5df250bcde6a3f696","ssdeep":"6144:/BQzX9s0oGoUcC8BZzkOwXrWfdq1V+TEpsgiKmXuc4HV:/Czs+czrAKdGV+KiHXyV","tlshash":"7334124289eec8a1d37483fdb0724e14ed86abc404e556d26eea4acf833dd344759c6b","first_seen":"2026-04-28T16:37:53.780444Z","last_seen":"2026-04-28T17:03:55.806337Z","times_seen":2,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"89fc-19cfc41508d\"\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zhx0TOnSHWkBz1SFriOecvCzdGTv95Wr7CJnFD%2FqjIZqE697xcQDNkmTHp2QejvwgLtMnPU6niyz8P5DvmVh1fR88swxsd18lU%2BuLnQiiLos9XgAmiWI5kcGGZbgcRlyrKop\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dce2ee5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-06-06T15:56:41.92608Z","times_seen":1777,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2Fkagaming_Lucky_Star_deb2e6bffe.png\u0026w=1920\u0026q=75","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2Fkagaming_Lucky_Star_deb2e6bffe.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21696\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: S6nscazm6FtIpgPWdArg-GyF8hqTFwRrGZ5s-V0ICCg=\r\ncontent-disposition: inline; filename=\"kagaming_Lucky_Star_deb2e6bffe.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ulcSOl%2BHBD2HL8kWCthrLNkI%2BBRBmqaPntmMhLR5DSTq7Tgubi4Xy7hrbqTxCh9rahzUaNfA3cGrGg%2BAY2zPId%2FdewxIUR86a7x%2BjgM%2F5GsKxcn3GZk%2BKdLDyO2ms51iSXVb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dce7fd7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":21696,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5a2926f8601ca3f339e217178f1d8ff1","sha1":"23e4daf9e3c32e46d6cac6f0464bb6bad825177a","sha256":"4ba9ec71ace6e85b48a603d6740ae0fc6c85f21a9317046b199e6cfd5d080828","sha512":"05efd3d7fb0a219ff7f864b4c27c41d932f4b33d15a3d38eff80f722edecd0dd92b4df3bcaa4b9a65dd9c44b4b627e7188f7343d2c639d67abe4b068a921a279","ssdeep":"384:I4QqxWxwwQ/jtWeDIJj8fR1vNvD6PnKgMILmEu9YdsL75eBpV1e09GUNSAydyZD0:IVqxWxj+WeJffFCnDM609lsPZ9/p8","tlshash":"3ca2d0d3e78232f1981699dda22899a3cf439177536c573cac764b6f1a22284977024b","first_seen":"2024-08-19T20:10:03.131059Z","last_seen":"2026-05-27T00:20:53.020285Z","times_seen":89,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/image/?url=%2Ftotal-1.png\u0026w=64\u0026q=75","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/image/?url=%2Ftotal-1.png\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3382\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: qtgseq43yCPlc4q7UqXglchdAt0qOBOx8mfDTvJp8OU=\r\ncontent-disposition: inline; filename=\"total-1.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sX690IxI5UNKkgkxK9BoSgWHoug7WL53e6oRG6QOpO3%2BE4LOPO%2BkWJdPmE1VLevffMwyVq7D5ZyiViHve%2FPKY4It5m2l90D0eszuGVBX1oLBHCaoXl3rxDdy295f8Z2mX4ZA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dce7fd9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3382,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"50d69df7565f2adff718b334b2be696e","sha1":"32684076332a394e40ac306390e9ef110369572d","sha256":"aad82c7aae37c823e5738abb52a5e095c85d02dd2a3813b1f267c34ef269f0e5","sha512":"6a0091fdf8e0b8f300404d484bbc5883cd3f7e03a1447acc692b051566490697ba2eeb42be05ac285abda18967cf518a9711bb86ca09bb58e7ff6dcf933b5df8","ssdeep":"","tlshash":"5c617e98605178c1c69be8a146878163d1564650d3c6c874bbf4e62472acc7d4331cf5","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-05-27T00:33:43.215238Z","times_seen":130,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/image/?url=%2Fjackpots-wins-place-2%40X2.png\u0026w=48\u0026q=75","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/image/?url=%2Fjackpots-wins-place-2%40X2.png\u0026w=48\u0026q=75 HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1290\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: DkHvEuSDXRB-vLyYwatTedu5bUGez1prcoJbDhBcn1Y=\r\ncontent-disposition: inline; filename=\"jackpots-wins-place-2@X2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kB6i%2BOgQRDJCAv5UQmh1pWM4BMKa8da45tFNnBbK%2Fy%2BGDiy3KH03FUXESS4vcoqCSoTHc7I5KrbuEWHaBCS44iqKi%2FxXSZF5GMPGIvurdWPNomCRHSxsN%2BaFtvL%2FvyUGFpIX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dce7fec723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1290,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5c9c7c18a4380b493bf276ea04ad4787","sha1":"d72fb256081430ce5f22486d39b79f2f302a5da0","sha256":"0e41ef12e4835d107fbcbc98c1ab5379dbb96d419ecf5a6b72825b0e105c9f56","sha512":"7a917a50029837fde70991553896f2ba46375fb1ce9f2215cfb0c7e28d69014429f616f00b92fb9534aa89e7ee030bdfa2262d543b30efe02b1da082f31aa26d","ssdeep":"","tlshash":"0421c8085ced184ae5821c6ce5b950a7922cacca0a6f461be5e2c9fad148c2c03c417b","first_seen":"2024-08-19T18:17:08.891151Z","last_seen":"2026-05-27T00:33:43.228736Z","times_seen":117,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/css/3bda6d4ca9304bde.css","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/css/3bda6d4ca9304bde.css HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:24 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"dc9-19cfc415091\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KnhnKesrKxngX4qdNBPALcxzwmf1BKVSPBONghpxzad9%2BncxQB83luE%2B84xLdOwncxOWHKvAJzw3YTgCTGjn3U79DeZQxmngh3kb4O3XPUqYxm5gm6h%2BRGnUHvmq5L1XKnNb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dcc9a43723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3529,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3529), with