{"report_id":"2c8f2aa4-3b2a-468a-a1b7-3de216a178b4","version":6,"status":"done","tags":[],"date":"2026-04-28T18:00:57Z","url":{"schema":"http","addr":"winoramacasino-login-au.com","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"winoramacasino-login-au.com/","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"title":"Winorama Casino Review 2026 – Bonuses \u0026 Free Spins","dom":{"size":98679,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (50211)","md5":"8ab1dce910166eb97afd81066b63fb4c","sha1":"93908e535e782b98612aacdfd46ee3310c80c634","sha256":"6421b9686c978698f15e1fb916a4ea39a3b31e99efe06ec881f1b157c9766760","sha512":"73346c8aa98f217906f0c92b2869e8cc211ac4ad9aef4c16c3fb7be3a74749d6d1472291edc8e228184574d3ef6c05fbc75d15831236b7e13f5bdc30c639f1c3","ssdeep":"1536:1TQSE61Pz2SKA0scvNd91/yeUYVFzgAaxrVWgsjIbk1vrwd/E7MIoFfgyNeJb6Bd:1TQSE6N5hOM","tlshash":"33a3ea9191849d03514f89c1f82be78eebce503ae3698ee87dbc49e5e7cf4270571262","dom_hash":"domhashecc49b06e1eac032f06a914741978913","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"winoramacasino-login-au.com","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-02T18:00:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"winoramacasino-login-au.com","ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-22","domain_rank":0,"first_seen":"2026-04-28T18:00:58.79855Z","last_seen":"2026-04-28T18:00:58.79855Z","alert_count":54,"request_count":54,"received_data":2335483,"sent_data":27998,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/546.767fc6323cdbff4e.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dbc38029da6bf4e8577f4ea86070313","sha1":"ca82c27f54ccb29ac2c9bafc04c6daf8bb697fe4","sha256":"cf8e5651bbd6a6c3e0b4ead08245c2038a435f51aebfedbeda73c51e16f8ebb8","sha512":"d111610f37cdf70f5536f4072a26b0793c7c03d0255cc14ffa6a791132b186d7947a57b54f5359596d682538075e3fb42c2bee26aa8690b2b7fa14852f3798fc","ssdeep":"","tlshash":"e2410244f0d5ff60a7bfb0f8866b5466a22f294897980c92f3e2ec4d145028c63b36dd","size":2376,"data":"","first_seen":"2025-03-27T03:50:55.681244Z","last_seen":"2026-06-02T03:03:58.995982Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/main-69b63e2e16716907.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88ac3c4d4d8044e62af740c79450b794","sha1":"204aee73c4d44e8b1ee68be86228e42488153b13","sha256":"174c4c9955f35a80888ee630b848e2122b15bf6b47baa1c2d3529e924c79bbb9","sha512":"b079ff7c1455a3fe79f8481578928b8d8fa37701e8b15c9d704a393f97564dd9edd1073e69461673a79313c3a0c9fecfd72c9322bb1324b144a8949ce3ddc1ba","ssdeep":"1536:MpLDGYjwpNLTvpKp0Q78ILsDQs7G5j8SCmaoaYCOU:1pqCQ7fLsDQs74VEOU","tlshash":"15a3f9b676d1f8a213cb41d4883b1006f2761d7e642f6045b3eadcd6b96098e90f2f79","size":98298,"data":"","first_seen":"2024-10-15T23:35:42.506487Z","last_seen":"2026-06-02T03:03:59.004649Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/59-f8c017dd1995d351.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca6891ac2aae14f26246bdb37ab4398b","sha1":"505e922a23762c67df4e79fa24cabb0245851e1e","sha256":"2dc7617f0bd01f69a3750e342e50f6edab54cc5694e980cbbf391ae1929e0128","sha512":"c6fd4f95bb61eaa401444cbc729d9cbece42c2e1fa39d60662d8e0490e3d7d1c305f5d97d1853b2246c5b3f0356794a228f2de9376c1c8ef98ddf9cb8ff03455","ssdeep":"192:5zBOuoW9Kpcm0peX9738kzED1igQmfJqiQH+bvHAg9P+Vd9XYUPF9:5zBOLcm1hz/meP","tlshash":"9262925e49864dae5a7dc8e4c42b510cd7ed6609b054bc70e7a98807b8dbec821b37cb","size":14942,"data":"","first_seen":"2026-04-28T18:01:02.780851Z","last_seen":"2026-04-28T18:09:02.919802Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/pages/_app-bd4bd75476c303c3.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca1d148701b929b16bd162486f51280a","sha1":"8af765f82997fb24661c720d3c2aef2b79a1e1e7","sha256":"43d0ebde82b22582d91d55a63461d4a9a55a7bc0eeac5ddcb22b3f04d56abaa8","sha512":"b68e719d5b040fcf496f87c54e297608fcbc45c3d876310788e40a53d706850937e6b16828c3a5cd20b256f56e8991f27be9b82ba4c075f78c5d4c9bf93a2770","ssdeep":"3072:ii1PkPUKsWkG34HtlYw0kn5DU+djxlozNm8ad6/QQX+uhuxOEowsB489M4cJkcx2:iiCcKsRGI3dCadhQ7wfNJiRs1+HZ","tlshash":"54a4f7d97282b062839760b6847f010af33e6a98240d802cf6add4db7f7564d9277f79","size":487978,"data":"","first_seen":"2026-04-28T18:01:02.794812Z","last_seen":"2026-04-28T18:09:02.959431Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/927.a7dc7992c436ba78.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"169204fe2bcc42c380af5e1ac2be7fe3","sha1":"8a03ce5223655c895c434033b81080a819fd917b","sha256":"e77204d4fe82687b08d2c78d02e066935c1b0c697a95682b12decbf3776b528a","sha512":"d47937c3eca1582d992d537eaccc779735e73d5450fdacdb27f801abff617ee8dd60a5fbdbde063b15a402746facd53cf439b115e864099f1c7537b218b3aed3","ssdeep":"","tlshash":"905131059986fdf9f9ba0cc9925fd53e762eb40f990c8da8fa7488414c098843603be6","size":2571,"data":"","first_seen":"2026-01-03T15:12:30.935058Z","last_seen":"2026-06-02T03:03:58.989391Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/15.15fac68198436cf9.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7b11e4d68dfd5dfca276735b05d6a61","sha1":"f6cb58ae2b5548287f2d2a12a1312ba8fa9c31b0","sha256":"2cd69c5258d421f4a93bc2890e11633bd9ed5dfe391bc4d4f94033f25f896c8e","sha512":"185f7f4f56114a0ac350b0755b517d4e022b2b132138a6e15fba9ef32a685bf5ce42dcdf10e9e84106d6b5946daddf7a19d0df9ea085116697a1737b44196c22","ssdeep":"96:p+8tQg5U6n2qKoJn2qK86n2qKYcBEOVSL9gHpDeRyJy1yNQ9Q0:p+8tbn2qKCn2qKZn2qKfpQ9Q0","tlshash":"aea16687a0c7f9989197fcdc801a8a5b703f8589b82954f6f960da3d0415ac0b257f5d","size":4946,"data":"","first_seen":"2025-03-27T03:50:55.684571Z","last_seen":"2026-06-02T03:03:20.679528Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/framework-10ae643bd7ba2303.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91eb10e0c5b60f80501425850b7ebf82","sha1":"8344750bc431fbb9e8a5170a82d08c7664639609","sha256":"4c185f58731fad68b5e3ef26e102ce9b3cb56aa8257d39aead25b675152a339b","sha512":"bae75fd66f5ebfd2cd4b3904defe212456502a8cc1ab092c8b58605c6bdeba1d9fc2fa0200ba9a6699df89af547ba3d51b8783dad8061210ad62f240b6ff18dc","ssdeep":"1536:2YjvmNg6kMuR40esfdznYBSq6vvnwGzQ2N0mIQa:Djv4hudzno6nwq5a","tlshash":"33d308e87996f6516ab311a700af2803733d2a1b280c4d60e215fd9e75b841bb17bfdd","size":141013,"data":"","first_seen":"2024-08-19T23:48:37.498483Z","last_seen":"2026-06-02T03:03:59.000906Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/966-2601235ce9ca419d.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3916183d5387e7871a478a2753108c78","sha1":"d6c20ccfb0ab889c2783026c0faba3360097942f","sha256":"5e1379964fee60bce05cde87c8c634a2600371fa60bba4aad38e1ad9b2737bcd","sha512":"d8900dcd34a78a6964c4deb4f6b17e6af8d6120e7081a62a7575c5238d6c1ce129df74a73a69c24b534e4e770ab7e9cb0655a3871da3ea81f188ab9231632edc","ssdeep":"192:vbZDMNJAQDemeCjuUZXXmwEy4HxpEkduQh:v9ba/5z4kkduQh","tlshash":"95f1c6b27782f90623c5d4a4c17ab01fb5ac9c2b5d0b50f8b569cdeea9e015460a0f75","size":8192,"data":"","first_seen":"2025-03-27T03:50:55.682304Z","last_seen":"2026-06-02T03:03:59.001644Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/pages/index-67c545f8362cb3f5.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"045dc07f95969c2df33cd4a214e83717","sha1":"b89af6510652f59367921b09cf4a68bebdb27dcf","sha256":"9d8c30be80230957002ab1fdbc8babe834fdefd49204879c1e609a5491fa05aa","sha512":"76205eb0e13934fa7b15710243ed9e6da746e20ff36b77dbed304ce80c27d6c9bb9ee005c6be3125aec1b75b9ebde613fe9d54dafae5eea366e872085eb026f7","ssdeep":"","tlshash":"18011298b493be086b2750f8462f310e63be795e153e49a0b25284c83af231d1a91fcd","size":828,"data":"","first_seen":"2026-01-21T17:57:31.276517Z","last_seen":"2026-06-02T03:03:59.017415Z","times_seen":251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/0IvxWxEGR5Az6y-ABf5gU/_ssgManifest.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-06-07T02:16:15.173503Z","times_seen":232219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/0IvxWxEGR5Az6y-ABf5gU/_buildManifest.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"248c71061222448984bdc29ac77908fc","sha1":"e56a10dd8c818d3300821e329429b00f5e150048","sha256":"e83d8e10af2e20e3937fa0bdea22732b2bb3718838031cc81b363bd5d7304526","sha512":"8f6ba832ce104a1a31dc25acc4f13f3db62dd354648b7886ef97fa7025e9649051d7742da2a6ef5abd0f1005e3984f2a7d0ae2989103e5348f28c975d6447a30","ssdeep":"","tlshash":"d411bd82410ae61a2ce8ed47373f13a3bf528036663c0ab6cfcc1d6c51900675f3a421","size":1014,"data":"","first_seen":"2026-04-28T18:01:02.777067Z","last_seen":"2026-04-28T18:09:02.966107Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/492-27fcff75637ccad1.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33a3b66aeadc3f947af1a3e6b40d8dc9","sha1":"571b79088328bec4ff380e3bdbda28ae5e49b676","sha256":"cedc3412d27395c225ff730e22f06a0a579dff72b81b4dcfd1e9cca6633dbd0e","sha512":"3313106d76774c6a8a8235284cddaeea6ba1e92a25d46cc3dfd438c92115bc818ee82004aca8bb2e952b1f1c4efc0b8ac19758cbe5a13d6e2f4f96d8d5f5cbf3","ssdeep":"1536:hwu9CI02UwAnwvb1gxTdIZHolguxq8fyBh9GpNjpCq30H/atJU71cuz:G3JJk09Icuz","tlshash":"bda308da7361b1b593eb12579269c141e3b608887409842cb1b88cdb697d99c13ffff8","size":98327,"data":"","first_seen":"2024-10-15T23:35:42.529902Z","last_seen":"2026-06-02T03:03:58.991334Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/4.26aad75ddf9b4222.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3bc2d4e5737225ff95d32b21a827359","sha1":"d0f3690f0ff1d675ab999b9cd2e1a74046329a94","sha256":"d06a8631bc16208ac703b238065a6c4ca001b41c1d7673c8702b26d82b5fa123","sha512":"d71a0d54b36d2914ba832c6897e23e49253fe8177f9489ebb3d7d78b5d7ceef17dda62b7627d28945aa442e4e496bef22007589211573d50888ab0a9399c8f30","ssdeep":"96:9j/51t+HabFphGV+Qm69Byph/fXkJ+6cRK1A41ATjYnd77Sg1E0sX4l:z+UhjXBAbhnl7Sg1TsIl","tlshash":"d7f156c1e286bfb5a9bf58c1413f850d772e290dcb364cb4f574a8025590ce8b1a6bcd","size":7563,"data":"","first_seen":"2026-04-28T18:01:02.802185Z","last_seen":"2026-04-28T18:09:02.972195Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/webpack-09feb7917a7d7927.