{"report_id":"317b49e3-d151-475f-86a1-c9047f41485b","version":6,"status":"done","tags":[],"date":"2025-08-29T16:04:41Z","url":{"schema":"http","addr":"gamacasino413.com","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":0,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"final":{"url":{"schema":"https","addr":"gamacasino413.com/","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"title":"Gama Casino"},"submit":{"url":{"schema":"http","addr":"gamacasino413.com","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":0,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-03T16:04:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"api.gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"code.jivo.ru","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2019-03-27","domain_rank":437705,"first_seen":"2022-03-30T15:10:58Z","last_seen":"2025-08-23T02:35:44.556756Z","alert_count":0,"request_count":10,"received_data":1766784,"sent_data":4637,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.gamacasino413.com","ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":12,"request_count":12,"received_data":111485,"sent_data":6710,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"agstatic.com","ip":{"addr":"54.240.174.48","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-12-14","domain_rank":408512,"first_seen":"2020-07-31T02:50:23Z","last_seen":"2025-08-24T01:12:40.843391Z","alert_count":0,"request_count":3,"received_data":3101,"sent_data":1332,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-08-27T15:20:49.600294Z","alert_count":0,"request_count":1,"received_data":72762,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"vi-sber1-20.jivosite.com","ip":{"addr":"37.18.110.91","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":2853955,"first_seen":"2023-07-29T23:17:29Z","last_seen":"2025-08-28T21:03:39.232407Z","alert_count":0,"request_count":1,"received_data":203,"sent_data":592,"comment":"","tags":null,"fingerprints":null},{"fqdn":"files.jivosite.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":900178,"first_seen":"2014-01-17T11:07:42Z","last_seen":"2025-08-28T17:26:18.00849Z","alert_count":0,"request_count":1,"received_data":35484,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"telemetry.jivosite.com","ip":{"addr":"87.242.88.149","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":346139,"first_seen":"2015-07-15T08:41:42Z","last_seen":"2025-08-23T12:44:52.118465Z","alert_count":0,"request_count":1,"received_data":111,"sent_data":467,"comment":"","tags":null,"fingerprints":null},{"fqdn":"node-sber1-az3-20.jivosite.com","ip":{"addr":"178.170.197.234","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":2965974,"first_seen":"2023-08-15T13:44:02Z","last_seen":"2025-08-28T02:36:35.472231Z","alert_count":0,"request_count":2,"received_data":1448,"sent_data":1010,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gamacasino413.com","ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":77,"request_count":77,"received_data":5882359,"sent_data":35491,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jivo.ru/js/c775408/chatcontainer.js","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"121a81b58b2fe1381353fa74b29bf37f","sha1":"f2399f81e037e43870ebacaec05ea70ea24fcd25","sha256":"78b55aa83342da20d2ca142f652c4ea9022890e8380bc3b89293c4ecab701ac6","sha512":"d721284ab22598591d4619d222da3d8340aed2a41f977c273a0241e854ef2674d7a1ea9eb7930b89b5ea653b5351c81ba38ee6cee1dc3f9587ee9dda93ff9a22","ssdeep":"3072:ifHy9dHe/o7gMv/dDYfOLxIQ3i49XgXDeRoOw3Odayf81+9FP:4y9hHdDYfMxIQn9Dw3Odae8k9FP","tlshash":"6c542ac472d0f8a942e741da947f2101f2292c2df409b958f3f8dcd9ab5598e2266f3d","size":298448,"data":"","first_seen":"2025-08-20T19:14:17.38903Z","last_seen":"2025-09-01T11:30:14.326201Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/runtime.d442bc55bbc78f55.js","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8e8dd438fc7a8b09a8a9e6ee008dbbf","sha1":"ac9b4aeaf9865624f7a89dd656e3c79c468d2a00","sha256":"aaf18aec86d9a85674d2ba0c6d248f911bbb021b3db1ee0d083e3245c6b23448","sha512":"d2f35c22a69b697de475a8dbed149ea76375cf591104ed36871185924d2eec8c18993b0707983d383dc22d7318f6cb284bf525c592d4e029a0c144d10fb37311","ssdeep":"","tlshash":"4571f8b52218fd7626f204c5583dd681a3087837465b94b2b76bfcbaa069dd20825ff1","size":3737,"data":"","first_seen":"2