no line terminators","md5":"01ce09a5b03cf044607a0960b19ee68e","sha1":"77ee0c8a2beef0412c1bf25560a9903a8734e9fc","sha256":"460f6f84ac47584af249e7525a01b93aa6fa2589abd99b25861058a10c5ced23","sha512":"428ac46d7d2015690eeec14942ff4a4220d01f83188ba00d1338949b73d9b25f4c2dc8aedb1ff247a20b160dc4847a4e89768245fa3835d1b1a47e5283a60848","ssdeep":"","tlshash":"1471f21a2e9e7b186cffc81765b26748236cd409cd1712a99013d76e49cb3925bf1b4c","first_seen":"2025-03-27T03:50:55.673324Z","last_seen":"2026-06-02T03:03:20.673599Z","times_seen":213,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2Fsoftswiss_Elvis_Frog_Trueways_c67568b187.png\u0026w=1920\u0026q=75","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2Fsoftswiss_Elvis_Frog_Trueways_c67568b187.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21966\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: h75VkDwuLRO4afqmu-ggsPb3P2A1dvFhT-wD8ax9xzw=\r\ncontent-disposition: inline; filename=\"softswiss_Elvis_Frog_Trueways_c67568b187.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LUvM%2FwTGQAW%2BNMQ3M8iBG7l2V5L6evEau8mnLRr27%2BCjGYcgyWsq8vrE2J0ezgsh5FiWZadVprGv6W5VThoJEuwH5q%2FaeCEeK%2FyztRyO3D1eJK16IEcrmXb3psx6jSfEGQy0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dce6fa2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":21966,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"89fe905b87b7b4316a388a0303eef23e","sha1":"63748ae1a9b6af0c90f463288063d7e9859f82b0","sha256":"87be55903c2e2d13b869faa6bbf820b0f6f73f603576f1614ffc03f1ac7dc73c","sha512":"ece5089d0b693dd8f4047be81010bfde68a3a1566fc93139c39e0d01281c0c84c9fa4121e00c451d22bfb5e4b1c1adc80bad001f7e02195ce99c345992c9f021","ssdeep":"384:7cDVuiOKc+mjDb/RRWjVeMYFCPUo/yEpAKY8LSMd/QzvbeHmY3gaw:AIecf1sjwvFGnyEpATGCrbTft","tlshash":"76a2e1c573d33e77833e41718a788973101264c6c553bd5ac6347acfaa422e2579471f","first_seen":"2024-08-19T20:10:03.133116Z","last_seen":"2026-05-27T00:20:53.029806Z","times_seen":91,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2F1spin4win_Lucky_Cash_And_Spins_22bcde6483.png\u0026w=1920\u0026q=75","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2F1spin4win_Lucky_Cash_And_Spins_22bcde6483.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20670\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: 9a+gOWjPYY4qiluwI6mRt6tBY5cKmf2dMiZew8Zltd0=\r\ncontent-disposition: inline; filename=\"1spin4win_Lucky_Cash_And_Spins_22bcde6483.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=88gFXswiWyUxsOUNhjdHgrem3tanZr1Q0Dj9jlLb3%2BlZse1kNH2Od4jbR46qlv5fQtR3%2F%2FdBK9TGzQiRpMHgNmNTGLDzI2Nc%2FCOQ0WSFpYa5ntbarlgoxbBQYvu4%2BqByY1%2Bl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dce7fc6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":20670,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f7f85b96f2e8ceb54d3d46dec321ae25","sha1":"e3c6fa402468a91bd3197cdee784301c017d93a1","sha256":"f5afa03968cf618e2a8a5bb023a991b7ab4163970a99fd9d32265ec3c665b5dd","sha512":"ad6205008eda336419d800350d86a09be7b0b5e2b96cc1e00637f2de6ec1d9c486eae2154deec67b55281d0f27407750ac0fdf97d70d7be9e75e5c38bc7983cc","ssdeep":"384:eJAiRDRkcPDx6TD5VcHAEdapxkppUHafktrvnTm7gCVQb+vHHhpiu:eJASRkc8TD5VcHAmpCdm7gCVQSHHXiu","tlshash":"b592e09a2d4bfb07548a6dfe39d02b437e8968160618c1fbd44422c7ad75ac8fe4c479","first_seen":"2024-08-19T20:10:03.129742Z","last_seen":"2026-05-27T00:20:53.039784Z","times_seen":89,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/image/?url=%2Ftotal-2.png\u0026w=64\u0026q=75","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/image/?url=%2Ftotal-2.png\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3112\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: 1IQ8dZLvJzt7jJSWdq31UItS+8IY-kyELSYl7ymzCN4=\r\ncontent-disposition: inline; filename=\"total-2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cApU2x1c2dx3DqEaNu4elv%2BOotMMXjl9sgGf6PmjoysK0tOIPL%2BNQmM9qCatIzP2%2BWGUiBoloMLhoEqe9FhM%2BTMpRwJE49oqpGjlizKn%2FWwQYaYe9YTr5hVV4PAP0e1f8W3Q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dce7fdf723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3112,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9266ec4c0b5e7ea801409c213828352c","sha1":"d902439770a2f68009eb488fcb951baa968cf6bd","sha256":"d4843c7592ef273b7b8c949676adf5508b52fbc218fe4c842d2625ef29b308de","sha512":"91beb28dafe0f3410ab30fa27e1757ac7fd3107e540330bfeaae0e2246cee3e1d628d577072bd51c169e8a066dd03c9b5c371bc833eda40f7703cc3d55ce9aab","ssdeep":"","tlshash":"7e513b5748b32183decf3207914d412d0782d0df18854db9e8bc2ddea97a2f085898e5","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-05-27T00:33:43.209396Z","times_seen":130,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/uploads/favicon_nine_casino_29f76b7f34.svg","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:25.