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"06bcf4e362aeda89177500c54e5f3060","sha1":"5920306ce9ba0001caa97f43458dfa2d05e1c57e","sha256":"bdc7ebbe8ea2d35f9ffa585e368a83ed989e00c162758834131faf9552274ce4","sha512":"68b46a466c20515ad4800be2dfd87db234dd7182f059eab8dc0ad1590754aeed9840359b8bfc6304ea2c157e351f1364897402f3058f4ca30a6f54f4bcd4a642","ssdeep":"96:6IAgDpEzqynRRvEKjmvFqMug1kkNxNF9VTlVHO/jeE2UjKBOK6nRVG/OGfIfRY8q:64GzxnjvEMOFLBkQNF9Xe7jKl6nRVG/n","tlshash":"f7c1c79e72a4f8b6164365a4493f909af17e207b781ed0b0d70ad9b4bc349688533fe4","size":5968,"data":"","first_seen":"2026-04-28T18:01:02.793272Z","last_seen":"2026-04-28T18:09:02.926927Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FCoin_Win_Hold_The_Spin_3c6f7c8c21.jpg\u0026w=1920\u0026q=75","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FCoin_Win_Hold_The_Spin_3c6f7c8c21.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24198\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: yXj2ZESwQVVvKRYsRHPVsGWkdW6QqqeIzr2i9qSzcw4=\r\ncontent-disposition: inline; filename=\"Coin_Win_Hold_The_Spin_3c6f7c8c21.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a9XdUMmNys9jXCoITsJ0Im%2FAfHEJIKYUkuSIJUUjXqUreMIl%2F2JrycDTcPNRUU2ZPyYbVS7EqvaKUfogFBR2%2BfQLi0S13VwjBd1motT5sda1ekT2Bjw9WrTvoIvRfSE9NWuGyrikhM5AAWMZxcc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a4eb204e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":24198,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c495a89386965c386d7d3593caa1f47c","sha1":"82d0512c8e0aa0f3b38065e1d119626578d3b102","sha256":"c978f66444b041556f29162c4473d5b065a4756e90aaa788cebda2f6a4b3730e","sha512":"b8b91d7e576dac9eb61c13fc97eae9711acfb1ed72700ba1a6db264a8dcf18a9dd278654df45272444552c4252cc04ebed907cc0c9bc48432b3d18d3ce6938f4","ssdeep":"384:WaeqxNHvMrMBff+2tTp9CBnmna+mQFgQYfqkLqGpaQciwr+EOZk63lQuvUgaLzs9:+qTHos9CBnmna+PC3bpaQcbrhkUum1Mn","tlshash":"e5b2e1c91ae7d6bc3ea83bdf2031fe0c60513985e6739015ce9ba8491119986b6b1a19","first_seen":"2026-04-21T04:06:50.96957Z","last_seen":"2026-06-02T03:03:20.683116Z","times_seen":27,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FCosmo_Classic_1f94a25e20.jpg\u0026w=1920\u0026q=75","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FCosmo_Classic_1f94a25e20.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17156\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: 97adPdSjhkfji3dNKRWpvLbtxfPfVA6yHMhpsVraKms=\r\ncontent-disposition: inline; filename=\"Cosmo_Classic_1f94a25e20.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wi%2B6ilgdzyd463FlDcEFSVB%2Bk4vNGOTVqLnuNppNljYKO7m178pywBy9oc6fkF76l6NIsSosR6o%2FL9eF17VNw9AortjRj9eGh79dbY%2Bj4UctuX%2BZzHK7DRgTpJZ70X9v5jQkz6yxT2fFfC04aWQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a4eb214e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":17156,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"878f3656d87ba170294af2c1778488ca","sha1":"187efae1943ca195895d61ffe8a6027131f447d1","sha256":"f7b69d3dd4a38647e38b774d2915a9bcb6edc5f3df540eb21cc869b15ada2a6b","sha512":"b298618a25b4655538128b9987b654948043d57e61175230b9e02c33aee897fd6be6cb154fe28ba7dfebaf2d899764b89a633d9ffe3da0fa7928e7566f06849a","ssdeep":"384:eDh1vmc+cqS2YXD8R84bUX+7BHpl6WmSpxNH11Qfn/b+rqhc:GhQ7cZ1i84bBJ6hSpx1Qfnj+sc","tlshash":"2a72d0f74e9a801da2e46cbf9297b6783c32cbcae1514f17712314ac91b6b5484eb970","first_seen":"2026-04-28T15:35:41.410682Z","last_seen":"2026-05-26T23:52:09.452413Z","times_seen":33,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/966-2601235ce9ca419d.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/chunks/966-2601235ce9ca419d.js HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"2000-19db519d13d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DxRMXNTSmxNFO%2B4CvctMpDQTcfyI6KM2XsWulo3f%2BExY7XjmF8bgHCKmtj1Q7mORBGfjH9%2BrR%2F%2FmYwAB23TmMj9g44lDuheqoqPWqGw6oxPNgTNFQT0Vj4suxQCWvnv5O1%2F2UPj8mUJVaGEf%2FWQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f7a2eaab4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":8192,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8192), with no line terminators","md5":"3916183d5387e7871a478a2753108c78","sha1":"d6c20ccfb0ab889c2783026c0faba3360097942f","sha256":"5e1379964fee60bce05cde87c8c634a2600371fa60bba4aad38e1ad9b2737bcd","sha512":"d8900dcd34a78a6964c4deb4f6b17e6af8d6120e7081a62a7575c5238d6c1ce129df74a73a69c24b534e4e770ab7e9cb0655a3871da3ea81f188ab9231632edc","ssdeep":"192:vbZDMNJAQDemeCjuUZXXmwEy4HxpEkduQh:v9ba/5z4kkduQh","tlshash":"95f1c6b27782f90623c5d4a4c17ab01fb5ac9c2b5d0b50f8b569cdeea9e015460a0f75","first_seen":"2025-03-27T03:50:55.682304Z","last_seen":"2026-06-02T03:03:59.001644Z","times_seen":269,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/0IvxWxEGR5Az6y-ABf5gU/_buildManifest.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/0IvxWxEGR5Az6y-ABf5gU/_buildManifest.js HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"3f6-19db519d13d\"\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xZvCP0b9WgEsrzfmbLGoD9F%2Fyku90JHCZ2wUrODW12pPy9wY6qH0txOAIiYCRbQ8xrmU%2FTrorWR2tCY%2BqknduMmYl%2BsKzLQ7kakTtd1VI1EcJW%2BRVznvSMjHED4zcJrC%2FUDm7Pxs6kZ9u8pgaac%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f7a2eaad4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1014,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1014), with no line terminators","md5":"248c71061222448984bdc29ac77908fc","sha1":"e56a10dd8c818d3300821e329429b00f5e150048","sha256":"e83d8e10af2e20e3937fa0bdea22732b2bb3718838031cc81b363bd5d7304526","sha512":"8f6ba832ce104a1a31dc25acc4f13f3db62dd354648b7886ef97fa7025e9649051d7742da2a6ef5abd0f1005e3984f2a7d0ae2989103e5348f28c975d6447a30","ssdeep":"","tlshash":"d411bd82410ae61a2ce8ed47373f13a3bf528036663c0ab6cfcc1d6c51900675f3a421","first_seen":"2026-04-28T18:01:02.777067Z","last_seen":"2026-04-28T18:09:02.966107Z","times_seen":2,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/css/02660251b6f4cb66.css","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/css/02660251b6f4cb66.css HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"647-19db519d13d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kMZlbH%2FoFgoSJdM3SSxZRqjq5ucZIMny1xS7xtjq7p44cWzszPgwY3wDlgE5EzZSR%2FI5yUwb7fHfbxdspk%2BQJTbwHST9JVGsuAPBEBqrNGegDiktxPHqsGRij6cqEgnu1NOLVnWAzRqqGwgLDss%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f7a2da8e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1607,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1607), with no line terminators","md5":"052642617ed7f811791f601117385ba3","sha1":"d69d36b5f6b4ee6ed717ac8b147b1c0d4dac7e01","sha256":"7f8a26b02a5a62e50adc44a3555c0e632ca411c3393431241ca011aa3ae67430","sha512":"64c5c597ed4d4a9b711ce5d2a96ce6d17e99fb4e92aae02c233613e6dafebe3128e57f036638bafda053613db779f9982350aac232c9eac81fbffe26380fae6e","ssdeep":"","tlshash":"513103731678a4387cd5582b09f1a25f3d04ed33ea6f79c4eb31907c92efa5910625c5","first_seen":"2025-03-27T03:50:55.66801Z","last_seen":"2026-06-02T03:03:20.694743Z","times_seen":146,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/15.15fac68198436cf9.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/chunks/15.15fac68198436cf9.js HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"1352-19db519d13d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cFvESG81wdXnzHotoYaUakKujvPTXQJ%2FrjzkKQWEgem6DnEx1TRLamEZ1VjPYx4S6d8KmjpJmy2KYEUQUUt2DvbV2SpAR0CROrPO688x12Jxxf%2FbLsGZlf6we19ruUmIM6IfqFW0bW5G3e%2FZtVk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f7a2eaa34e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4946,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4946), with no line terminators","md5":"a7b11e4d68dfd5dfca276735b05d6a61","sha1":"f6cb58ae2b5548287f2d2a12a1312ba8fa9c31b0","sha256":"2cd69c5258d421f4a93bc2890e11633bd9ed5dfe391bc4d4f94033f25f896c8e","sha512":"185f7f4f56114a0ac350b0755b517d4e022b2b132138a6e15fba9ef32a685bf5ce42dcdf10e9e84106d6b5946daddf7a19d0df9ea085116697a1737b44196c22","ssdeep":"96:p+8tQg5U6n2qKoJn2qK86n2qKYcBEOVSL9gHpDeRyJy1yNQ9Q0:p+8tbn2qKCn2qKZn2qKfpQ9Q0","tlshash":"aea16687a0c7f9989197fcdc801a8a5b703f8589b82954f6f960da3d0415ac0b257f5d","first_seen":"2025-03-27T03:50:55.684571Z","last_seen":"2026-06-02T03:03:20.679528Z","times_seen":146,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/image/?url=%2Fjackpots-wins-place-1%40X2.png\u0026w=48\u0026q=75","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/image/?url=%2Fjackpots-wins-place-1%40X2.png\u0026w=48\u0026q=75 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1412\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: NWcNEApufzPN1Z6+CYAf9TbOYMw9v7XHucYwPA8FnBs=\r\ncontent-disposition: inline; filename=\"jackpots-wins-place-1@X2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YC80ntXgmXnT%2BSXoiL1L%2FnMX3MvpJ93YUhZQ2m0yq7e6FBTYQwC%2FOYtESzDjzkwz64BcdQSHd7jfxe3GYb7K3zQ1OzqYEBeo6KyMHrBdyCjIdoZfjr3iH2oaGCFGzD5HdbTZWIedaRRhX4z%2FHKk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a4fb264e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1412,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3c79467552a70a7e3b9aac5361dca35c","sha1":"c185808d79c2a23b02504ec935117459b1c1b799","sha256":"35670d100a6e7f33cdd59ebe09801ff536ce60cc3dbfb5c7b9c6303c0f059c1b","sha512":"664ee68f3c1334fc77beabd6037b226504bf74cc23bda66ca67f20612c26275690e730cf2eedca94bed50a3554144240c1c59229d98fd63cf7abcf886b877584","ssdeep":"","tlshash":"56213810768cdbf8e771087b765008810acfa4a290370201ee3f4ea4e62af6b2c3c482","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-05-27T00:33:43.209922Z","times_seen":124,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/css/b8b51d0b3a6f4866.css","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/css/b8b51d0b3a6f4866.css HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"1759-19db519d13d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SsRGY24Ut0ASfvkdEs22O0lMoIllS8ZE6lHuES3cSfVwQmQKXvhnxOeC3KxbrpAc5nQbEaffcSLILLLpsl18TYxsxaNHka34Z4Bny3dJtGqZstaspdGWavWKisVifLpbdwh5joVGoceVK4PTRzI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f7a2da894e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5977,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5977), with no line terminators","md5":"ec84f0a7a2055c970d4f253ab08f0c70","sha1":"c5d3245c2d4085779d873705881d9d7330eeaa06","sha256":"6a0b091cfe2a46fb254fc84ca7036ea34c6c542f83fcaf2fda6b54a828c13fd2","sha512":"195afb216b85d37b9d702a5263bd852f66982769652e1ae73285a60c57ff5aa1a34d949a08723746d58fe3e576aa599e0a493ce98fdb7b767ebe32b94f968ec1","ssdeep":"96:PB5mSJ+MbpDAKneQYX6Jl/0hSvRneZ0jVMR9wfX+9Ecl86djPfUQjSf902G:3mUJbiKneaXshScZXRj1zyCj","tlshash":"4fc1e5b30712ed25d6b26d6744a0ee8ccee4a103de33d5b8f841953ccbd96680270ed8","first_seen":"2025-04-29T14:40:21.754106Z","last_seen":"2026-06-02T03:03:58.987189Z","times_seen":264,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/main-69b63e2e16716907.