025-08-16T01:15:06.012355Z","last_seen":"2025-10-11T19:16:38.73949Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/widget/ziqY8DLV0e","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb67ace13289d0a81d036d9fef5831a5","sha1":"899370b37be05ac62acc0eaea3be85094ac53de0","sha256":"f86b7ffc0af355910158533d9fbf988232bd7656e53450579a53ffffe6d029c8","sha512":"050d81dd86043d98d3974bd5ddb63c8aa6bab6464ea5ca7045d77b01fdbc383d0780736a98e86f87e4000012de4a406749c741ddfd0d29719e1c6a01ff6a42b7","ssdeep":"384:boUJJkQymrml40+rANbl0q09TmF0q6QlEeJBz8U08waxceb4:6lviAfJMKv8UDxceb4","tlshash":"04822b6e7959b93743b208b5a16f6209b33549ebd404c920a405e94c7db8edf813fef8","size":18073,"data":"","first_seen":"2025-08-20T12:20:50.31739Z","last_seen":"2026-01-03T17:18:00.984344Z","times_seen":187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/js/bundle.js?rand=1755689377","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"36ed3928d4677835a0fa15a5fa268db8","sha1":"c56d62cb1533751eb3e4b837f84f13c29bbf9b0a","sha256":"adce61b05fe4330bed9178b616ff95b5703b15c3157fe7a0cd4e22659f55d911","sha512":"5593b617acde340647b90a0bc5579a7ce673a6121003eb4fbc30c2fc44127eb28b2d689f0cb54c90f1722454d4cdfad1fb58a49611feb7038d13f39dff55f122","ssdeep":"24576:BVSwS96xbB0ljHeY8yuWoBm+QsVduhEyuD1eb4d5oVIUfWuAbP36IHEdbDORs:zSG0lj+Y8yuWoB7QaQFu5eb4d5ouUfWy","tlshash":"58454ac5b1d1f06502d355e6a43b2009f23a2c5e3809b064f7bccddbea6659e6263f39","size":1204814,"data":"","first_seen":"2025-08-20T15:19:29.169219Z","last_seen":"2025-09-01T11:30:14.351016Z","times_seen":166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"e161e1ea1bd4ab5573174b8e99af5cd0","sha1":"0e52870820c79a796e4dbf874c6dcce25cc62ec0","sha256":"f5d641bc17e7bbf332d6c0fe4dacd2eb388c2e6fa75d0a0ac5a1f6ee4b3b9ab0","sha512":"f9b188abe82594b875def325a8b4689271645568ae85ce4adb69a05ee627b87d4918043d241aa7716709ca1daadc243b428f0bea7796786e7de542a8b1383d9f","ssdeep":"24576:UZc+CRaJl09dqNykgy00HpesgCHv+Ks67veMFqxJOuz6CEzlS1m:OcT9UNykgy00HpxgA06LeMkxJOuz6tzZ","tlshash":"0d455bd571d1f4a907e355e9943f2005f23a2c2a7409e064fabcdcc6aa6658e6237f3c","size":1178168,"data":"","first_seen":"2025-08-20T15:19:29.200734Z","last_seen":"2025-09-01T11:30:14.355622Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/polyfills.796ae930d7e03a02.js","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"45d74b85955e14c850b822c285850e2a","sha1":"7755800d46772b9d5d8dffa17fa4b3208e1a0171","sha256":"4d3cb08f890c6388ac7c3f72975058a1b08b6b1d5eb6c515890af1c861a7b839","sha512":"4c9ad7967edad381b96e4e18407f2e47b0ccc77cf812f16cad2f5d5c355e361ecb3805ce897d09dcf2cc9f23482dbcb24d34cbff75f7b6e1f44311d0b06917b3","ssdeep":"768:W+KL5a8UIjImvY7dSu0NMrLDnvtcnSX0jQ3wo6eWehnGeivq/9Y+pPPMHpFxDKsr:JIM+zedc1LQ8I4J3KytiTpQ","tlshash":"8cf2f8d63792b0b28bfa55f5917f8007e63624a0784c88d8f15d98da3c3705a91a7f3e","size":35117,"data":"","first_seen":"2025-08-16T01:15:05.869377Z","last_seen":"2025-10-28T14:54:16.243636Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-07-28T15:58:14.930244Z","times_seen":343020,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/main.ee0fe4ef966a0b35.js","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"782cec6f092543aa1154008e643c7986","sha1":"d00caa403474ad27d78e5058c85327de4de442de","sha256":"460d32196529b570eff2939df0c618aa16e548b21a4c44a153cfbcdd366aed41","sha512":"da2d6529ae2cf237cb416b7c1db0eb65282b5ea8bf6ab76b0452624bdf37f831891cb976829015feca3def4b91f7b64381f33b4599c0a62d579921387eae4bba","ssdeep":"49152:Yz8oYCwAtK7X2LnCvQ4+8/hbZ7XCiecQnoxPX5ys1gb2xXXsxEZKkdwq16cmV186:d5U","tlshash":"e2856ba5b320f0364ad651a660760546b33c684ce607949cf3accddc96eed89727bb3c","size":1840730,"data":"","first_seen":"2025-08-16T01:15:06.728852Z","last_seen":"2025-08-29T16:06:10.820173Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/js/c775408/locale-en-US-json.js","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c212727a7bacb453945e1ab7025234a","sha1":"5ff39073a6077374bb26f1f31b2428b7c0c8bb6f","sha256":"b8f45519424c6fcd31acb1d568c259fcb7297e38246ab98529e31d5d1490dde4","sha512":"8226cbb571eb34c684a6ae6b13056a7b968eb12371a25ea0a05861265b4019b0ec1170d0a2dd4a42495765a2b9e7e6a3c65aa8e86b93ba2920af050de25a058b","ssdeep":"192:2P7mk/7Obf14M6bOIpUTPqZ8Bi9FLeRJK:C7H7ObdFkOIphZ8w9FC7K","tlshash":"fd22d71ee7017f360fa613c3744f7b53b6a480e592646cb5d88c826953b9bca721778c","size":10507,"data":"","