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /uploads/favicon_nine_casino_29f76b7f34.svg HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\nlast-modified: Tue, 24 Mar 2026 08:02:41 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VMnM%2FZ9Y89lY9LLyCK1hQwYrhdl4SvWWg0MB4nfKI1O2A8YNfJ6g6vL2%2BAJLEyMfyG1kbLn5ByTFFIszVpLuI5%2FNKpth3wJJ1XbMqH%2BOU%2BtTkg1cgmf%2Bp3LqkeH9J89b7bG4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f377dd0bf50723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]}],"data":{"size":842,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f116cfe520e2ee8a24f688e3e838ca82","sha1":"b098fa13e3a563720685b3430a58243a24c51f35","sha256":"2d9025fb63dacb1e28c16c1e96bfcbc2149a966ac1fa868956e5079e7ca9dc0a","sha512":"bf73cac611bc8913253a74256a3cb37663e31fd877728a0bb2db3a6945b0c8301eb552126372f3d1513bd6d8bba6c8ef74affca5feb02f09e158146ae8ffb183","ssdeep":"","tlshash":"6301af24f7c9ed0e6ca2c26563bcc587bd73a08a8082657ca88129ddc15e95397d325c","first_seen":"2026-04-28T16:37:53.785163Z","last_seen":"2026-04-28T17:03:55.798622Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/css/b8b51d0b3a6f4866.css","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:25.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/css/b8b51d0b3a6f4866.css HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casinos-nine.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"1759-19cfc415091\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aLn8KAFv7XjA2bOjlMQANhw%2Bo%2FXFJLf81%2FLe6xlDv%2Fh1fSZlQjp0ep0K7fxzRo8vfGSxQYbP287fdDXFTzntFGpxG82wcMxTvZt3Lh21uVYJG96ZmnSRnMoStGinNE%2BSW9ba\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dd15920723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5977,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5977), with no line terminators","md5":"ec84f0a7a2055c970d4f253ab08f0c70","sha1":"c5d3245c2d4085779d873705881d9d7330eeaa06","sha256":"6a0b091cfe2a46fb254fc84ca7036ea34c6c542f83fcaf2fda6b54a828c13fd2","sha512":"195afb216b85d37b9d702a5263bd852f66982769652e1ae73285a60c57ff5aa1a34d949a08723746d58fe3e576aa599e0a493ce98fdb7b767ebe32b94f968ec1","ssdeep":"96:PB5mSJ+MbpDAKneQYX6Jl/0hSvRneZ0jVMR9wfX+9Ecl86djPfUQjSf902G:3mUJbiKneaXshScZXRj1zyCj","tlshash":"4fc1e5b30712ed25d6b26d6744a0ee8ccee4a103de33d5b8f841953ccbd96680270ed8","first_seen":"2025-04-29T14:40:21.754106Z","last_seen":"2026-06-02T03:03:58.987189Z","times_seen":264,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/css/dd79dc2c5a9a9197.css","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/css/dd79dc2c5a9a9197.css HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:24 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"a112-19cfc415091\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ttg2XcQpmYMN6aONw%2Bq5NFYWsXW%2F8oS7GuRAu0V4w9qSYnDorQeJukZrN6bGDANdJdfNLxTKtvwrZmqqQp7Fg8G4reo4foylhtVdc%2BctEwyXN6upJQIZcoefLfCS0rkZbJK3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dcc9a31723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41234,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (26798)","md5":"93e37c199f0ae59faefffcafacc5f00c","sha1":"a18665363dc58467e599d2bd59c1d63443bf8902","sha256":"d91a05b2ad13ad076307787468b87cd94e7dec4beefa460fb9b6c1e13473ccb5","sha512":"22f1cce98b2a8190e8fe8a83f883915899f1eeed64ebc5006757b2e0bcdba68ac5ef53f2f69439648c2dd3a9d58d0cce4585b5e5b79516718e9e2e3d73959d28","ssdeep":"384:gi4OZg6oxkmT0Ew2zXf0MrREq/XisHZ7aVWMMqLswaDGvi1vPTnx6G8S3yvVQW78:f4OZwQ2x8jeDqeTnwVA","tlshash":"4003c921e619702dd8fbcc6732ca7f1766184402f5950d69fa1b866ccecb9271b93bc8","first_seen":"2026-01-03T15:12:30.994041Z","last_seen":"2026-06-02T03:03:59.004085Z","times_seen":256,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/css/b8b51d0b3a6f4866.css","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/css/b8b51d0b3a6f4866.css HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:24 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"1759-19cfc415091\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LgGh6EXSuNXbHjmOMUVsOpIM91Ihq1hm9PNqyM1aMuhxNM1KcV%2FGQK698DDEBWrrkE1SUk8WZm3pB3w6w5cxk9SPzsGtOfnRojSSeW0oyPDFJH%2BPqtgQ2WADtYJtRNWLTn7j\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dcc9a34723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5977,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5977), with no line terminators","md5":"ec84f0a7a2055c970d4f253ab08f0c70","sha1":"c5d3245c2d4085779d873705881d9d7330eeaa06","sha256":"6a0b091cfe2a46fb254fc84ca7036ea34c6c542f83fcaf2fda6b54a828c13fd2","sha512":"195afb216b85d37b9d702a5263bd852f66982769652e1ae73285a60c57ff5aa1a34d949a08723746d58fe3e576aa599e0a493ce98fdb7b767ebe32b94f968ec1","ssdeep":"96:PB5mSJ+MbpDAKneQYX6Jl/0hSvRneZ0jVMR9wfX+9Ecl86djPfUQjSf902G:3mUJbiKneaXshScZXRj1zyCj","tlshash":"4fc1e5b30712ed25d6b26d6744a0ee8ccee4a103de33d5b8f841953ccbd96680270ed8","first_seen":"2025-04-29T14:40:21.754106Z","last_seen":"2026-06-02T03:03:58.987189Z","times_seen":264,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/css/425cb6e228741817.css","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/css/425cb6e228741817.css HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:24 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"eee-19cfc415091\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nnbow%2BJYg5vKbHiqBSMr8p7E9dBTm4Q66HDI2Eb92UG9A56NCavGN8RJ6r6PJhn590YAMvM6tFL70I3%2FcOo19XmBKOZM9lVzpzejOFrlgCERK%2BdU1Lepo8fVSOl%2BQKRxJGZr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dcc9a40723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3822,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3822), with no line terminators","md5":"18552a6e17838c46016a53e9762873c7","sha1":"3dd15aa95b79296b2894bfbd8fe4a53911f694d4","sha256":"66ecf375917e5eebcf9959e90773c31eff8f779803c5493fc5dd3760600542fc","sha512":"e1e0f9e0f622a0abca95b0eea21d599f23df0abf4d7e40bc5a85c69696ff5c6c97db03271d826ad105410cec045c6f279b66ce0ab29b9b5f4e29065d0265c9f8","ssdeep":"","tlshash":"a371f03a4fd0d438f4eb606f6ba2946d4b18c442ea275bdcff12d82bd1cb3d60562589","first_seen":"2025-04-29T14:40:21.773905Z","last_seen":"2026-06-02T03:03:59.010214Z","times_seen":175,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/KGAumpjrjHCCABx72YG_6/_ssgManifest.