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/chunks/main-69b63e2e16716907.js HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"17ffa-19db519d13d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LwBvqwBqPK11qJngvAMB%2BHHwKcajYwjCUn0ZVWf%2FOI%2FNsaGJGU15i3VBmFcnyWWcp9BbABb1AeBbXQZSKbmxsSHQYlUBaHPVJx9q3xpIwDpITyi%2B%2FJJm%2Fiz%2FX5NMmsnJjNVwsFptQJAjwTBnwGw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f7a2eaa74e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98298,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"88ac3c4d4d8044e62af740c79450b794","sha1":"204aee73c4d44e8b1ee68be86228e42488153b13","sha256":"174c4c9955f35a80888ee630b848e2122b15bf6b47baa1c2d3529e924c79bbb9","sha512":"b079ff7c1455a3fe79f8481578928b8d8fa37701e8b15c9d704a393f97564dd9edd1073e69461673a79313c3a0c9fecfd72c9322bb1324b144a8949ce3ddc1ba","ssdeep":"1536:MpLDGYjwpNLTvpKp0Q78ILsDQs7G5j8SCmaoaYCOU:1pqCQ7fLsDQs74VEOU","tlshash":"15a3f9b676d1f8a213cb41d4883b1006f2761d7e642f6045b3eadcd6b96098e90f2f79","first_seen":"2024-10-15T23:35:42.506487Z","last_seen":"2026-06-02T03:03:59.004649Z","times_seen":271,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/59-f8c017dd1995d351.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/chunks/59-f8c017dd1995d351.js HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"3a5e-19db519d13d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G7hZh%2BPjIYkSSD%2FNRkA4oLaGkV5h5llYBTJtHdn2BgMHUglAEbtcKSg5gKWgp536tcF5lIrjBoM%2Fg%2FU1X7sXU7t9h7mhAhW2q3QeymC060Q%2BP%2FdVU7SaVyHRgL7Gl0jQrcgPEZ0SrLvAj4npqPs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f7a2eaaa4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14942,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14942), with no line terminators","md5":"ca6891ac2aae14f26246bdb37ab4398b","sha1":"505e922a23762c67df4e79fa24cabb0245851e1e","sha256":"2dc7617f0bd01f69a3750e342e50f6edab54cc5694e980cbbf391ae1929e0128","sha512":"c6fd4f95bb61eaa401444cbc729d9cbece42c2e1fa39d60662d8e0490e3d7d1c305f5d97d1853b2246c5b3f0356794a228f2de9376c1c8ef98ddf9cb8ff03455","ssdeep":"192:5zBOuoW9Kpcm0peX9738kzED1igQmfJqiQH+bvHAg9P+Vd9XYUPF9:5zBOLcm1hz/meP","tlshash":"9262925e49864dae5a7dc8e4c42b510cd7ed6609b054bc70e7a98807b8dbec821b37cb","first_seen":"2026-04-28T18:01:02.780851Z","last_seen":"2026-04-28T18:09:02.919802Z","times_seen":2,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"89fc-19db519d139\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6N8FLOnzOfu2xapOYw668sNTkbqHokEQt3ihKRh8yyxtTKg0ouqFGz5hG0Pcda6yoavF8bXzRwgOHg8oke7wZJkaHxqSP6Ncw8QHbDOeqxuiJ5sUOY%2FsOnxLY6RIHM6dHtZ8vKK5gJVPnz42M%2FI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a49b074e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-06-07T00:21:57.731919Z","times_seen":1779,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FBuffalo_SPACE_Grand_Ways_bfb8af2452.jpg\u0026w=1920\u0026q=75","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FBuffalo_SPACE_Grand_Ways_bfb8af2452.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9614\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: SSnpjzadIzZ6D-dA-FF-ZS9qMXfg8abp6eL7ozXEo6g=\r\ncontent-disposition: inline; filename=\"Buffalo_SPACE_Grand_Ways_bfb8af2452.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8FP99uXpTM%2BRPdMo6ymQZidbXP%2B2%2ByVjoSPF6scla%2FITbZLREE63lyYZnm3SIJgpBZXaG%2FsTALBdu6FECOO6ENNIrwopbcoSvXvH8G3dNq5oG03Mx2vqtcLi3kBAfE1jFMxfn%2BsVkVhPviIvyXk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a4eb1a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":9614,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5b913054cfd5a555f6f7c4247426f8fd","sha1":"b0a44d07d6b26db465140f205adbe94e19ace419","sha256":"4929e98f369d23367a0ff740fc517f652f6a3177e0f1a6e9e9e2fba335c4a3a8","sha512":"2922244fa7bf781299ba7cfc3e78b46e988dca2649d66d7f5f1b270637b182d03ed4f3c954a34326db7f67c0e2317d9041447a3ed3fa10cb17c909ebfef8688c","ssdeep":"192:FDBb/PdhpcLzptNmiUKvYRue4Nu2ufqUSnE4MVAQOZ01hE3jKL9ZM:xd/PdncLQvKvY1uu2TEDf601hE3OXM","tlshash":"8312afe4447cc1aad2f9b8426d6c44bb98d4b293e7e058012c12105f3ecd637f55db36","first_seen":"2026-04-21T04:06:50.959573Z","last_seen":"2026-06-02T03:03:20.690174Z","times_seen":45,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FCoin_Strike_Holdand_Win_932d6f933d.jpg\u0026w=1920\u0026q=75","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FCoin_Strike_Holdand_Win_932d6f933d.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9856\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: f5ZwhdhtKlCMi+af7crQBi8ZX+mZwTLi64Hk3YsRVgg=\r\ncontent-disposition: inline; filename=\"Coin_Strike_Holdand_Win_932d6f933d.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OYyHo0dWKKST8x%2BjWh2tjspVWvw8enzUw6XXCfLq8nqvYpYs2im%2FHEgewca4RgmwoZY7tXKq8qHZHvjaFuqXlePY5Zt1bjdc1%2BO%2FVBGJhscPDmi8becesLDLtILlnRbqlK2JzqhlmioKq%2BX0bpI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a4eb1e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":9856,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5771197c56c68dee1328c9b0b3688d81","sha1":"1d1013c6ffb70e347a9ee91511da1b72f0ea9070","sha256":"7f967085d86d2a508c8be69fedcad0062f195fe999c132e2eb81e4dd8b115608","sha512":"5f958fedb4f9ab93f68ce99059bbf561cfce133e3b8e42144bcf15b47cdcb07afc1877afe43bf442c537575a2240fdcc39dfd35b280ff311bf02c770d27bffba","ssdeep":"192:F6UqPG4DwryoAevdl1R4zw+A+lswPzXrh8d4yao7IBuIP:QXe4DQj9OCwbdzO0f","tlshash":"e812d0c36a5bd2ba9fb43a427ee48ae25c11c00c94955ce8d32daee386f35d1f9460c5","first_seen":"2026-04-21T04:06:50.943456Z","last_seen":"2026-06-02T03:03:20.677481Z","times_seen":15,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/image/?url=%2Ftotal-2.png\u0026w=64\u0026q=75","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/image/?url=%2Ftotal-2.png\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3112\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: 1IQ8dZLvJzt7jJSWdq31UItS+8IY-kyELSYl7ymzCN4=\r\ncontent-disposition: inline; filename=\"total-2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B6h2vA3kaME%2FUZC%2B4cDW%2FgUxdFsQpiWi39vXEWxoKBiDal8Zz3JGF4SW3GFWKcMft%2FS2MEaGfamtg7Mtk%2FiOn5mYZVuXUL1lQILuN2Ck4m24%2FfshDL9s%2Fn9Qr7iEpVBHdVjDGK%2B0nPrfc%2BRzmdY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a4fb244e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3112,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9266ec4c0b5e7ea801409c213828352c","sha1":"d902439770a2f68009eb488fcb951baa968cf6bd","sha256":"d4843c7592ef273b7b8c949676adf5508b52fbc218fe4c842d2625ef29b308de","sha512":"91beb28dafe0f3410ab30fa27e1757ac7fd3107e540330bfeaae0e2246cee3e1d628d577072bd51c169e8a066dd03c9b5c371bc833eda40f7703cc3d55ce9aab","ssdeep":"","tlshash":"7e513b5748b32183decf3207914d412d0782d0df18854db9e8bc2ddea97a2f085898e5","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-05-27T00:33:43.209396Z","times_seen":130,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/492-27fcff75637ccad1.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/chunks/492-27fcff75637ccad1.js HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"18017-19db519d13d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yzHM31aBXEhhyciBw4ov02YF2z5wOPOSPwEwrsiy%2FtkgJuQmVTvUmI9JCHRViD78sDs7OkgRKEjByTvdnqj%2B%2FnvlK1N47Wr%2FQHTq7ysnS7GOB8A0mSM7%2B%2FChbFXk8gDG4VC2O9%2FRIuse8UTJqMg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f7a2eaa94e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":98327,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"33a3b66aeadc3f947af1a3e6b40d8dc9","sha1":"571b79088328bec4ff380e3bdbda28ae5e49b676","sha256":"cedc3412d27395c225ff730e22f06a0a579dff72b81b4dcfd1e9cca6633dbd0e","sha512":"3313106d76774c6a8a8235284cddaeea6ba1e92a25d46cc3dfd438c92115bc818ee82004aca8bb2e952b1f1c4efc0b8ac19758cbe5a13d6e2f4f96d8d5f5cbf3","ssdeep":"1536:hwu9CI02UwAnwvb1gxTdIZHolguxq8fyBh9GpNjpCq30H/atJU71cuz:G3JJk09Icuz","tlshash":"bda308da7361b1b593eb12579269c141e3b608887409842cb1b88cdb697d99c13ffff8","first_seen":"2024-10-15T23:35:42.529902Z","last_seen":"2026-06-02T03:03:58.991334Z","times_seen":271,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2Flogo_122h48_08fb044c3b.png\u0026w=128\u0026q=75","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2Flogo_122h48_08fb044c3b.png\u0026w=128\u0026q=75 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3858\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: 6uwgTuZ2Ay49KpIfbWmcAAmBgaisA7YpSIbOEDQe8LQ=\r\ncontent-disposition: inline; filename=\"logo_122h48_08fb044c3b.