first_seen":"2025-08-07T16:51:42.115213Z","last_seen":"2025-10-09T00:19:26.491677Z","times_seen":878,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"eddcdabe942e1f77248215c97ff76fe8","sha1":"958e9ad77dba58c104887329dd78cd83945a50ff","sha256":"07f643ac8d879f84a1ace46a009bea26ac344427727533d884a7aeb5df689799","sha512":"13eb2be8d60ecc2ecd5a42e551640cbe04acc37b34b00feb817dddf1854ce9165d4e59c8553765f61071da71945bbb6093dd939ab3829efd2f2b5747c2734992","ssdeep":"24576:Whc+CRaJl09dqNykgy00HpesgCHv+Ks67veGliRJD9zGCXzlS1w:scT9UNykgy00HpxgA06LeGcRJD9zGozV","tlshash":"f0455bd572d1f4a907e355e9943f2005f23a2c2a7409e064fabcccc66a6658e6277f3c","size":1176360,"data":"","first_seen":"2025-08-20T15:19:29.230159Z","last_seen":"2025-09-01T11:30:14.356681Z","times_seen":161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"node-sber1-az3-20.jivosite.com/widget/status/2256902/ziqY8DLV0e?rnd=0.11950830729878303","fqdn":"node-sber1-az3-20.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"178.170.197.234","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/status/2256902/ziqY8DLV0e?rnd=0.11950830729878303 HTTP/1.1\r\nHost: node-sber1-az3-20.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gamacasino413.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://gamacasino413.com\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\nserver: foxy/3.5\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\ncontent-length: 183\r\ndate: Fri, 29 Aug 2025 16:04:20 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":183,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2ec81c087da314d762446057c7f86978","sha1":"35738613fc9fe15db1b7ae1f30cace8590ea37df","sha256":"1919869ee851f25640e6ea0ba324bd57369659606a8c620bba40ff1fe337f1c0","sha512":"010b5470c05d640122b3f666df5dc2cc6c5de428eab44d97dfa674c422d82349e99bb73a3be5b549a3936aae7071e82c8a6923f627c0578993fc544880a051fe","ssdeep":"","tlshash":"6ec022310c3a4ca606888220b0c73b0b092401123ec19d08a680e85c206b2c2804e00b","first_seen":"2025-08-29T10:11:18.890744Z","last_seen":"2025-09-04T13:32:19.985591Z","times_seen":15,"resource_available":false,"data":null}},"time_used":2331,"timings":{"blocked":1134,"dns":1,"connect":61,"send":0,"wait":61,"receive":1,"ssl":1070},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/icons/casino.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/icons/casino.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-3d6\"\r\nExpires: Sat, 30 Aug 2025 16:04:19 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":982,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b2ab188e8256b7b099bcc7ef401494a","sha1":"5ed8dd6279ac14a634b842acf2e5b7bfdd88945a","sha256":"0f09ea8fd54eca4ae3ebcf9f8b26131d4decbf54b316c3455f8118692ea8fa29","sha512":"150297c784c8697d1a7f725e074ef9a1c11ae5e789d07fd61a9f4f3d8ae52334077e02a2f375169f7085d1eca7db355ba5bad2da01179b9ca7149b78c47a9d7c","ssdeep":"","tlshash":"a211afe36ae573a4cc870795f71145567725207ec395ce01e3982be462acc419f8e484","first_seen":"2025-08-16T01:15:06.065285Z","last_seen":"2025-10-28T14:54:16.163506Z","times_seen":23,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/icons/info-icon.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/icons/info-icon.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-16b\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":363,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"960e9feb705dd935a10bc315001b9d05","sha1":"cb52ed55469845225a350e9d8c37b3d83ab271e8","sha256":"208845982ce06e5e7784fdc5a9f52185c97f4c405a1b9094d2014767fdc6bce2","sha512":"b156859f52d1727c5c93d86b2b7510978af893b361b6c4b860fcd5d3aadf5432e1dab7d07e9471accd9d0e00e9e4fb747e5277a570089d0b607a185544b938f1","ssdeep":"","tlshash":"1fe0dfb4af2cd5cd82018bb71e2a214c030ea0b270200183ab0c3fb49459ce1d953b14","first_seen":"2025-08-16T01:15:06.641674Z","last_seen":"2025-10-28T14:54:16.214686Z","times_seen":23,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/js/c775408/locale-en-US-json.js","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:21.