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/KGAumpjrjHCCABx72YG_6/_ssgManifest.js HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"4d-19cfc41508d\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QnPZ6gVZM2M%2FZwSRp7Ctiwb1PoFTUuAvn5Pd23n6DJMo7%2BvFGAE%2F%2Bv1GTYgTD7kJawSQv%2BWuhfNlZTYX4Ez%2BPIHo9Mfal1bEiKt7N1aKU4rnIkoFMitJGksDSHn%2BCZYyocdV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dccaa79723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-06-06T23:10:39.808192Z","times_seen":232184,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/uploads/logo_nine_casino_2bd0e43dd7.svg","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /uploads/logo_nine_casino_2bd0e43dd7.svg HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\nlast-modified: Tue, 24 Mar 2026 08:00:23 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N14HYHJ2XKJgqVppZBzZm00hMLeo8eQ7Q0hWc1gFEZZ9M%2By%2BkMxBdKg%2BI61T17EvfEO7CvBEaI8iJMLTpTl0odrDHvBYWV8e%2FjJ1b6H3w0yRqM41SdHwlcKSH3Txd5EluZ00\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f377dce5f77723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11323,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dc58a83919ad939407544f02b3df9915","sha1":"46d45ee36a3c73d5850e644be3eb1aa45a05bf79","sha256":"1712ee1f830d989ec4c761c2fc68276ddb3cf7b8358e5238fc4372b7beae7071","sha512":"eec5a4b6e934f732ddc8aa8e194476a1220c867057e5755558a324ce8db28b4f6a4f1952a8c1973e3572a14b69443b94e809ecaa525158e9bd730151ba0ba9ad","ssdeep":"192:9gzjbrEkgxDWQCXRC6732JB7G6+hIl7kHfckm9wT9qhrZ23X8n3FjjX:9gzjbAkghWZD2JB7G6YSwx6d2c3lb","tlshash":"0b32c0320c992f9f7cbad27905f6b5e3833b5bdf449049cd9112214adf0b0916e5949c","first_seen":"2026-04-28T16:37:53.788107Z","last_seen":"2026-04-28T17:03:55.788914Z","times_seen":2,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2Fsoftswiss_Aztec_Magic_Bonanza_9710f0cffb.png\u0026w=1920\u0026q=75","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2Fsoftswiss_Aztec_Magic_Bonanza_9710f0cffb.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29982\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: JR2Enbs4kzfL5MG7HLHJOiF77ljUO7jmqskB9x8ZSyk=\r\ncontent-disposition: inline; filename=\"softswiss_Aztec_Magic_Bonanza_9710f0cffb.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P4q1dPS2mrluT2YZRBsu2NR7GKz6q7Ku6%2BRmeQ%2FUivqqIYCsOXKwVo3dAqpIgbMi1u5TSHRiChiBbQJS0G6Ow2DHoYblhph8HYkbSKQkpMIKnIN%2BQRfhFWm%2BiiCC8U911b2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dce6f7e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":29982,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fa1f178cec4921ae3eeb5931973a7e7f","sha1":"a58afa1dbaedccc362c8033468bd693c5091a794","sha256":"251d849dbb389337cbe4c1bb1cb1c93a217bee58d43bb8e6aac901f71f194b29","sha512":"7daf2f93512667d5bf20704b0a932eef7166af34a62db7fee3fe8979487cacff9def7a0b2a53c34836c9341b3491cf4423487fa78fd6556a53ffdc11fb73e777","ssdeep":"768:VDfWwLEZ51IAy8xU7WdpD0n/T0X2mMGTYzb5Z:VawLs51NU7WdpDaT82kYzb3","tlshash":"8ed2f214fe0f452ca893eaf649c6469e4b30688152f843a087015df18f27d3a4e9dedb","first_seen":"2024-08-19T20:10:03.135853Z","last_seen":"2026-05-27T00:20:53.038543Z","times_seen":91,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2Fsoftswiss_Lucky_Dama_Muerta_b2c63f6fa9.png\u0026w=1920\u0026q=75","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2Fsoftswiss_Lucky_Dama_Muerta_b2c63f6fa9.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30852\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: hRj2QR1zy82mJwKSBTgBjI-BRAv-cEKborTVEp9NDuo=\r\ncontent-disposition: inline; filename=\"softswiss_Lucky_Dama_Muerta_b2c63f6fa9.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iTmhS0v%2FSG4GhllicEvUTY8BaKT%2B4CE%2FZbqWaz7DCWMsZuXUkQ4A%2FpxBJc%2Fp90yg%2FkRcClHmo13Ixhc6RvkFPwoLO7AqEf2HBL9O5vCssM8p30jgzY8S2Q0XGX%2BvV1NLYd4Y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dce7fcc723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":30852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c120dc49625e377c78fb0ddbc94c7968","sha1":"86111549bf5cbe47ca253f09307b3fe0cf7152b1","sha256":"8518f6411d73cbcda62702920538018c8fc1440bff70429ba2b4d5129f4d0eea","sha512":"a6c767679113f05b533f8d92d271e9b3817c123c3fcb07cbf8810773cdb5d8da21dbbaab4c7fedd2192ceba699ee24ed61f955a2eba97bfb513abf7f08607576","ssdeep":"384:1nbwJXafXoA2+zUXgY4E3aU7fx4VctE1CHXNSpv6YBFR3E3Vbsww1gjb1yksHELp:1nbyqwzg+gHy77ucth9gvj1Eli2jY5I","tlshash":"8bd202a6d24e354b23ae6c86345f2716d3557df4e4624c6f004ace2dfe7d2691a9303c","first_seen":"2024-08-19T20:10:03.125147Z","last_seen":"2026-05-27T00:20:53.026542Z","times_seen":90,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/image/?url=%2Fjackpots-wins-place-1%40X2.png\u0026w=48\u0026q=75","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/image/?url=%2Fjackpots-wins-place-1%40X2.png\u0026w=48\u0026q=75 HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1412\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: NWcNEApufzPN1Z6+CYAf9TbOYMw9v7XHucYwPA8FnBs=\r\ncontent-disposition: inline; filename=\"jackpots-wins-place-1@X2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GcJF2QOLP1EGL283U4qW4s4hdOKdt5iNiRPyYa9vFTHs2tY41ZtxZokZJ2ZHqWcFjMkbzCD7Bac%2F4C1rLxGD5BSpQRMdTH6s7i6GXRnHYd2w43v0zggsOIMmVFPN6SLv8bP8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dce7fe9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1412,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3c79467552a70a7e3b9aac5361dca35c","sha1":"c185808d79c2a23b02504ec935117459b1c1b799","sha256":"35670d100a6e7f33cdd59ebe09801ff536ce60cc3dbfb5c7b9c6303c0f059c1b","sha512":"664ee68f3c1334fc77beabd6037b226504bf74cc23bda66ca67f20612c26275690e730cf2eedca94bed50a3554144240c1c59229d98fd63cf7abcf886b877584","ssdeep":"","tlshash":"56213810768cdbf8e771087b765008810acfa4a290370201ee3f4ea4e62af6b2c3c482","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-05-27T00:33:43.209922Z","times_seen":124,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/chunks/59-111076122bab2d33.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/chunks/59-111076122bab2d33.js HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"39ae-19cfc415091\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ezDOffvAQGZYHipFC0v5B99tsLLHci2a6DLkT6wrvXA8GrhYSS1soWLPdtQ3NjsH3GFkwIbKqw%2BLQyzntTbBu0ivvbbnBBddnQlPI8sEjFbGNKKA4uSkIHVBa7EBmMy5srqA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dccaa6a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":14766,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14766), with no line terminators","md5":"7ac5151aa7c675b87e693abc2b43f924","sha1":"b9a2c0917c3ca721957350d7d8978dcb10aeac16","sha256":"b11c93cbbd990f8b59807e9ad9a7ee52e0826fdd5c13336ac3d9f9044ce3d0b2","sha512":"2955eee605e950c2aebc63bde4bf8c7577c52c2674260e6fcacf82950c18e746bf04250ed4f478648d03c286b85d13d91850be6bf6e96a6542a0ad48c80e433b","ssdeep":"192:CzBOuoWlyVDyuyK3AP4g/blhMs1fqnp40a5anY7mF9:CzBOnVsP4GJhMXp4r5Gx","tlshash":"b062b56e49464cae9abd98e4c427410cd3ec6646f144bc60f7a68513b1dbddc61b33cb","first_seen":"2026-04-28T16:37:53.79068Z","last_seen":"2026-04-28T17:03:55.785996Z","times_seen":2,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"89fc-19cfc41508d\"\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lPCYq1qz8mVUKArytWNMH%2B6CJufpNQrn4DMrhoTLf6n4fwQObcpTVk%2FNyhdmGqVst22iC6ssqgXg%2FrezgZX%2FVEwYldUELy708NuSfqNWyGNHKzlHX9W0IqrAuIgHQ0%2B4vyRe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dce3f06723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-06-06T15:56:41.92608Z","times_seen":1777,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2Fbelatra_Big_Wild_Buffalo_88e93f38de.png\u0026w=1920\u0026q=75","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2Fbelatra_Big_Wild_Buffalo_88e93f38de.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23336\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: um5JvSs61wtREZ4fYJeuVZFG49yLHdJQfQxj69WSHS4=\r\ncontent-disposition: inline; filename=\"belatra_Big_Wild_Buffalo_88e93f38de.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=84TLy7Tc6mW0%2FXiEV9a3Y0vjunFA5pNf50GSJ8zZRGm%2B%2Bv224ygydpQASBxqFwqmlh%2F0X6j3D%2FtRQBJ4OoShyLS%2FMelVin1xwKXmYzj5N6h5OFRAFYDzUx%2BrCuCHCpJs3ggW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dce6f86723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23336,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4cf03c14ea2e0929c09871fd8edbe0b5","sha1":"e82a4fbb214910e3e83460521fe777c78615e4cb","sha256":"ba6e49bd2b3ad70b51119e1f6097ae559146e3dc8b1dd2507d0c63ebd5921d2e","sha512":"762421c57ea1e1ad84e18332aed52b64549ce88901e182708e13493e73c9c0933a749050e804d5232e00e5c5ecb0a0eb3d5a18b81b45b2b3f0434d4424685ad2","ssdeep":"384:QeW+eh5s3NTd5h9UXKgqcglgf3S3aC2QX0qhtx+I7zOFCKZ2FISWKbNndmdQ8aEH:Q5s3NTbU6Vcglgf3S3/XdXx+InPRISF4","tlshash":"d7a2e0d641f39996a6057069a88d56fad2838e10ccc4bd179984a8f31c5fe338a74fc6","first_seen":"2024-08-19T20:10:03.092554Z","last_seen":"2026-05-27T00:20:53.016151Z","times_seen":92,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T16:37:23.