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FdW%2Bz2g0UPTCPyA%2Fwksc0lTtFC9ecuGdx3gizK5DXy5h40DNSuuW%2BX0rmNuasx2gnN84RnMMqY0BMMPwFKtpjfaMaxp2bpPd04OV8H59o2n5e3sBZQBNqlQr2E3OXfFXcpXTGasSEiKxEz2Lcio%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a4cb0c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3858,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f75c3b19c1f807158a59e151623afa26","sha1":"b103442af5694d80cec021de4d846d9d8d9a1062","sha256":"eaec204ee676032e3d2a921f6d699c00098181a8ac03b6294886ce10341ef0b4","sha512":"c940760cd265a638a44f10c4ea2746ea4e28174396ea904c440297dc0c32176e777911deba447a3e18dd89c2ee11423ec314bf33c613ac77e1869faf1fd6381c","ssdeep":"","tlshash":"12816b8eb88ef4ce6f98ce7c6898f25804001fd911e0b565baee80584851436e3d2496","first_seen":"2026-04-28T16:58:00.884032Z","last_seen":"2026-04-28T18:09:02.941891Z","times_seen":4,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2F20_Coins_aeb1ce6bb9.jpg\u0026w=1920\u0026q=75","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2F20_Coins_aeb1ce6bb9.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12004\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: C+6ll+rkVMTOKZVX34hc777Gn6hWRDV2aH9hKXjxOb0=\r\ncontent-disposition: inline; filename=\"20_Coins_aeb1ce6bb9.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=owokv6sEgiDJcjGVHY8%2BTvICln%2FiDcWs2Bkyk6GhJ8vULF8qcwrmy9CpnqFna7smHqFCKduuj%2Fjt42bvDP0CDn8uv%2Bqd4%2F9ld44PKE9Rd%2BA1c5IAdZPgkJKjbxK3dym2xqdWWUEMRaPcgGlcAwA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a4db0e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12004,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"264b7fcda1d7f942b40969d014e2ba7a","sha1":"169327d04f4ebb1920396d11f20e50cfbd2e0166","sha256":"0beea597eae454c4ce299557df885cefbec69fa856443576687f612978f139bd","sha512":"9df1feeaaf15a67fd8acb128170a89bf26fc6bdb3ff20c6390580351c9631c9e92a0b31bfea22aefc6780823875c138f139195b5045576342084ab99ce3a6f5c","ssdeep":"192:sTURy/axvDmIIayYpZmJbqiA291DUYKeA9PET4TqLvta/5WDTurVDgikGYgwMfVk:0URg+DmOjZ6LvI9PEThlCMvuJDZvYg1G","tlshash":"0c42c0cb593610e8a4198f8cd1ec66a22eb0b7c47bf196145fc58f0ec6b5f2263465ac","first_seen":"2026-04-21T04:06:50.934166Z","last_seen":"2026-06-02T03:03:20.664413Z","times_seen":35,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/image/?url=%2Ftotal-1.png\u0026w=64\u0026q=75","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/image/?url=%2Ftotal-1.png\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3382\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: qtgseq43yCPlc4q7UqXglchdAt0qOBOx8mfDTvJp8OU=\r\ncontent-disposition: inline; filename=\"total-1.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y24MIBMdWD8inVCrlzbKRUU4P2FbGHR5iEjGEmtRsNRMWzQr1Zf%2BeSy5NhWlYhTENRYemiAWAoed7GP%2BY7hvKVxoFbT4BS530CqzE3Hn4o8ZVbR3LY%2Fr9cQRavOF1w2BdHCI1MOxlFYUw4ODipY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a4eb234e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3382,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"50d69df7565f2adff718b334b2be696e","sha1":"32684076332a394e40ac306390e9ef110369572d","sha256":"aad82c7aae37c823e5738abb52a5e095c85d02dd2a3813b1f267c34ef269f0e5","sha512":"6a0091fdf8e0b8f300404d484bbc5883cd3f7e03a1447acc692b051566490697ba2eeb42be05ac285abda18967cf518a9711bb86ca09bb58e7ff6dcf933b5df8","ssdeep":"","tlshash":"5c617e98605178c1c69be8a146878163d1564650d3c6c874bbf4e62472acc7d4331cf5","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-05-27T00:33:43.215238Z","times_seen":130,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/image/?url=%2Ftotal-3.png\u0026w=64\u0026q=75","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/image/?url=%2Ftotal-3.png\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2872\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: OCeyBa9dqIJvgkicFaVXDReSu6lIWhkViWkMV02bx38=\r\ncontent-disposition: inline; filename=\"total-3.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pqij2Idt2pOhbMPKdCLHtGbr06u8qJnexLiha4NVzxokBTXslc5OIRjFoZPNajsbEPXPK0YKTAAMrRWRfi9apE5JSqlGZvXz%2FmsW%2FQNKoUqIEKwzHo1AfudKP%2BNgwhVE1S9oDtBopUKD7mvN59k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a4fb254e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2872,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"15d5c9005a37678205724a79e0c94ecf","sha1":"f84013d6e304be3f339edfce9188a5b40a10a8d3","sha256":"3827b205af5da8826f82489c15a5570d1792bba9485a191589690c574d9bc77f","sha512":"610f90da66f2799eccb5895b7a32fa1b4ab6cbaf7234c5740525f9fc953374052e20a11a32f879934fa28beb9772a47b6a8724484c20a71601ed87631dfa9b39","ssdeep":"","tlshash":"10513b1625223524dc707e718a2b13aca80ba84c0fffd767f1428d634c1496e67db8a9","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-05-27T00:33:43.228311Z","times_seen":130,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/css/b8b51d0b3a6f4866.css","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/css/b8b51d0b3a6f4866.css HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winoramacasino-login-au.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"1759-19db519d13d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lv8UGovkdkz6F1nhI%2BH1ToPLD1XHa3mzOlOnnsNu49FZDgr7TMBaYo7jI%2FfMtAV%2Bya2f72PqAb82fbYryGZVMgVAty%2B3WyDCYekADDw2vtNiRSXgPolmJNNqXyGFV%2FUdz91vlDqbRYtSINS5wEU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f7a89c024e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5977,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5977), with no line terminators","md5":"ec84f0a7a2055c970d4f253ab08f0c70","sha1":"c5d3245c2d4085779d873705881d9d7330eeaa06","sha256":"6a0b091cfe2a46fb254fc84ca7036ea34c6c542f83fcaf2fda6b54a828c13fd2","sha512":"195afb216b85d37b9d702a5263bd852f66982769652e1ae73285a60c57ff5aa1a34d949a08723746d58fe3e576aa599e0a493ce98fdb7b767ebe32b94f968ec1","ssdeep":"96:PB5mSJ+MbpDAKneQYX6Jl/0hSvRneZ0jVMR9wfX+9Ecl86djPfUQjSf902G:3mUJbiKneaXshScZXRj1zyCj","tlshash":"4fc1e5b30712ed25d6b26d6744a0ee8ccee4a103de33d5b8f841953ccbd96680270ed8","first_seen":"2025-04-29T14:40:21.754106Z","last_seen":"2026-06-02T03:03:58.987189Z","times_seen":264,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/media/c1b11e140b58cf5a-s.p.woff2","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/media/c1b11e140b58cf5a-s.p.woff2 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winoramacasino-login-au.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15108\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"3b04-19db519d13d\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cMadx2KzUG5VcHy%2B66wN1VM%2BnFj%2FRkx5icsEZaEplDPEHLZNr4yuyEqpYvCEGOFsYBydut4WZ5L%2FtTzl76F9%2BK7fO0MIFCG5Lfa8AkCyPteqixjbhBC8LIbGBuM3CQJMxHRljm0a2aCbzDzTAi0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f37f7a2da864e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15108, version 1.0","md5":"368f3e99ee207a4a2e2584eba7d3c82f","sha1":"9f907e41605807c4bf4f960745698b1e430a716b","sha256":"963fc62d2cf3e59e6f338db71b85b5ea86dd009fff859116d51a31a9b98d1d30","sha512":"2eb180c4cba21fa77eb89d801d6e55fd10acebe3a25e99228e3ca5861447a393aa60420a21f3cd573cedf5107dd391b5e5e1fcf5e09e799f2cbe7a6826eda2b2","ssdeep":"384:VHJTAkiZnTfVU4LSYdh7Db82J2Werb7VVX0m1+cz7aNw:VpTA9xTfVOA5o0erb7YmcGaNw","tlshash":"c562e16e92dc05534d2bd6f84eebd8cc7bd0f8548133af233905a62a854b810f218be1","first_seen":"2025-06-16T02:04:53.862041Z","last_seen":"2026-06-06T05:47:14.560815Z","times_seen":356,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/uploads/baner1920h679_2_fa2ca4d849.png","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /uploads/baner1920h679_2_fa2ca4d849.png HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 615517\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:09:32 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gcBrG1dTtuCRLAI5cF4PmLKMEq%2FEvkstQgTWKZeg%2BwCsU76Ehv1CYNQ%2B4E8D%2FEXsJIIfrcusEDC14Y7IJ6puUkk2kXv%2BW4e5FJ%2F71h5Yv%2FTadmPi0G%2FtSHk0c8by%2FiLOv8nR87ZkUyNsiQZPpOo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a48b034e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":615517,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1928 x 687, 8-bit colormap, non-interlaced","md5":"bbf29584d0776024734c5602029a90f1","sha1":"ff4bc4100479f7e09deee7e0918a6f1d507f231c","sha256":"fd561c2ed994232d8c3aba7b3ee7b8291c515a44469aedaff85f238624464dbe","sha512":"eb9af440eed935468abba7c686b63b817e33a246f05114074ecd25f503fe662f1506cef9216cfc29ff56d1b31ffe8ece62e834b483507ddfce60aeaaa1f927c7","ssdeep":"12288:ABgG80lgzEiLMJWOjBQBkEyTPRO0V/CWnAeJQZ69ElOvsVh2mmJ:W8AGXLMsOjBQmXPRO0V/JAsQQslmJ","tlshash":"b4d423c46feb14e62e3a2221258ed326d5dffa75b2700c551936ce4ab10f49447cb3ae","first_seen":"2026-04-28T16:58:00.86987Z","last_seen":"2026-04-28T18:09:02.967461Z","times_seen":4,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":219,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2F24_Coins94_4feff65894.jpg\u0026w=1920\u0026q=75","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2F24_Coins94_4feff65894.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8488\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: BE8ZfYe2BSfw8jqrO2NlYD9aGqrZbTqo3p1UWmDWwfQ=\r\ncontent-disposition: inline; filename=\"24_Coins94_4feff65894.