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /js/c775408/locale-en-US-json.js HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 16:04:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3383\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"68a5820a-d37\"\r\nlast-modified: Wed, 20 Aug 2025 08:06:34 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-08-29T11:36:38+00:00\r\nx-node: m9-up-gc229\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10509,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10482), with no line terminators","md5":"2c212727a7bacb453945e1ab7025234a","sha1":"5ff39073a6077374bb26f1f31b2428b7c0c8bb6f","sha256":"b8f45519424c6fcd31acb1d568c259fcb7297e38246ab98529e31d5d1490dde4","sha512":"8226cbb571eb34c684a6ae6b13056a7b968eb12371a25ea0a05861265b4019b0ec1170d0a2dd4a42495765a2b9e7e6a3c65aa8e86b93ba2920af050de25a058b","ssdeep":"192:2P7mk/7Obf14M6bOIpUTPqZ8Bi9FLeRJK:C7H7ObdFkOIphZ8w9FC7K","tlshash":"fd22d71ee7017f360fa613c3744f7b53b6a480e592646cb5d88c826953b9bca721778c","first_seen":"2025-08-07T16:51:42.115213Z","last_seen":"2025-10-09T00:19:26.491677Z","times_seen":878,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/sounds/agent_message.mp3","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:21.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /sounds/agent_message.mp3 HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 16:04:21 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 3760\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"68a5820a-eb0\"\r\nexpires: Mon, 22 Sep 2025 10:19:20 GMT\r\nlast-modified: Wed, 20 Aug 2025 08:06:34 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-08-23T10:19:20+00:00\r\nx-node: m9-up-gc91\r\ncontent-range: bytes 0-3759/3760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"8e9a165c4cb185ffd0b2658fa088e43b","sha1":"195873e5e8bbb2f5ecc32d95f90d6fb75817a649","sha256":"ff81aad05612f90cf97c238f219765884e5cbf49351d8dc96a4a063c598c3f43","sha512":"6ef9fac16ac2835ecb95ab077270293a95a3597fd28fb053b32cfeb6b0a72b52c0ee51b0504a463ac9db1d8a3b2c6c41f113012d6364d16feb8e01821a3221ff","ssdeep":"","tlshash":"c771295c69348528f80b31b89f4b765ac1512c19a8f2ddd4a62818e7377b36a678820e","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-07-28T04:56:45.491731Z","times_seen":16640,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gamacasino413.com/api/games?lang=en\u0026device=1|2\u0026page=1\u0026category=43\u0026per_page=25","fqdn":"api.gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:39 GMT","end":"Wed, 01 Oct 2025 11:24:38 GMT"},"fingerprint":{"sha1":"49:9B:4D:46:E9:5A:F8:7B:0A:B9:B0:62:CA:47:1E:D9:6B:63:61:51","sha256":"B8:C7:C1:D5:A5:97:F4:72:F6:CF:44:66:0C:46:FC:9B:8C:F2:FC:51:B4:C1:EE:15:A2:37:83:16:94:87:59:64"}}},"request":{"raw":"OPTIONS /api/games?lang=en\u0026device=1|2\u0026page=1\u0026category=43\u0026per_page=25 HTTP/1.1\r\nHost: api.gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://gamacasino413.com/\r\nOrigin: https://gamacasino413.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nAccess-Control-Allow-Origin: *\r\nVary: Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Methods: GET\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Max-Age: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T15:56:16.616317Z","times_seen":17582408,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"api.gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/footer/payments/bitcoin.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/footer/payments/bitcoin.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-1673\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5747,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee55a8b8023b414560960992a34fea69","sha1":"53b955b7d1b3f5998369e6a48766e420104a4e10","sha256":"1ebf0d67f8863af08c2fed6fa33f7131899291c493d77d7f0d878be130fa5b6d","sha512":"b7e7db9ea04ff24740d29a7050ebaf1caa1be7c2f1918f0287068fa208bb01777db4cfbdd80d651e2ec93b1182d07fd3a4261aec37ec2d2cd5912c56c4c63a47","ssdeep":"48:9bVg6AqJuPwLoaOZSGOVJGsbw4Lxs6cFdm72L91FE2rUMm6rfluTROYknvgjTXsE:tS2nVSzk7t2BuO7nHYSsP0e","tlshash":"17c1e7c033aa6489f424d7eb5f5b903a7822bcfeb9408814d3e88e64f1d149c5c25ed3","first_seen":"2025-06-22T12:57:20.945168Z","last_seen":"2026-05-24T00:49:23.336185Z","times_seen":219,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":184,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/banners/BannerCat_3-13.webp","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/banners/BannerCat_3-13.webp HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nContent-Type: image/webp\r\nContent-Length: 32482\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nConnection: keep-alive\r\nETag: \"68a56618-7ee2\"\r\nExpires: Sat, 30 Aug 2025 16:04:19 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32482,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a3d064114324ddd8c26eccb99775dd2b","sha1":"503b90400cb209f00afcc23345c18985966db163","sha256":"99c1cd28d952da8d523a684b8a773ebe9cc3783c419e87443d6022fc46216bd0","sha512":"a1bea34431c2b12881cd766caadae7152348abbcedbe0e795bb4b799db22bcc6594b174bade0eeb8acddf9bed7f3dfca4c6f9859ff6e56afc6a835f944c3512b","ssdeep":"768:YJlIccbwHkZQCCwKJgbbQWwjXYACuAUKgbSAOz4YWA:UlZKakWCCwQWKXq8SGA","tlshash":"cee2f10a625fcd6ebdb0cbb41bf2526253387306e7320d68074d1369b0f25b6954f6ac","first_seen":"2025-03-08T14:30:00.029699Z","last_seen":"2026-05-31T00:29:46.254057Z","times_seen":64,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/footer/payments/niv.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/footer/payments/niv.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-253e\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9534,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"830a8a9845913239fed82d4a23f21ca7","sha1":"2de2fa91488ed9e9eb33111b534094cfb248eed7","sha256":"7a5e27962e0e3a97fc346927fd678681bfcf11d114136298f13260ec8c0ab94e","sha512":"b2c0e46aa005c1cef8a56452b7e0012b55a39efffa7adf1cb4ed2f26df1d73d426b311ce90527d6ed57c8791fa36d95731bb4f5d9aef6fff75102a4e1ce6ff08","ssdeep":"192:26sohqdbNg+2fj+LxuBri+YjG9DWbzOtfEwfeHnGdLnkwai2B7:26J0bScQi+G+DWHwfRfBywqB7","tlshash":"4712c5d60720d3dcc5afca9aff3659547a1ea0ffa8a7cac095ae96588cd7cc0f504800","first_seen":"2025-08-16T01:15:06.110148Z","last_seen":"2025-10-28T14:54:16.227189Z","times_seen":23,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":117,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agstatic.com/wlc/flags/1x1/gb.svg","fqdn":"agstatic.com","domain":"agstatic.com","tld":"com"},"ip":{"addr":"54.240.174.48","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.agstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 25 Mar 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:22:43:3E:BA:C9:EE:89:8A:DA:E5:F1:6E:A5:1A:CE:62:7D:8C:8A","sha256":"A8:15:5C:3D:F0:FB:92:90:3A:8D:33:6C:77:5D:61:01:E8:D0:25:40:55:13:A1:47:54:B6:2A:66:2C:61:44:8C"}}},"request":{"raw":"GET /wlc/flags/1x1/gb.svg HTTP/1.1\r\nHost: agstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 911\r\ndate: Fri, 29 Aug 2025 16:00:30 GMT\r\nlast-modified: Tue, 26 Dec 2023 14:45:28 GMT\r\netag: \"3de413a6f455e1e35121519f2e0deb75\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: EktZIYN3oZgNB3K2gPV0rpgyc8Kl0IeKxoRYqNJUa0gMTw-4XNhD5Q==\r\nage: 231\r\ncache-control: public; max-age=604800\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":911,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3de413a6f455e1e35121519f2e0deb75","sha1":"8692d11f1bef937ecda85696ec530bbbfa76e5df","sha256":"2f0cc6ed1e8e9a7e56cafd3500585d685ae0c51abacddc52f750fb4d23f60b04","sha512":"cd5ab599bbe91838b2cedf58005c100196999ecca5c1c9db00d76b7eb8e91daf7edfed73cfb998dbeeccd5c4b88097ebed29a611a9d68ab07fd071bb5df4da4f","ssdeep":"","tlshash":"4b118cd462fde149ce52430c6a9e72682127b1c773414265f1991e4edbc588bc9d2eac","first_seen":"2023-05-07T23:28:43Z","last_seen":"2026-07-27T09:38:50.604042Z","times_seen":526,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":57,"dns":38,"connect":1,"send":0,"wait":4,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gamacasino413.com/api/category?lang=en","fqdn":"api.gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:39 GMT","end":"Wed, 01 Oct 2025 11:24:38 GMT"},"fingerprint":{"sha1":"49:9B:4D:46:E9:5A:F8:7B:0A:B9:B0:62:CA:47:1E:D9:6B:63:61:51","sha256":"B8:C7:C1:D5:A5:97:F4:72:F6:CF:44:66:0C:46:FC:9B:8C:F2:FC:51:B4:C1:EE:15:A2:37:83:16:94:87:59:64"}}},"request":{"raw":"OPTIONS /api/category?lang=en HTTP/1.1\r\nHost: api.gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://gamacasino413.com/\r\nOrigin: https://gamacasino413.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nAccess-Control-Allow-Origin: *\r\nVary: Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Methods: GET\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Max-Age: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T15:56:16.616317Z","times_seen":17582408,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"api.gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/footer/payments/interact.