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:24 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Next.js\r\ncache-control: public, s-maxage=10, stale-while-revalidate=59\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cH76PmGHDsnZJCleikMU8xVnJ6WhzMsD%2FJzkJqz2OY5AL5B71DrGtLJbPIaNNECdKjk5btwCUXHQjuCMOh49%2BGpd%2FS3119VKmeuzoi1otKvzyla1BMsGftSA6tQ0%2BEY5Vioi\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f377dc9386056a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":51056,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (48579)","md5":"fca57fbd3104a1860c61c48d6700824f","sha1":"300bdbb95d6cfb05a35a09c50e0c446c86f630c8","sha256":"215733413a87509b3639d559c1e2755ad187f87fb20a97d0934a57756686f2d2","sha512":"0fba3bb08cb1baa8fff807237400e516e7b726f116d48114182498101dafa6d972294d5c6fb9d4c0321426ab6aa98707186d3e08d77d2eb97451546bbc06dc2f","ssdeep":"1536:EOn8MrZJntkH84j6NRYoymEuT7K0xVHUG:EOoAxx","tlshash":"6333d7e09c48ed7717d794e73056db4ee3ce080bd6965d8039cc8ad9f7cb82715a22a0","first_seen":"2026-04-28T16:37:53.792113Z","last_seen":"2026-04-28T17:03:55.787271Z","times_seen":2,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":52,"dns":31,"connect":1,"send":0,"wait":344,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/media/9f0283fb0a17d415-s.p.woff2","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/media/9f0283fb0a17d415-s.p.woff2 HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casinos-nine.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:24 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 21336\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"5358-19cfc41508d\"\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t4wGThvLwn5Y9LxHnIXKD1qWqW85gBiEMKtACifZRKbHqJFkGITrMN%2BCbDWnz7C7%2FSpI69Vk97v236iUNrf3CT5Evbdl2vjlK9zTSFY8MY4yfTRt7jgsbGX0o%2FS0bXD%2FcNUP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dcc9a2b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21336,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21336, version 1.0","md5":"0e35c6fd40c2ab9ef2d5b97baeca2f2d","sha1":"781b1852315aad9bcf111a3017ca734ab6dcd6b9","sha256":"07a6f958db51de42694ef87e2c01b9cf5ee415047b2fd17ab1c313c772a6804e","sha512":"7f76da76841e131252106ff1d70e22908753364d612e9b807d9332f89b13c759b1b9d05ac5983055b48bf99b441a2a07301db2c93fbb79323e492c238df1d7a9","ssdeep":"384:h9WnIiwq4BeuEc4AZTT4ZWgC9UCzpulxbC9WzQFvCY98IW1NoTXVY23sC6:LWIix4BayT0ZMUQpulJCuQF6IW1NgP3O","tlshash":"4ba2e1080f4b3a18eda72c8972acb57498741c208f8ee2770cd42859365e652fe3fe57","first_seen":"2025-10-20T15:26:06.98799Z","last_seen":"2026-06-04T14:06:59.774258Z","times_seen":269,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/chunks/framework-10ae643bd7ba2303.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/chunks/framework-10ae643bd7ba2303.js HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"226d5-19cfc415091\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jEaAVjJkRC6kJORnmlLZDnbpWLVwmipe%2FhYI1dXib4uHup9fIa2QFpJZMm8nyxhGKZgR7Qs2R%2FCLwzHk9kaawZ593TYFKDuIrYA%2BelvbTpxbmb%2BlxQ9mPGdQ7vcA5ze2KC7H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dccaa55723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":141013,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65202)","md5":"91eb10e0c5b60f80501425850b7ebf82","sha1":"8344750bc431fbb9e8a5170a82d08c7664639609","sha256":"4c185f58731fad68b5e3ef26e102ce9b3cb56aa8257d39aead25b675152a339b","sha512":"bae75fd66f5ebfd2cd4b3904defe212456502a8cc1ab092c8b58605c6bdeba1d9fc2fa0200ba9a6699df89af547ba3d51b8783dad8061210ad62f240b6ff18dc","ssdeep":"1536:2YjvmNg6kMuR40esfdznYBSq6vvnwGzQ2N0mIQa:Djv4hudzno6nwq5a","tlshash":"33d308e87996f6516ab311a700af2803733d2a1b280c4d60e215fd9e75b841bb17bfdd","first_seen":"2024-08-19T23:48:37.498483Z","last_seen":"2026-06-02T03:03:59.000906Z","times_seen":287,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/chunks/webpack-f4ce0f3f45df62aa.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/chunks/webpack-f4ce0f3f45df62aa.js HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"1750-19cfc415091\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uRt6CMJ6GBUTqepCKI8T38YH9TtzIemtE7Qi23TTacuObzki34XlLZuNberGuRnFny4s06%2BxYzwA5t5z%2FfiERo0cJcTHrtJQz8LgAtNGeBQ%2FVWJL6MRrNgatnImiOek%2FRGhJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dccaa50723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5968,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5968), with no line terminators","md5":"84ef2de257e550ee77cc6a33e4d3529d","sha1":"0d579225355d8a74fb67aa7bcdf3c9d3d1daf79a","sha256":"4947a0ca5a40166e23517de28da0f3b0b104cf79ebe105adc0feceb0fa086365","sha512":"b970d291e0c83f87fbf456e3b1423b6415f20b07732285073aa2ac721f1e63ef152d2bf34b0b41ad9ef23290924a618c74cb78ac0e50a20b65681d29cc1e648c","ssdeep":"96:qIATpEzq7QnRRjB7EKjmvFqMug1kkNx9F9VKsGV3HGjJE2Uj19QnRVGeTVIfRs89:qZWzrnj97EMOFLBkQ9F9GpGwj1qnRVGf","tlshash":"b1c1b6de72a0f5b6164365e0593f915af03e247b781ed0a0970ac9f4bc35a688533fe4","first_seen":"2026-04-28T16:37:53.795551Z","last_seen":"2026-04-28T17:03:55.808001Z","times_seen":2,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/chunks/pages/_app-07db9d5739b33117.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-07db9d5739b33117.js HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"77214-19cfc415091\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=APft5CZV2cT9lSGfBfNab%2BApzNfCUE5%2BHZ7aNX6UhZ1v82WYTJ8R2gLq5vhO6srBJZQPnVfOubhz%2FO8Gg51fxdeHW7HvuTF9JiGEZBLETcFXqcIWzUiEI1hrZndJpKI5alTa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dccaa63723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":487956,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64562)","md5":"510cf0ea962a6e81c60d755f02287be9","sha1":"d945a8285104d38d62ce0a1f2eeec4366c47e4a6","sha256":"33a6f1f8ac1905b1b3afc288c7838a1f8a6beb87aa16349a40f9bc18414a70ef","sha512":"e0b6929d863c1c70e165d779cc41373b4dde04b16c2574028d11a1f112ccf63d74f19fb52045da2878ee678f9412744f3cca5078eebfbb77dd4a98368391b820","ssdeep":"3072:ii1PkPUKsWkGa4HtlYw0kn5DU+djxlozNm8ad6/QQX+uhuxOEowsB489M4cJkcxN:iiCcKsRGH3dCadhQ7wqNJiRs1+HZ","tlshash":"17a4f7d97282b062839760b6847f010af33e6a98240d802cf6add4db7f7564d9277f79","first_seen":"2026-04-28T16:37:53.796661Z","last_seen":"2026-04-28T17:03:55.795495Z","times_seen":2,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/chunks/966-2601235ce9ca419d.