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yX84iVUy2ktf9z3riNDYum1xFV5MS5X4ompIZPjo1VjI4f3hUaDu7INnyvbtkY8l84VXYAJdoHStljRaDoaORPi4FyBrPHsHhgxhblJ7b%2Fn8qdn4D%2BMT9wqOAjoqKJK%2BbMOqMnthXJHIuSgenvc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a4db0f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8488,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"df2f348ab2ea33f6bd3fbd72888d9781","sha1":"26bb267a9e2fff44e686b6852f9a7389a77a6c5a","sha256":"044f197d87b60527f0f23aab3b6365603f5a1aaad96d3aa8de9d545a60d6c1f4","sha512":"07dfecdc634d9b526d816ec7120bdb6f8022f4d5660c5394444007117e75afdd9c393c118b0cf158c65d5a2990593ee6e16f3bf2c81c1d1c06eb4d0f1b4e8165","ssdeep":"192:/ffwtFWUjvPB1fvOwIr/Orwxtr+L/P+0WiKl/HAsyDGp2Tv/:iTvpZOJ/OcxC/P+0VKl/AsyO2Tn","tlshash":"5f02b068e8f6c4f0c54716e7be8387b73a15f0943566efd0631015a4bac402653b63d3","first_seen":"2026-04-28T16:48:25.57533Z","last_seen":"2026-05-27T01:02:31.3578Z","times_seen":16,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2F9_Coins_Grand_Platinum_Edition_Scorethe_Jackpot94_712c2b3474.jpg\u0026w=1920\u0026q=75","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2F9_Coins_Grand_Platinum_Edition_Scorethe_Jackpot94_712c2b3474.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28844\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: AUUm7INkSyywUJ-zG86CM304FKVDpOW9iD2PAtijcqY=\r\ncontent-disposition: inline; filename=\"9_Coins_Grand_Platinum_Edition_Scorethe_Jackpot94_712c2b3474.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HMshsZ448wBb%2FkBCfyYpbUg%2FZyBelq5UB%2Bbz1ww1qTZuAoYW4rtnhLe82ckJK3e2wQbzbn3AFHbN7G%2Bn5hwZ4K%2BbhPiUk2zpxm0mzG%2BiinnHB72nsQBMpGf%2FioUBfOKgYfkpaQEIH8nsTQgAJqQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a4db104e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":28844,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3555702cd9fa0be319a607a9e1200bb8","sha1":"2091f0aa51446f4d50189b14c93865d3e30a1fe3","sha256":"014526ec83644b2cb0509ff31bce82337d3814a543a4e5bd883d8f02d8a372a6","sha512":"c40a42ed6cda05a376359d4e89fe6fd8ab4145ea384ed574b894cb4c79be4774b895b94a35715bcf4a019bde69f1e6d86e0a4c288fba338b61d0a943bd6bede9","ssdeep":"768:3YqBfSUMZPqnI24uZ7X+1gSsRi9Fk/YyKwWiU93+NpTROSVK:o2f+P723SsRcFiKJlAcSVK","tlshash":"98d2f1d52fda039d8ed6ff38dc8e9c616c9bc635514e048700a423babc46f6a7410adb","first_seen":"2026-04-21T04:06:50.967183Z","last_seen":"2026-06-02T03:03:20.673118Z","times_seen":49,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FBookof_Dead_7002cd4612.jpg\u0026w=1920\u0026q=75","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FBookof_Dead_7002cd4612.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11244\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: Fkyvjbmx83WKeAqDAdMizt7S4iJ2MrN3Am5NNE+O0tg=\r\ncontent-disposition: inline; filename=\"Bookof_Dead_7002cd4612.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pLtWQW9i851eRBXuUOXqIxcbvJ04e0lJbhW5onp5jt%2BYe3bI2fDjGEXRoXze%2FjEf834jPrKeHnyEHCcXjPqbrD2L9KhEJ6KmySuqU5CqwDcM6ojv6n519sogyhsqo7ERBfrTLbqS4lzhOsa%2F4eI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a4db134e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":11244,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"804bcadd88372307528c0c20faaf419e","sha1":"2f2151b25b923caa14b981fb43c390d317124e17","sha256":"164caf8db9b1f3758a780a8301d322ceded2e2227632b377026e4d344f8ed2d8","sha512":"b9c4080803b3f7137ab05281d2149b82334ab5bab06a16f49d862bc5c2b451daafd1b4ca406326cdd0f67974d15037a8603cddba3e2ef46923be60f8dca651f8","ssdeep":"192:q6x19xSDFXFoNkmWgwm5eFudCLfBoSmM4eax4H+sVwq1K7wV5yUYbJ/40S:q6x1rSBXFoNk1mMvfySp2hsV2AUUYblS","tlshash":"eb32cf2838d0f5dbe1be89b6191949b299cbd3843b2003470faccc95ac5ead9dc4db47","first_seen":"2026-04-21T04:06:50.883842Z","last_seen":"2026-06-02T03:03:20.691141Z","times_seen":51,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FBook_Of_Wild_9799ef365e.jpg\u0026w=1920\u0026q=75","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FBook_Of_Wild_9799ef365e.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38144\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: IGFXoFJjeR3J6Z5+lILkkDS+Pl9HqMP6BldHO50o+mo=\r\ncontent-disposition: inline; filename=\"Book_Of_Wild_9799ef365e.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uD77ssUN2JmwZ7Vlxe5fhkGaTSJmOmE0iCEOdYoZm6Vy60J7oN9BnpZpR%2FQzT%2BfcjSeBVxI%2B2JOvcL6KIpO2erwFGnd6CN5YQMPJcnmb%2FrPn4yxUlvlo0tWX8bKjiiDm813MrptYtqHlXlsKYYE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a4eb184e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38144,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"46d0dedf39197a1b50de24d521fba03a","sha1":"fc79420c48d14e53b9bc02f350bae512b90f04ab","sha256":"206157a05263791dc9e99e7e9482e49034be3e5f47a8c3fa0657473b9d28fa6a","sha512":"c0dee74b517e5a782c9b22244babe5ffdfca862fd413a826811a6d2525de23b3e6924e52dd0e0f16e73b0ba09d0cd07a15fe6d6d202296a92241ad22e6f0d50b","ssdeep":"768:ZbdzhU1jr7ef+F2/8dtsyPxO/1e/UFVgCoAF5lwZBJ5guuJ1Zu+Kxi:RDYr7eGF2/8PPxO/I8FVUtwfKg","tlshash":"4703f16b9f78c4e7c4ba047b9392f1fc5a640a043b3cd9a5d145ea3d7c29f662690838","first_seen":"2026-04-21T04:06:50.939916Z","last_seen":"2026-06-02T03:03:20.690724Z","times_seen":41,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/api/report-error","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"POST /api/report-error HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winoramacasino-login-au.com/\r\nContent-Type: application/json\r\nContent-Length: 96\r\nOrigin: https://winoramacasino-login-au.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":96,"data":"{\"text\":\"https://australianpotochek.xyz/JSqsJC?aff=andl\",\"domain\":\"winoramacasino-login-au.com\"}"}},"response":{"raw":"HTTP/3 403 Forbidden\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding, Accept-Encoding\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uPERr%2F28KWOdw7jlEZgrS22AvqPm3dNK20GmZKg7Q5QuW%2Fd68bmCUBhoH8XOyIKpwfkoJ88q9LBzafF25j3RmoUGL5LHJeAiq0pfSYpoPWkZsGHPBUwgcVWEZpFXA4aTf3jh6Y1OMB%2Bq2rwxgck%3D\"}]}\r\ncf-ray: 9f37f7a6eb8c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"9fe3cb2b7313dc79bb477bc8fde184a7","sha1":"4d7b3cb41e90618358d0ee066c45c76227a13747","sha256":"32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864","sha512":"c54ad4f5292784e50b4830a8210b0d4d4ee08b803f4975c9859e637d483b3af38cb0436ac501dea0c73867b1a2c41b39ef2c27dc3fb20f3f27519b719ea743db","ssdeep":"","tlshash":"2cc08c26351e2c0c96a322b402c36a50d092c3304c5a19004600420371c31168ac3315","first_seen":"2023-04-05T07:27:09Z","last_seen":"2026-06-07T01:13:56.375396Z","times_seen":95907,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/0IvxWxEGR5Az6y-ABf5gU/_ssgManifest.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/0IvxWxEGR5Az6y-ABf5gU/_ssgManifest.js HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"4d-19db519d13d\"\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ehg%2BOGPiqn%2F%2Fkx8S3CO1kDW6z5gf0HxUF%2BFzIXLCTbuzeUaKwvOn%2FQBWDpziBZoleM0iwHh%2BgRMurBPWSlAJ7s8zigPdCVd7HuD2tLBS7xUm0yAHiQOjxlXtM3ruFgVjNjWU83igiGKc9pLwJIo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f7a2faae4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-06-07T02:16:15.173503Z","times_seen":232219,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"89fc-19db519d139\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nxavfyrrK2fEfLCTCZbKwTOXb80IM5l9NhwgQkRVsogsier4D43I4Bx1yZ9Ja82slgjr9O6pDGpmPfr3Uxa%2FLjf9KOVS4PKSnRs5%2BKGe%2F%2BMPsVjr24n3DZeyMzTB54U0J%2FBJ%2Bh%2FEkOK09U7lQUc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a49b044e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-06-07T00:21:57.731919Z","times_seen":1779,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T18:00:34.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:00:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Next.js\r\ncache-control: public, s-maxage=10, stale-while-revalidate=59\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EeMZ6s%2BM9m%2FeWnXo31AYo1O4veYsD1wAWDgI9jVlduwpFSc3uXXDJI1yo8ugZs4i7UmaFe9nnAc8PWkHTJltcwh3QxzX1MgVl7QJiFgyXU%2F%2BTM3dYL34OnN%2B%2BsWVVnAg7tT%2FgrpEo3OOJbVeOzM%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f37f79f9a2156a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":89734,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63115)","md5":"c7c86722d7d294e092adb4a99cc00163","sha1":"166c209d5eafcd60d7f4120cfa242bdbb6984793","sha256":"2dfd56167c9991b4aa47fbfc3101ab93a3665e64bdae06114958b3f2b72d0945","sha512":"d20cd57c7d697f0696f40c51a6c09739bc7f7bd685969cba35af61912743b713bd940ba177a059976049f44cd59cc418349ec33e0baf5a6bba5f9bb1124e93c0","ssdeep":"1536:zIoE2SKA0scvpA2SzC7aRLFzgAaUkVWgsjIbk1vrwd/E7MIoFfgyNeJb6Bo:zjr7OF","tlshash":"c493f9a29184dd13424f89c2f82bd68e96cb543ae3658ed47cbc89d5e7cf43705b2263","first_seen":"2026-04-28T18:01:02.791103Z","last_seen":"2026-04-28T18:09:02.933092Z","times_seen":2,"resource_available":true,"data":null}},"time_used":382,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":346,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/css/352d5236847d301d.css","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/css/352d5236847d301d.css HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"644-19db519d13d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ngVsRbMPBHni%2BWlIt38ddATCXJCVrSop5Du3gGEv4Di9ehPFzGaP5htGIxt5cDso1%2FQBHktwoEbdctVaybghabvIGofTY16LayE8NG9GnOksk3YDHoNQZHd1%2BiMowcZZOP0nbPshEJGgNgAkdE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f7a2da8d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1604,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1604), with no line terminators","md5":"d861c7ab0c20ce2a7a153e0a29f1f60a","sha1":"fc6bd3dab3f134d21c58832d9de3f830d62f1ec9","sha256":"4ded20bf9809d391e7e962e1395b3522283ca30f52fe7a86155d1d5b4b3789d5","sha512":"0f8ba9f03c97e33b8a6a9c2cda9bb1a130f8e2b72e70254c382de16ba63d39be6516245f7e740cb52a947fb85c32939217c29b9d982f330bed19c438322db91f","ssdeep":"","tlshash":"0a31bf1195c2af35f9bba4a95fe0367f7816584887fa0ddac2d5f35582ce0d2831c54c","first_seen":"2025-03-27T03:50:55.637284Z","last_seen":"2026-06-02T03:03:58.995344Z","times_seen":268,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/927.a7dc7992c436ba78.