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/footer/payments/interact.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-55a9\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21929,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57e627c8fe520cf7fe6b7ba25697fe55","sha1":"4cfa9683305eee2075b9d4ffcee4e9575dda5838","sha256":"667d2b41d58cb58ea47f10ee14786069ee1625f861606772bd25bc980801642a","sha512":"865b8ad40bde7fc463caeabdd8470aff1794d15ca447fbb551d2ff8c71b5e572c764431482383735b52118849196d40fda3c6203b8bc0f52d67685cc4e9c6fb0","ssdeep":"384:faSlKW7ESNjUd4qT9v6KM2FlaD9+6cKUV3ecXko:fh7zNYdkKh+9At5ND","tlshash":"29a283e9173493dc98c7994fff32ed94531f64fab9a681c0896fdb58949b8c0fa06804","first_seen":"2025-03-08T14:29:59.761442Z","last_seen":"2026-05-24T00:49:23.45943Z","times_seen":220,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":137,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/games/ico/GiantsSheepRL.jpg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /games/ico/GiantsSheepRL.jpg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 59588\r\nLast-Modified: Sun, 03 Aug 2025 13:56:19 GMT\r\nConnection: keep-alive\r\nETag: \"688f6a83-e8c4\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59588,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"1074b702288203bd7da7564340536819","sha1":"b91aa5f14af27e914ba4abe0d610a6498b20c65e","sha256":"cd457782f65a47b8c7fee68d7c87f6dfd79f7d5eba783f027949f846ca580a56","sha512":"c446c8dc36800706e5e92d24402a89ea3a4229f67bb55ad9e414942bd0f90bc6db4557f0140024fcfa71fa60f186e8f1850beeea3a367e5866088f4dd4c673fd","ssdeep":"1536:dsUsbfDZlXtN5Am1MXQ/dtzcpNCo6J1h5t58//OaRBn1juR6k:dKL3tNveg/dhcitu//O2n1jC","tlshash":"c04302b2c9e477caf28bc230d556fc5fa65f8e106d46850e85cc435d72fb2a9b829098","first_seen":"2025-08-05T17:20:37.078506Z","last_seen":"2026-06-12T00:18:49.729056Z","times_seen":194,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/favicon.ico","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:21 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 225342\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nConnection: keep-alive\r\nETag: \"68a56618-3703e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":225342,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -43x256, 32 bits/pixel","md5":"8c4be4aeb376a666663cf69360819a62","sha1":"e8ed78e3530c87dd1939651fc96ea5162d9a5d04","sha256":"86580fbd5145dd470ba5331ec7b8ab20a6f1f077a7215492d913d9a2957dbfe3","sha512":"69e2ee1aa05489b3b7bb9d33f3f142aedc81b643ca8dbdf7a44e6d6ad2f77fd4306aa84916cf5cd868062e3101de40ebbcda1edb4e3ff7a6aae5efbb15976b80","ssdeep":"768:1GKmhGdX8+oOiqPrbr2d6qfLVdA0f+A6fUdS4SpaCnMZ///rTo0gL40Ga3//2MBe:10GiqPn4pC0j////O//a","tlshash":"3c249bfc2c8db405d5a64b77c581ab6004862fc42e498563e2b0fe0af6d525edf921fb","first_seen":"2025-03-08T14:29:59.841202Z","last_seen":"2025-10-28T14:54:16.187083Z","times_seen":25,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/games/ico/BloodAndShadow2NL.jpg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:21.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /games/ico/BloodAndShadow2NL.jpg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 66210\r\nLast-Modified: Tue, 17 Dec 2024 10:14:15 GMT\r\nConnection: keep-alive\r\nETag: \"67614ef7-102a2\"\r\nExpires: Sat, 30 Aug 2025 16:04:21 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66210,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 464x348, components 3","md5":"db860cd767f703ef71d43b36be3871b2","sha1":"983404dbef1931fd4b5206e6150b29590eaea267","sha256":"633a9923772b0ebecede3ac99a0185423c865311cc0a45acd3a18f378fa889b6","sha512":"bf395a90de8d2df9c2b4e46f489023439aa5f080ca48f5f1557cfa91e417c1f6ea4232bca8236e0f894a740aa890bc7d5ed9b50060808d8ddc8caae8f421d9e0","ssdeep":"1536:SZrq2J3d9KsB9clZY3rGtBjXZ6w60k2UNehEWQUc:SvKw3abLZ6wkfNehThc","tlshash":"4853027296e26b507aab383e2f1cff2f869fc8a86ee7d4d1a7c5db856044714c0c6141","first_seen":"2025-03-08T14:29:59.934306Z","last_seen":"2026-02-19T08:22:57.941807Z","times_seen":216,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/animate.css/4.0.0/animate.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:18.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/animate.css/4.0.0/animate.