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/chunks/966-2601235ce9ca419d.js HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"2000-19cfc415091\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qWBeQDQWmWUHwM6K5Mwg%2FldVyxnBHocz4fW8MqTImCWu6p7rfolh3ESCKSd21Py9IC4y8l8hj2%2BIHAWiVljc6BnEsZhwcHA%2FiounEJvMw%2B8gJNcENa%2B5P3nPGpbBdZBnVphg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dccaa6e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8192,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8192), with no line terminators","md5":"3916183d5387e7871a478a2753108c78","sha1":"d6c20ccfb0ab889c2783026c0faba3360097942f","sha256":"5e1379964fee60bce05cde87c8c634a2600371fa60bba4aad38e1ad9b2737bcd","sha512":"d8900dcd34a78a6964c4deb4f6b17e6af8d6120e7081a62a7575c5238d6c1ce129df74a73a69c24b534e4e770ab7e9cb0655a3871da3ea81f188ab9231632edc","ssdeep":"192:vbZDMNJAQDemeCjuUZXXmwEy4HxpEkduQh:v9ba/5z4kkduQh","tlshash":"95f1c6b27782f90623c5d4a4c17ab01fb5ac9c2b5d0b50f8b569cdeea9e015460a0f75","first_seen":"2025-03-27T03:50:55.682304Z","last_seen":"2026-06-02T03:03:59.001644Z","times_seen":269,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/static/chunks/pages/index-67c545f8362cb3f5.js","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/static/chunks/pages/index-67c545f8362cb3f5.js HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 17 Mar 2026 14:44:24 GMT\r\netag: W/\"33c-19cfc415091\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zYk9FDjlKJd5lje796YIVQ%2B2hfjB6JUnFnIX8EOfgFxE%2FvhoYbzH%2BUUNd%2BsGZ%2BBXjzbMB%2B3TGlCyzc%2FcaM3mNOoBnHDEsmz%2FaKKWmTDHWxoIEeQys8A3AnQVrSS%2FMjbI0lsy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dccaa75723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":828,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (828), with no line terminators","md5":"045dc07f95969c2df33cd4a214e83717","sha1":"b89af6510652f59367921b09cf4a68bebdb27dcf","sha256":"9d8c30be80230957002ab1fdbc8babe834fdefd49204879c1e609a5491fa05aa","sha512":"76205eb0e13934fa7b15710243ed9e6da746e20ff36b77dbed304ce80c27d6c9bb9ee005c6be3125aec1b75b9ebde613fe9d54dafae5eea366e872085eb026f7","ssdeep":"","tlshash":"18011298b493be086b2750f8462f310e63be795e153e49a0b25284c83af231d1a91fcd","first_seen":"2026-01-21T17:57:31.276517Z","last_seen":"2026-06-02T03:03:59.017415Z","times_seen":251,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2Fbooming_Gold_Gold_Gold_5de62fa3a3.png\u0026w=1920\u0026q=75","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2Fbooming_Gold_Gold_Gold_5de62fa3a3.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22892\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: X4+P2NT7clIGAMVZ26q1ERSrxW2lYGUxe2YzOTEiigQ=\r\ncontent-disposition: inline; filename=\"booming_Gold_Gold_Gold_5de62fa3a3.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uo2TKZO2hcTr8dQdriTI6Zq8P3GMouLvjR3lO5eJfVJ3JVgJEggV0ARXEbi4ijXxdRvBxu8B2VKnoJHmc%2BGrmhrP%2FkDnGJx4yE28rMR%2F391WDpuozOyMbJQE1Hp9AtP7M5ky\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dce6fa6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":22892,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a8b94f48e2fd11cb50cac27fc86d9346","sha1":"5c70ea2c22699346e5b3861641339a1d2d6c57eb","sha256":"5f8f8fd8d4fb72520600c559dbaab51114abc56da56065317b66333931228a04","sha512":"fe8743c6c2a1215f636679fd201d71b82cadc779781b7161575ea8c96b1f8ca1eb9dd85f7922755968ae943fe71c9d17d36564947b5a9fa5b32b003ec9ec7832","ssdeep":"384:xUFhEi6MF0xzDZZiClIrogNEMzHiF0O4kVNor4I4bAbsXxsUOplwM:6SiVF0nlkxLg0O3osJXsWM","tlshash":"7aa2d0e4c277cdc069969c8322eb944671186b891c83e473d47a94aa37e991d3e0d72d","first_seen":"2024-08-19T20:10:03.128818Z","last_seen":"2026-05-27T00:20:53.03917Z","times_seen":92,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2Fsoftswiss_Candy_Monsta_f926a8f5ef.png\u0026w=1920\u0026q=75","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2Fsoftswiss_Candy_Monsta_f926a8f5ef.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22730\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: 62t4TcX051OuvjJyhm2gc55hyCONJ1dRuCOFnSgXYss=\r\ncontent-disposition: inline; filename=\"softswiss_Candy_Monsta_f926a8f5ef.