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/chunks/927.a7dc7992c436ba78.js HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"a0b-19db519d13d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QEG4dzLBAbxoF2HfYNrJN2%2Fv6JxQhdhGVmoIS5J5hEafjzAdhdNZ1cbT70q594yngdEdFzQ5lVdkDinEPcUYmcqYbreYpADcNFhkOdUJnnLBVCi0t2EL5SryfEN8uMTSfFzWi1whuBOVirsEcZY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f7a2da904e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2571,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2571), with no line terminators","md5":"169204fe2bcc42c380af5e1ac2be7fe3","sha1":"8a03ce5223655c895c434033b81080a819fd917b","sha256":"e77204d4fe82687b08d2c78d02e066935c1b0c697a95682b12decbf3776b528a","sha512":"d47937c3eca1582d992d537eaccc779735e73d5450fdacdb27f801abff617ee8dd60a5fbdbde063b15a402746facd53cf439b115e864099f1c7537b218b3aed3","ssdeep":"","tlshash":"905131059986fdf9f9ba0cc9925fd53e762eb40f990c8da8fa7488414c098843603be6","first_seen":"2026-01-03T15:12:30.935058Z","last_seen":"2026-06-02T03:03:58.989391Z","times_seen":183,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/webpack-09feb7917a7d7927.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/chunks/webpack-09feb7917a7d7927.js HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"1750-19db519d13d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eBVISTpEywusLBzrahNr0qOAgTWS4EQpR2RFwF69cfDwMv84YZnZhJXr6l9BvjSqZFV3lUlBqLtBgWEttwVc9Ha1zWeSsqFo1wkHF3g8viPdK7ESjuYzhFivfZ4qHO0NUS4yMGJ%2FuICQ3C9YimI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f7a2eaa44e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5968,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5968), with no line terminators","md5":"06bcf4e362aeda89177500c54e5f3060","sha1":"5920306ce9ba0001caa97f43458dfa2d05e1c57e","sha256":"bdc7ebbe8ea2d35f9ffa585e368a83ed989e00c162758834131faf9552274ce4","sha512":"68b46a466c20515ad4800be2dfd87db234dd7182f059eab8dc0ad1590754aeed9840359b8bfc6304ea2c157e351f1364897402f3058f4ca30a6f54f4bcd4a642","ssdeep":"96:6IAgDpEzqynRRvEKjmvFqMug1kkNxNF9VTlVHO/jeE2UjKBOK6nRVG/OGfIfRY8q:64GzxnjvEMOFLBkQNF9Xe7jKl6nRVG/n","tlshash":"f7c1c79e72a4f8b6164365a4493f909af17e207b781ed0b0d70ad9b4bc349688533fe4","first_seen":"2026-04-28T18:01:02.793272Z","last_seen":"2026-04-28T18:09:02.926927Z","times_seen":2,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/framework-10ae643bd7ba2303.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/chunks/framework-10ae643bd7ba2303.js HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"226d5-19db519d13d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EOKddkvUYHOkvzcxixAMe56UF2mMG2Mw7Iu%2FqJt%2Fa6RYf44TaikyHH9208wZZjmcIKuHNgqeD%2Bk7g6VDQQfaN22k4Xm3MfKWg7YCwFRAo0rI0GO7ADe2X93rFymVAiq%2BwIeQ9YX95SemCIbXc68%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f7a2eaa64e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":141013,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65202)","md5":"91eb10e0c5b60f80501425850b7ebf82","sha1":"8344750bc431fbb9e8a5170a82d08c7664639609","sha256":"4c185f58731fad68b5e3ef26e102ce9b3cb56aa8257d39aead25b675152a339b","sha512":"bae75fd66f5ebfd2cd4b3904defe212456502a8cc1ab092c8b58605c6bdeba1d9fc2fa0200ba9a6699df89af547ba3d51b8783dad8061210ad62f240b6ff18dc","ssdeep":"1536:2YjvmNg6kMuR40esfdznYBSq6vvnwGzQ2N0mIQa:Djv4hudzno6nwq5a","tlshash":"33d308e87996f6516ab311a700af2803733d2a1b280c4d60e215fd9e75b841bb17bfdd","first_seen":"2024-08-19T23:48:37.498483Z","last_seen":"2026-06-02T03:03:59.000906Z","times_seen":287,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/pages/_app-bd4bd75476c303c3.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-bd4bd75476c303c3.js HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"7722a-19db519d13d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pPksWD6lCQh5vH7ZMFLcCTRk1gjduYEs9UGApMEXATZUIIYGq%2BK%2BhCqrsu8vztyJ4m8uYtJYx5rrWi0IN0tNkceLWgj87kbAneYK8fYcwfx9y3mJH401e%2F8vI%2BNWx%2F77bGsMVZUSFU60n73aSP0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f7a2eaa84e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":487978,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64562)","md5":"ca1d148701b929b16bd162486f51280a","sha1":"8af765f82997fb24661c720d3c2aef2b79a1e1e7","sha256":"43d0ebde82b22582d91d55a63461d4a9a55a7bc0eeac5ddcb22b3f04d56abaa8","sha512":"b68e719d5b040fcf496f87c54e297608fcbc45c3d876310788e40a53d706850937e6b16828c3a5cd20b256f56e8991f27be9b82ba4c075f78c5d4c9bf93a2770","ssdeep":"3072:ii1PkPUKsWkG34HtlYw0kn5DU+djxlozNm8ad6/QQX+uhuxOEowsB489M4cJkcx2:iiCcKsRGI3dCadhQ7wfNJiRs1+HZ","tlshash":"54a4f7d97282b062839760b6847f010af33e6a98240d802cf6add4db7f7564d9277f79","first_seen":"2026-04-28T18:01:02.794812Z","last_seen":"2026-04-28T18:09:02.959431Z","times_seen":2,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/media/9f0283fb0a17d415-s.p.woff2","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/media/9f0283fb0a17d415-s.p.woff2 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winoramacasino-login-au.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 21336\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"5358-19db519d13d\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IfPCRqLj7ZQChtrl2mxZCL%2BSSXxENaBQ9HQwGzOZHXEl4yZTVXtuZPqvWWOTPojgHd9JiaMaEKsGrx2%2BiTdJt%2FKNpbtYOlxH4FK6T9t0LLYi8VW4npOXQ98IPCn7ioWGKH8YYTK9Y5wJVQSKQWE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f37f7a2da874e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":21336,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21336, version 1.0","md5":"0e35c6fd40c2ab9ef2d5b97baeca2f2d","sha1":"781b1852315aad9bcf111a3017ca734ab6dcd6b9","sha256":"07a6f958db51de42694ef87e2c01b9cf5ee415047b2fd17ab1c313c772a6804e","sha512":"7f76da76841e131252106ff1d70e22908753364d612e9b807d9332f89b13c759b1b9d05ac5983055b48bf99b441a2a07301db2c93fbb79323e492c238df1d7a9","ssdeep":"384:h9WnIiwq4BeuEc4AZTT4ZWgC9UCzpulxbC9WzQFvCY98IW1NoTXVY23sC6:LWIix4BayT0ZMUQpulJCuQF6IW1NgP3O","tlshash":"4ba2e1080f4b3a18eda72c8972acb57498741c208f8ee2770cd42859365e652fe3fe57","first_seen":"2025-10-20T15:26:06.98799Z","last_seen":"2026-06-04T14:06:59.774258Z","times_seen":269,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/css/dd79dc2c5a9a9197.css","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/css/dd79dc2c5a9a9197.css HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"a112-19db519d13d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0PrBX%2BltADyeYKZ%2Fgwh6DniGKQ1GQfZnJtgfgQ4Yi2z1JtEVx5RrT3%2BR72FYUQ2fY%2FHVnCTs9b2dcu9X2YiSWRDpjveCeaPAxta4yvEHZllv7RqlOUf3qFRlGoihiWDd06mnmWoFaNq9zdFj8Qk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f7a2da884e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":41234,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (26798)","md5":"93e37c199f0ae59faefffcafacc5f00c","sha1":"a18665363dc58467e599d2bd59c1d63443bf8902","sha256":"d91a05b2ad13ad076307787468b87cd94e7dec4beefa460fb9b6c1e13473ccb5","sha512":"22f1cce98b2a8190e8fe8a83f883915899f1eeed64ebc5006757b2e0bcdba68ac5ef53f2f69439648c2dd3a9d58d0cce4585b5e5b79516718e9e2e3d73959d28","ssdeep":"384:gi4OZg6oxkmT0Ew2zXf0MrREq/XisHZ7aVWMMqLswaDGvi1vPTnx6G8S3yvVQW78:f4OZwQ2x8jeDqeTnwVA","tlshash":"4003c921e619702dd8fbcc6732ca7f1766184402f5950d69fa1b866ccecb9271b93bc8","first_seen":"2026-01-03T15:12:30.994041Z","last_seen":"2026-06-02T03:03:59.004085Z","times_seen":256,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/css/3bda6d4ca9304bde.css","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/css/3bda6d4ca9304bde.css HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"dc9-19db519d13d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zVzxyMtbQujb%2FMy83b%2BSAyW94s6QpFF9%2BmCy%2Be3vE74htim%2Fdgby29L4ylV1n8k9H6%2FRcFDaTWZ4z2AFZq7gG0OviZ3M9zo2MzItwmY4%2Fepvxyu7U%2F%2F8qsObFHzQx%2FsgMfKfoeQhecOVNUvCPHQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f7a2da8c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3529,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3529), with no line terminators","md5":"01ce09a5b03cf044607a0960b19ee68e","sha1":"77ee0c8a2beef0412c1bf25560a9903a8734e9fc","sha256":"460f6f84ac47584af249e7525a01b93aa6fa2589abd99b25861058a10c5ced23","sha512":"428ac46d7d2015690eeec14942ff4a4220d01f83188ba00d1338949b73d9b25f4c2dc8aedb1ff247a20b160dc4847a4e89768245fa3835d1b1a47e5283a60848","ssdeep":"","tlshash":"1471f21a2e9e7b186cffc81765b26748236cd409cd1712a99013d76e49cb3925bf1b4c","first_seen":"2025-03-27T03:50:55.673324Z","last_seen":"2026-06-02T03:03:20.673599Z","times_seen":213,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/546.767fc6323cdbff4e.