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 16:04:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 4216\r\ncf-ray: 976d48901f12b509-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb436a8-11848\"\r\nlast-modified: Thu, 07 May 2020 16:26:16 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 32691\r\nexpires: Wed, 19 Aug 2026 16:04:18 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zdYLc7k%2BsX0IDA3FIpfrm%2BZTipb1KKxYfK8Fnjds81t%2FVvhbSznnrZyCBpr%2Fr%2Bn5mhJRUDsOCIXItUcWFBVzz2z9IsXLnmcTkKN4Os%2Bvo4dFiUYbhTy02j0PH%2BJZMU2UTuhode5X\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71752,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65346)","md5":"39aca93cfd689b19cc6241e859642a92","sha1":"5022a36b3d077c80b0b4a550ddfb280aae28dafe","sha256":"eb2798553d86c6b1806d208320f645bd79eab0cebcf22176bddbc648e8f3ccd4","sha512":"44cfdda0f629f93e50d366d8255962e32680a9fa4530819735b7453492517625a1e26ba66864550ae5cf0f87a185e2d4a804e6fdab498ceb9de810b7c7e28f25","ssdeep":"1536:f6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:KkZgwh1nAukdDO3Xyr5Ir5eh0dTo","tlshash":"226329ae4891128990230f6787cd5ea84b3dc6a355721cee33552c0b8b46fee73de617","first_seen":"2023-04-07T07:34:50Z","last_seen":"2026-07-27T11:24:08.814557Z","times_seen":7100,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":25,"dns":1,"connect":1,"send":0,"wait":28,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gamacasino413.com/api/games?lang=en\u0026device=1|2\u0026page=1\u0026category=43\u0026per_page=25","fqdn":"api.gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:39 GMT","end":"Wed, 01 Oct 2025 11:24:38 GMT"},"fingerprint":{"sha1":"49:9B:4D:46:E9:5A:F8:7B:0A:B9:B0:62:CA:47:1E:D9:6B:63:61:51","sha256":"B8:C7:C1:D5:A5:97:F4:72:F6:CF:44:66:0C:46:FC:9B:8C:F2:FC:51:B4:C1:EE:15:A2:37:83:16:94:87:59:64"}}},"request":{"raw":"GET /api/games?lang=en\u0026device=1|2\u0026page=1\u0026category=43\u0026per_page=25 HTTP/1.1\r\nHost: api.gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://gamacasino413.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5896,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e9354df06c94c678e6a346ca29b1a045","sha1":"bcfe0f1b5b2c6359e9a3bb51464d2b7bcf943af2","sha256":"0dcf0e68b31d07e3f717ec22f30ec1e7fdd9783ac50be29a1eafab4b9fe9931e","sha512":"2019164c419b2963e1dc20455cac772bdc63dd22ab2659207995b2ca6364a47a37927861ecdd82ec458fe3196adba073e9c0dba2ed08e38cf9485bd5081a56e4","ssdeep":"48:YVM/LAlvEE/gQT4pTkiM/84CTUY8Roc6pftCslQ:NGafME4yt8RocAfw","tlshash":"66c13a6b4b282cbe8b0b24f41fb33e46918e0186d7d5ef750589ce9c85edaf2541f426","first_seen":"2025-08-29T16:04:49.93485Z","last_seen":"2025-08-29T16:04:49.93485Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1342,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":1303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"api.gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gamacasino413.com/api/tournaments?lang=en\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:39 GMT","end":"Wed, 01 Oct 2025 11:24:38 GMT"},"fingerprint":{"sha1":"49:9B:4D:46:E9:5A:F8:7B:0A:B9:B0:62:CA:47:1E:D9:6B:63:61:51","sha256":"B8:C7:C1:D5:A5:97:F4:72:F6:CF:44:66:0C:46:FC:9B:8C:F2:FC:51:B4:C1:EE:15:A2:37:83:16:94:87:59:64"}}},"request":{"raw":"GET /api/tournaments?lang=en\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://gamacasino413.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9875,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bcbc4fbcb6fd8bfeebfd3b17d98dc928","sha1":"81b123ed80c349ecbe92c5d05db2fc91d3c14e4e","sha256":"78c91c567d7cbbfbf2bc12b51dab5831e60907aaad4bb031cd872744da63b462","sha512":"8f38b5cd7a964d44996d70f263a99d50a523c272076f5c14200533abb7008d6c01a516d83e3878f164b9c542e0580ce78e2b194aa0efb2fbb94cfcc07bae5b82","ssdeep":"192:juw7J+f0bL8Y4TtkEKJ+f0bLh9PtDODI6BLbLkKorNQ1Wb9J+f07L3RtIEfybL6v:r7kGL8L3KkGLh9QDvLkKoO89kmL3ZfAk","tlshash":"3612537853a622b991a6d9703f4febf44fa9301cc2c9d8aa755dcc0c97806755db30b8","first_seen":"2025-08-29T16:04:49.936382Z","last_seen":"2025-08-29T16:04:49.936382Z","times_seen":1,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":2,"dns":2,"connect":34,"send":0,"wait":94,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"api.gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/games/ico/ZeusvsHadesGodsofWar.jpg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:21.