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oucEGddtSJrRgewoel4qWywmJC0e%2BGUppKw4M1MHQH4br8hDoCgECScU%2FudYZZPtcvbMTYeuy40OK96yTSJqefzjnql3Ci%2FgYergVosiCTBYu%2FePNo39OQ5OyHRguFXnpV%2Fq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dce6f9f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22730,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8766790b2d633a9f78ac939b1049c0f6","sha1":"0dc71d15e64969a630ff4b417f5f5b0e27109d74","sha256":"eb6b784dc5f4e753aebe3272866da0739e61c8238d275751b823859d281762cb","sha512":"ef4256c0073f5a75d3ce978de14a0cabc25f655f40c699ac2bf644c79fb55c56d344ccd38ccca03a1d8d07caa60c7c9b3b0e48e4abf0d5a622a78421bc75dd2f","ssdeep":"384:NpstdaWUT2MGuaPjWcLdsJ5igaXFrW0LZmZvgHvscvJS1Far24+uo9AmFk2brxcK:NGeCMG9CcLdzpPZHvs8JSFaP+uoemmC1","tlshash":"02a2d0cbde0aa040ab15d96e4c72120bfe7d99c27f048f6c84d753a0193adb145e87d3","first_seen":"2024-08-19T20:10:03.127Z","last_seen":"2026-05-27T00:20:53.0343Z","times_seen":89,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2Ftechnology_Treasure_Chase_bd3669fdfd.png\u0026w=1920\u0026q=75","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-nine.com%2Fuploads%2Ftechnology_Treasure_Chase_bd3669fdfd.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23300\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: zCIeaPVWnF4punngZxRcFtHVNWhPnKUnAqan3q-KNKE=\r\ncontent-disposition: inline; filename=\"technology_Treasure_Chase_bd3669fdfd.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=utYpL8vX1ilPu92iY0Vb5vagc4tPE1Qy%2FxEZ1y4qatx4QWNXMdSbxkn0x2bNZBDHW8yAy27%2BRJAmsMtHYxnm6I3CvH45kTz5LJFYcw67a2Q5dV14Cf9SeoV3cPySX1vvON0n\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dce7fd4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":23300,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7f78e3ac142ad309a3e075f80654783e","sha1":"bc5587eb4d5d683441166e772e0f9ab6635b9d54","sha256":"cc221e68f5569c5e29ba79e067145c16d1d535684f9ca52702a6a7deafca34a1","sha512":"4ebc20bb887d30ab624c995626088d14e6271214b1b76964430cbda03c096731af982f1adafb759e3ccff01ef16777ec770fe92078b87869272c46084000bfbc","ssdeep":"384:RXC24RDcPWbUTGDznGTCZIforIpZleh5CWiy4nF4KTVs8F6WQ55OPUJVNZHo:RXUR2JGD7GzRleCjF4KxnQTMGu","tlshash":"e1a2f1812e9cf744e98092ea2dc41d17922cfd194e320964b33c9188eff43ed7438b22","first_seen":"2025-03-27T03:50:55.666836Z","last_seen":"2026-05-27T00:20:53.030466Z","times_seen":81,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/_next/image/?url=%2Ftotal-3.png\u0026w=64\u0026q=75","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:24.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"GET /_next/image/?url=%2Ftotal-3.png\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-nine.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2872\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: OCeyBa9dqIJvgkicFaVXDReSu6lIWhkViWkMV02bx38=\r\ncontent-disposition: inline; filename=\"total-3.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FqTnXodCf2ByfhfpvojArjRdXZTpHEngGPDJwStGAnQv3JI3R%2BLwNiTTc3kU%2B4CfoEtQ%2BTvoFHKb5g3uFCYAzr5pnMNwpW%2BaRuWi2WTj5wdoaqJjdZV2%2BGnah%2Fb%2BrnRuZAnL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377dce7fe6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2872,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"15d5c9005a37678205724a79e0c94ecf","sha1":"f84013d6e304be3f339edfce9188a5b40a10a8d3","sha256":"3827b205af5da8826f82489c15a5570d1792bba9485a191589690c574d9bc77f","sha512":"610f90da66f2799eccb5895b7a32fa1b4ab6cbaf7234c5740525f9fc953374052e20a11a32f879934fa28beb9772a47b6a8724484c20a71601ed87631dfa9b39","ssdeep":"","tlshash":"10513b1625223524dc707e718a2b13aca80ba84c0fffd767f1428d634c1496e67db8a9","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-05-27T00:33:43.228311Z","times_seen":130,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-nine.com/api/report-error","fqdn":"casinos-nine.com","domain":"casinos-nine.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://casinos-nine.com/","date":"2026-04-28T16:37:25.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-nine.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:35:43 GMT","end":"Mon, 15 Jun 2026 13:35:42 GMT"},"fingerprint":{"sha1":"E3:26:1F:D5:F3:C4:44:8D:10:6A:F1:26:6A:5C:3D:3A:31:B5:C5:C4","sha256":"AD:BA:7C:E3:8C:A8:26:38:89:A4:4D:62:3F:D4:77:71:61:0D:6E:BF:09:E4:09:AB:87:7C:A7:5E:BF:A4:8D:AA"}}},"request":{"raw":"POST /api/report-error HTTP/1.1\r\nHost: casinos-nine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casinos-nine.com/\r\nContent-Type: application/json\r\nContent-Length: 83\r\nOrigin: https://casinos-nine.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":83,"data":"{\"text\":\"https://courage-dream.top/m4r2mz?aff=max-chi\",\"domain\":\"casinos-nine.com\"}"}},"response":{"raw":"HTTP/3 403 Forbidden\r\ndate: Tue, 28 Apr 2026 16:37:25 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DRWi729PpktrRgz6m2BX1mnJTm4eV8WgVEDxoltMfuCdX2h1PpK936ek3w8O3gCnD4pGoYyjyXqufkkiRHDZrUujWgsdvscWl0rRPw8WgSHfisBKsIK8Ynf0QaPYnFQ8xR2v\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f377dd05df7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"9fe3cb2b7313dc79bb477bc8fde184a7","sha1":"4d7b3cb41e90618358d0ee066c45c76227a13747","sha256":"32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864","sha512":"c54ad4f5292784e50b4830a8210b0d4d4ee08b803f4975c9859e637d483b3af38cb0436ac501dea0c73867b1a2c41b39ef2c27dc3fb20f3f27519b719ea743db","ssdeep":"","tlshash":"2cc08c26351e2c0c96a322b402c36a50d092c3304c5a19004600420371c31168ac3315","first_seen":"2023-04-05T07:27:09Z","last_seen":"2026-06-06T22:30:40.643998Z","times_seen":95895,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-nine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}