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/chunks/546.767fc6323cdbff4e.js HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"948-19db519d13d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F9wAanhjKBrMu4VINKbNXyEgYQ879fHm7pCgQSmuJN1Nj%2B3rV29f2367K%2B1FBz7%2FoNoI%2BcqPLM7mRTDkTy65B3HCZ34nzVWxaHxFSh%2FP8zBnBsL05j2TKfvHr3buMQURBKhrFVNme0s0DO6YrbA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f7a2eaa24e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2376,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2376), with no line terminators","md5":"3dbc38029da6bf4e8577f4ea86070313","sha1":"ca82c27f54ccb29ac2c9bafc04c6daf8bb697fe4","sha256":"cf8e5651bbd6a6c3e0b4ead08245c2038a435f51aebfedbeda73c51e16f8ebb8","sha512":"d111610f37cdf70f5536f4072a26b0793c7c03d0255cc14ffa6a791132b186d7947a57b54f5359596d682538075e3fb42c2bee26aa8690b2b7fa14852f3798fc","ssdeep":"","tlshash":"e2410244f0d5ff60a7bfb0f8866b5466a22f294897980c92f3e2ec4d145028c63b36dd","first_seen":"2025-03-27T03:50:55.681244Z","last_seen":"2026-06-02T03:03:58.995982Z","times_seen":268,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"89fc-19db519d139\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IQRVIxDmHyp%2FEjkZZJ2T5VsMOoXVqBypuMQlgEQu7EpjP4dNsV0ak%2B%2Bzjt%2B73N7bt4F5D1CO%2FxMpEm6JnPheOinOBvoVtjHvRrCxneljRjEiqtFkG8XlDaQdsUzlXgiy3fKpCGS5uCf2v3fp740%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a49b054e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-06-07T00:21:57.731919Z","times_seen":1779,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"89fc-19db519d139\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PcoR9OgQRaDwpyPRQjFO3oOnBE5LbDAH6E8viEYTqgG4lblGK%2BlO4IkN3KluGdhcxCOl06E92ydIsAyTKLKJwZAcjTZbnzdlPcqm7P30Ha5n8RQ3JPWa%2BEGtGHCo2WUOjoI9YVgilaOzgF1Usig%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a49b064e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-06-07T00:21:57.731919Z","times_seen":1779,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FBig_Bass_Splash_986d412b8b.png\u0026w=1920\u0026q=75","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FBig_Bass_Splash_986d412b8b.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33966\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: vx-GOeybNjw6jmk8BM1U-tmpOTiXZCh8+E4MMpvlVso=\r\ncontent-disposition: inline; filename=\"Big_Bass_Splash_986d412b8b.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RAWGTfI%2BGRwCm6tCkAM6i6oEB2KZcoYuYxuggxpx9hEvkOQ7iSg7tyKmQkEScZgbQa%2FYennywoCCZCmOm0%2B%2B%2B9yeXGsrcOaUYOFRrX245f2S0PxBSRiJD8LCiIzMx1mhyLFjgsS%2BwtiNeFn6w8g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a4db124e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":33966,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"523f28bd8a43d9dcd8b1fc82e96f9741","sha1":"b8d0b464581c18f885be95dcc8c7d278a1949e60","sha256":"bf1fc639ec9b363c3a8e693c04cd54fed9a939389764287cf84e0c329be556ca","sha512":"6f9259319e1b169e378701eba81405316a976ba18c5da82c399244a7b680d4669a8c259920e04003d296b88758dcbca0e244531e5ae113b25c435cd1dd065c12","ssdeep":"768:9MH5gbguadbmqV2eLXkK6+xDHhqIxyoK6+t2E/LRdtpKCSSg2/atcZ:9MH5gb/UV24lld7c2EddtpI2kcZ","tlshash":"93e2f141903b80cf7e618177f3a0276f123be924f9342e2e1969eb8dc57db714974616","first_seen":"2026-04-21T04:06:50.950193Z","last_seen":"2026-06-02T03:03:20.686735Z","times_seen":31,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FBookof_Fallen_aeff179720.jpg\u0026w=1920\u0026q=75","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FBookof_Fallen_aeff179720.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41918\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: oA0E1HmUC9-7utbvGnNiryK0f7mFgYV8+TjKjuLPFHQ=\r\ncontent-disposition: inline; filename=\"Bookof_Fallen_aeff179720.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2BwQo3F%2Bzvi1%2B5JaTvV4yS7cvKky8XpHa1QHWagNX6SX6c99UNy3sdIGx39ans5%2FRMl7w5KUhGv9DYwwzRWi2pehaIur9hPpyPFgHi4Vzdf8bup1wFY5fjjz85dEZFOu1OZuWZJ57urSseWy6fo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a4db164e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41918,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"06737cbb0f967bada8d4cc648d887b6a","sha1":"32db7342395650e4059cc3f0feefdd8e307c6980","sha256":"a00d04d479940bdffbbad6ef1a7362af22b47fb98581857cf938ca8ee2cf1474","sha512":"10bece8d4231684d687ad2d4245d83d3aefdcf7e5807eb07a7556dc29568135cdf74bd8163cc32fd8382aa96314d136c90f6f30427ed7d2f33de58e14c2487c8","ssdeep":"768:LsP4r8la7oHPkNdCMMCaCju+VDbIBiCkms5VtoBa8EcHxST:Lsw4lcovkNuCaQu+VD0BiT5VK3DxG","tlshash":"8713f150fee1df6e4cab905af8e021647b5e4edc8c8173d698dd42be056a23b2305c97","first_seen":"2026-04-21T04:06:50.951458Z","last_seen":"2026-06-02T03:03:20.676955Z","times_seen":43,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/css/425cb6e228741817.css","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/css/425cb6e228741817.css HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"eee-19db519d13d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fr4nnEIULvA2h3J3NT8o%2B2xd4Uxcu12CE9TkmUVJ97Eudd%2B8W0Oc3yNZtFMs5Fcy7rDOIpuyIT9DYqOMzSdltMDazujKXVc2QYCjkcV7dl%2FoFQkB0j5K6cBpXytt9rbBCBpAD7varg0Ti%2Bwn%2Bvo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f7a2da8b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3822,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3822), with no line terminators","md5":"18552a6e17838c46016a53e9762873c7","sha1":"3dd15aa95b79296b2894bfbd8fe4a53911f694d4","sha256":"66ecf375917e5eebcf9959e90773c31eff8f779803c5493fc5dd3760600542fc","sha512":"e1e0f9e0f622a0abca95b0eea21d599f23df0abf4d7e40bc5a85c69696ff5c6c97db03271d826ad105410cec045c6f279b66ce0ab29b9b5f4e29065d0265c9f8","ssdeep":"","tlshash":"a371f03a4fd0d438f4eb606f6ba2946d4b18c442ea275bdcff12d82bd1cb3d60562589","first_seen":"2025-04-29T14:40:21.773905Z","last_seen":"2026-06-02T03:03:59.010214Z","times_seen":175,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FBookof_Ra_af0a5a0b35.jpg\u0026w=1920\u0026q=75","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FBookof_Ra_af0a5a0b35.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27642\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: f6XDS5vynTYpfBV5K6IS-O2Pyrfie41pl+zcyUWwojE=\r\ncontent-disposition: inline; filename=\"Bookof_Ra_af0a5a0b35.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u%2BoEN8DlMd4yTl%2FIWXvP5y0MQ2fz6%2FB%2Bii%2FWzeMYDhYu36Mm%2FiXWGee78Wykd8Lanx782moOHAArZPAs3X%2BX8gph8k4SgveVKvE0DCdcoSYeYYsTnQWt9z5ivbu3SAnkReKdbq750pX58dWI7Xs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a4db154e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":27642,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"95cb40dc05db9fe9b99dd1c9adf29a86","sha1":"0ce0870e51daa65dd2a1b78070cc15469f5b4328","sha256":"7fa5c34b9bf29d36297c15792ba212fced8fcab7e27b8d6997ecdcc945b0a231","sha512":"3aba2053315e2a74fafc925b53ddeb435c5c1503fc588e017f34c0a022805129552ee45475e5434b6df448c6e10a95042c953a58ce9a29e6d6e3e18e2ca28d99","ssdeep":"384:BufHae6X3HjEt4JlZlmcJmd/PVW3dMV3FcNLKfyJHRVRNwetJqVVvSEV0nCLpgvB:BsHUDE2CcqtE6FeLK6/QNSXnCLGvI8","tlshash":"eac2f141be32dcc5a821995e7968d7d80abb9343b3c471b8dd834e2ed42461bd4daa48","first_seen":"2026-04-21T04:06:50.903509Z","last_seen":"2026-06-02T03:03:20.666339Z","times_seen":35,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FCash_Pig_884e26d32a.jpg\u0026w=1920\u0026q=75","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FCash_Pig_884e26d32a.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39754\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: QrFybeiBA8OKtJ9I2iC2Srbl9JFwmy5MU6QR3Zne+N0=\r\ncontent-disposition: inline; filename=\"Cash_Pig_884e26d32a.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LJCKYPh2Fq56Pr%2Fr0PCjTnPWSP%2B89Avu%2FfUfp2tMyFoPNQ8z7uGBQ9uu77ANsiXjLFV%2BUB3i1zh3OFcJBl0qF4SjkyGXA36SLU6SkTBYnZPAXuJUlso8rjFZMt9upaschtRk3Vc6awIh%2FPJzMnY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a4eb1c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":39754,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"43328a32542a71532480435e3bd966d5","sha1":"a34e2e4f26117346a981f9770b02e46423ca81cc","sha256":"42b1726de88103c38ab49f48da20b64ab6e5f491709b2e4c53a411dd99def8dd","sha512":"afdb0ad55d3aaaf4233cd28103799ac5452b7ef9e25cde7d02f022d94bf846b1151354050a48221d26f9ebc4e55215c47d269f9324fe5b65afa940c595ad0039","ssdeep":"768:LUenidcP9E6gleInP5AamZTxA9K9I0VCsYdOM+L2itFaoHHqsAeT3bhZpxk3Sfx:4FdcW6gh54+V0ksWeJasqVeT3bRmI","tlshash":"6803f2193122b853d6b27237faca04578a3ccbe05ea98a730342b7f7705e250f623599","first_seen":"2026-04-21T04:06:50.961352Z","last_seen":"2026-06-02T03:03:20.691643Z","times_seen":49,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FElvis_Frogin_Vegas_424330737b.jpg\u0026w=1920\u0026q=75","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FElvis_Frogin_Vegas_424330737b.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12488\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: NtxTrUf--yVY-SqbSetFxNhuLZPS4IYUaTT4tIo2k4k=\r\ncontent-disposition: inline; filename=\"Elvis_Frogin_Vegas_424330737b.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4yb48n68FPFhOLkJCwCVPvTUmrBpPlc1YcQNbrSlHAkg6o0%2FR3E%2B1DuZxiY%2BczYskOsAo%2FQgZgPpzhekh6F1PEg5XU9szxA0Ylwd9%2BqAeLeLXgYId4F7SkGpPHaBwqc1TeLD%2BKXIw45OoMLTAgs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a4eb224e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":12488,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d2982d843aa4e4aba60508c1fd834030","sha1":"0938eb60b323c809ab2a0f6b08550a51b00d15b1","sha256":"36dc53ad47ffff2558fd2a9b49eb45c4d86e2d93d2e086146934f8b48a369389","sha512":"e543ee685367cd4ff4a2ead1ed1383b80713245ea0d9711bb08f4e89cd1cb43873303033781e5d6e6e567dedacc29d0086e8b42795733bd611d5f34a6c4fa783","ssdeep":"384:pGnZES/Ni1PX/u+NFibJWBNGLqIpPeCocwHaHRADsR2:pOQu+NyKjrBUeAw","tlshash":"7242c0b03558d4fe81f58581df0e62572bfe80d019b2aff009319262e96e7d35356586","first_seen":"2026-04-21T04:06:50.887873Z","last_seen":"2026-06-02T03:03:20.697078Z","times_seen":27,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":258,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/uploads/fav_32h32_1bdad67144.png","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /uploads/fav_32h32_1bdad67144.png HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 1932\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:09:32 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hdDlL7bGv46Vm56nznqWGsrwaQUZ0kG3K2BD%2BeFm2F90h3NMYG2xRQXx50iEs2ZkX3Z%2BDUAB5EGFop3qdGou4sGRdLrwBpaMwuzj6bxdHm7oH1VV1%2F0d5hunByFJ9SY9BnVrbq4s%2FzCCBgR8HCU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9f37f7a7cbd14e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1932,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"abafa7635f873f17a61ab017cce2c1ef","sha1":"21b986da8d04fadd458c988eb4898c522b922c3b","sha256":"90d984b4159a7229148f1215754327c25d0f254ad6d241c60414dcf0f0148134","sha512":"3609cb994392c24483d7710a6faff06b65c80881a46cb2e8b1bca4efbbaf89e8892fd15cdf2c873214c20bec7491b16b262b3e3315881ffb76782060ff9fe6dd","ssdeep":"","tlshash":"3d41f9b2665487e9d406ccb6ccd3ae316f7623443c65501d6195f2d53f81bf5d80835b","first_seen":"2026-04-28T16:58:00.901125Z","last_seen":"2026-04-28T18:09:02.938803Z","times_seen":4,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/4.26aad75ddf9b4222.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/chunks/4.26aad75ddf9b4222.js HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"1d8b-19db519d13d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yPEsWBoMloheQP%2BoCZwsGfzHerduhMfjX9MNz%2BgHEqLQ2BkfGVxK4pvZqv0XhRl%2BlBT9XXTGcuyTST%2BWIO%2B4EUJ7OBh1VlN6jjc9d%2BG4%2FL%2FHANUlsQLMb7e1lGBvBRMr2KoaiUcYpI4eBGSdt3A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f7a2ea914e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":7563,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7563), with no line terminators","md5":"c3bc2d4e5737225ff95d32b21a827359","sha1":"d0f3690f0ff1d675ab999b9cd2e1a74046329a94","sha256":"d06a8631bc16208ac703b238065a6c4ca001b41c1d7673c8702b26d82b5fa123","sha512":"d71a0d54b36d2914ba832c6897e23e49253fe8177f9489ebb3d7d78b5d7ceef17dda62b7627d28945aa442e4e496bef22007589211573d50888ab0a9399c8f30","ssdeep":"96:9j/51t+HabFphGV+Qm69Byph/fXkJ+6cRK1A41ATjYnd77Sg1E0sX4l:z+UhjXBAbhnl7Sg1TsIl","tlshash":"d7f156c1e286bfb5a9bf58c1413f850d772e290dcb364cb4f574a8025590ce8b1a6bcd","first_seen":"2026-04-28T18:01:02.802185Z","last_seen":"2026-04-28T18:09:02.972195Z","times_seen":2,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/static/chunks/pages/index-67c545f8362cb3f5.js","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/static/chunks/pages/index-67c545f8362cb3f5.js HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 22 Apr 2026 12:11:01 GMT\r\netag: W/\"33c-19db519d13d\"\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sgSLBMLpv9HpXejeeYkUqRGjePEnsk8F33BwOlyUEmVC7M2L9ST8q5wqzBuQhnfFQl8KkHB2mq1DEK387zsdFcFirqevCGAz%2Fcruf5YNmyp5ouKdAWDGWrG83r6CIJxf%2FIRSjlDPyPqTb49u6zo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f7a2eaac4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":828,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (828), with no line terminators","md5":"045dc07f95969c2df33cd4a214e83717","sha1":"b89af6510652f59367921b09cf4a68bebdb27dcf","sha256":"9d8c30be80230957002ab1fdbc8babe834fdefd49204879c1e609a5491fa05aa","sha512":"76205eb0e13934fa7b15710243ed9e6da746e20ff36b77dbed304ce80c27d6c9bb9ee005c6be3125aec1b75b9ebde613fe9d54dafae5eea366e872085eb026f7","ssdeep":"","tlshash":"18011298b493be086b2750f8462f310e63be795e153e49a0b25284c83af231d1a91fcd","first_seen":"2026-01-21T17:57:31.276517Z","last_seen":"2026-06-02T03:03:59.017415Z","times_seen":251,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FAloha_King_Elvis_a4cb15b56f.jpg\u0026w=1920\u0026q=75","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FAloha_King_Elvis_a4cb15b56f.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30310\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: kWXQw2Xq7In5aN0ReCjDupCQcaTzu3lRGubBbftaCkY=\r\ncontent-disposition: inline; filename=\"Aloha_King_Elvis_a4cb15b56f.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=18j%2Bsos%2FCcra7SsuRfKguEdyoOCWwYm9y328Ip5ZQWx6gZ4hTZLEFlGlQTdyFwzBONVPbnQ7FSEVLpb1dFrTlZvBOfaaWfpgb0IIjU3lsO%2BkLO1wYK8XxT%2BzQbZBSk3iKdlCL%2BAU6c0FMfKbApE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a4db114e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":30310,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"72dbfeed4491ba8753cbc1ee5ab67192","sha1":"071e0b29bb4056314024c0f9ab06e17ab19c317c","sha256":"9165d0c365eaec89f968dd117828c3ba909071a4f3bb79511ae6c16dfb5a0a46","sha512":"f32ab54932d7db60a53197cba4360906967897e6d02a1854b56017e1870613ac243da680dd3fe47cb6443a66ff6f18c2d3084bcc53ef8fac2c4aae65c8d79adf","ssdeep":"768:0cA9S1uLyu3yS/dO6N3fXNJZYESLXezZpOFU+E1dZDasz:0cAEALymyudO+9J5YXkO21dZDzz","tlshash":"7ed2f1d698d257d86ce9ecc0ef2749d0ee451fe9ee27d7e0101e099509bd2e9a0bc4c2","first_seen":"2026-04-21T04:06:50.902485Z","last_seen":"2026-06-02T03:03:20.695664Z","times_seen":61,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FBook_Of_Tribes_4967f6a6cf.jpg\u0026w=1920\u0026q=75","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FBook_Of_Tribes_4967f6a6cf.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59236\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: 36atXE+dpfBHnzqJ8faGmMJZBxD77mhrhzGbW3ezGGk=\r\ncontent-disposition: inline; filename=\"Book_Of_Tribes_4967f6a6cf.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j4CcrqVxCoEJ8KXVDPE0kbz4LQG6yfpcrYzh9X1XjaJ1NPaBJu3vcqmgXcAPfAxnuvg3OZiAGCHcIwD6vb9kErGaUWdU67F3b2d0r55Nn9ztXTeW9%2F8xy3c%2F4pgqhrg9gE9LLnnjObwwtCru6Bw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a4eb174e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":59236,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"271f2bf57b8e8209121e8d6ecac0be77","sha1":"a36c73aab18a890fa3747f10c23fb5cbbc5c42d7","sha256":"dfa6ad5c4f9da5f0479f3a89f1f68698c2590710fbee686b87319b5b77b31869","sha512":"f16602109097308c324d1c26e1dfb5e16f203400eccae6911a842dbda2ed5aa6286574cc8d88a0002a59ef99922962f5bb08806228943b00bbfa62888b16daf5","ssdeep":"1536:ydoQ2CvfKHyrnpFvrD/6gISFKeFAHAb1oNrlKG:MoOfnrnpFPNFKzAyN9","tlshash":"184302bfd5464b70b48d9e20840e5f270150c91fa07a592dcaffc5885babef531a226c","first_seen":"2026-04-21T04:06:50.936342Z","last_seen":"2026-06-02T03:03:20.674657Z","times_seen":51,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FCoins_Of_Alkemor_Hold_Win_08f35872c6.jpg\u0026w=1920\u0026q=75","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2FCoins_Of_Alkemor_Hold_Win_08f35872c6.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37024\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: wfo1rKqPFVEG4HZW85km80ycIjjluU2vmmA-Me9rEz8=\r\ncontent-disposition: inline; filename=\"Coins_Of_Alkemor_Hold_Win_08f35872c6.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AESWy7LSQojrR5a1rV8kdsjdyVpUfP4yILTNPsKyyEUDkJbK7d0pBNT9icKK17yAwJPQiaHWYtI00IA5KOeXgCglhpFH1zBC9xYJmed8gyyRUUMcskuW1HIoC%2BFYwHGm%2BCQsTZ55%2FfCGrnKn1ME%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a4eb1d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":37024,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3898cc399f5ebaecdb8189e24c5984e0","sha1":"fbfadd52a604d1bba467e5c73ac48bb4df8fdaee","sha256":"c1fa35acaa8f155106e07656f39926f34c9c2238e5b94daf9a603f31ef6b133f","sha512":"b5b2b0124a750789c3bf923a814639763971bb37b1f4ba2851c032b5cea22262ace787d65ed83c41a77265e26ba3b8c498638f9ef919fda9ab66ebfdd68627e4","ssdeep":"768:EywpE/nqmT4lu3CVi19e4TI23dMyJEPmgtTdgByZLCb0SeboAX:KpE/qmjCV+9zT5dVQtZLCxiX","tlshash":"fff2f24038cb1d5250691ba3d5de979211cd08dfe64d4193d24f11c6ceb2fe9ae5f4b0","first_seen":"2026-04-28T16:07:39.059095Z","last_seen":"2026-05-27T01:02:31.368643Z","times_seen":28,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winoramacasino-login-au.com/_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2Fcoin_lightning_d099fde8bf.jpg\u0026w=1920\u0026q=75","fqdn":"winoramacasino-login-au.com","domain":"winoramacasino-login-au.com","tld":"com"},"ip":{"addr":"172.67.167.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://winoramacasino-login-au.com/","date":"2026-04-28T18:00:35.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winoramacasino-login-au.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 11:11:56 GMT","end":"Tue, 21 Jul 2026 11:11:55 GMT"},"fingerprint":{"sha1":"32:B2:64:48:E3:F9:33:72:02:5D:1B:34:45:7F:0B:25:F0:9E:CE:8A","sha256":"DA:2B:6C:BC:A7:2E:9F:F3:49:A7:51:7A:C9:0A:E1:52:30:4D:2C:DA:7A:26:EE:E5:BF:A0:4B:58:95:ED:CB:D4"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fwinoramacasino-login-au.com%2Fuploads%2Fcoin_lightning_d099fde8bf.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: winoramacasino-login-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://winoramacasino-login-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:00:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9564\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: 8HMORHimZihM8h2LvSN2pPnOGddzntBUs1TOFuOI8so=\r\ncontent-disposition: inline; filename=\"coin_lightning_d099fde8bf.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h3DG0sHTmStPUMjqhmOhC3WOFfCwmn%2BVBAwgVqIBGXl%2BiSIWfSmAHoNajOgaIYCgSnwsthmXxGDoFyJnnVZ%2Fy2%2F2ys92wMsqTy9m3RhzuGNEFQvW9GKcqt4DQl7XS%2Bw6dADd4tdZ3i7I4%2B2SuHQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37f7a4eb1f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":9564,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e367204f0ba620c2577bf864bb3534ad","sha1":"d65f7e8d562f4d5da8f41a891fe092de68c0f0a4","sha256":"f0730e4478a666284cf21d8bbd2376a4f9ce19d7739ed054b354ce16e388f2ca","sha512":"1b127a66f31f879fbe0b77022ef5f2bf1e5df40523c2e5fec511e0fe4f1efad2059e9ae35d3674049c4bd5083bf5aeb2897f521b699bd2638cc3df435949465f","ssdeep":"192:AHfGrXXBadcOZ09hpGog6d6gD4+iqb4aQ1cM2M3VNhoCNmJe5LO:AHIXBaW9ha+74a+cMvjhoCoJ5","tlshash":"3212bf42e3a5e7bdfa287ed45ca01304ee50a73cfcfeaee69595998c15261b0210f0f5","first_seen":"2026-04-21T04:06:50.941611Z","last_seen":"2026-06-02T03:03:20.66889Z","times_seen":39,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"winoramacasino-login-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}