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /games/ico/ZeusvsHadesGodsofWar.jpg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 96285\r\nLast-Modified: Mon, 28 Oct 2024 05:57:26 GMT\r\nConnection: keep-alive\r\nETag: \"671f27c6-1781d\"\r\nExpires: Sat, 30 Aug 2025 16:04:21 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96285,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 464x348, components 3","md5":"0a2785d289ac9908c3f0b08d3fa7d67e","sha1":"6524539a53795b5836c9150cba82929f42677b9f","sha256":"b0ed05a3e532af297c32f4ec93db8ccd15fa5cf1dfc37cbe5404e8350cfa3bd6","sha512":"bb2536a4e84f382542bb528793960d757721edffb28ecba68f306589cf7680ccdc2dad3cad5ccf3623b8b690853d70a4035d897481d815c02155946805c64ea7","ssdeep":"1536:sEspO5IIVaPErIhqJvUo0dsLE/hQkFN2wT3BSffkWIugFPD2onrxOrkWZ7PL2uE+:yc/xIhqdUdQkFNR1SffVgh2Y8Zj","tlshash":"11931226cb984ff871e341b5c7853d80ac6b823b363dcb272ed81694c8f4cc6b162661","first_seen":"2025-06-22T12:57:21.150939Z","last_seen":"2026-05-24T00:49:22.726915Z","times_seen":216,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"vi-sber1-20.jivosite.com/ziqY8DLV0e?c2cd3c4e6183c291","fqdn":"vi-sber1-20.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"37.18.110.91","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:22.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /ziqY8DLV0e?c2cd3c4e6183c291 HTTP/1.1\r\nHost: vi-sber1-20.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://gamacasino413.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: K63h/c5cWpNv+I4xrhAnIA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nConnection: Upgrade\r\nUpgrade: websocket\r\nAccess-Control-Allow-Origin: https://gamacasino413.com\r\nSec-WebSocket-Accept: onbqhvAWa6MPKXv6dZzW3N0tjag=\r\nServer: hand/3.7\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T15:56:16.616317Z","times_seen":17582408,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":1,"connect":50,"send":0,"wait":45,"receive":1,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/icons/jackpot-icon.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/icons/jackpot-icon.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-f65\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3941,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"729fbd6fda9f38f4c8f09bbec24bf0a3","sha1":"0ad1fab7091936ad493a5ce95d4fa1fce0bddba6","sha256":"24a3ad872cc6501d6f284db075de69008e513e25b34ca09ca988c828341d8a2d","sha512":"a601cc0944d673fb30342d81590015459db282d8b22c9cc647e0cd9fb45f2ada466234b3d185e53b2df062138567ac2bd05ec5b8318823c82b39e29bba0830a2","ssdeep":"","tlshash":"52819666e391c3e8f001f7f8d21658b07ce63d6a6813c45e86e25c76c95107c8d95cdb","first_seen":"2025-08-16T01:15:06.660973Z","last_seen":"2025-10-28T14:54:16.180241Z","times_seen":23,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/icons/support-icon.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/icons/support-icon.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-482\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1154,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6172a39ed960db5c56635be7a476ac12","sha1":"28f111d7ee3a7d7e43d41b080866b5b49e98d301","sha256":"0e7f7efb84332c5feff9781b02658263326bfa2805fb1d4684baac19f7d372c6","sha512":"269c6f758fa239106d1623a3e5c32eea22f7804cf492e429b5373399f89cb33253e4e794fd8ed6b0d87e37a754a546f9f8c9c85878bd50c829eeb2d6d826ebb9","ssdeep":"","tlshash":"652163d26ed90260e8047340b4327824b1ab68aa6ac6cf18a1dc7dd87f1b444dc8ddca","first_seen":"2025-08-16T01:15:05.841334Z","last_seen":"2025-10-28T14:54:16.158011Z","times_seen":23,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/games/ico/ApocalypseNL.jpg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:21.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /games/ico/ApocalypseNL.jpg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 62342\r\nLast-Modified: Fri, 07 Feb 2025 09:54:04 GMT\r\nConnection: keep-alive\r\nETag: \"67a5d83c-f386\"\r\nExpires: Sat, 30 Aug 2025 16:04:21 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62342,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 464x348, components 3","md5":"3f64e9b184055e22875f1840c9d88970","sha1":"2fd898d543eb6189d2f3403d0507a44d37905a66","sha256":"9ba4eb7f997de147b761774c7e3b6a4308fe5b6f40e54402cb087a48eeb8caa6","sha512":"06bee10ab53484d882d653ba097f99935436bd6a695d042a5ea35e294f9b7e5fbd33e5ad63b074aea6d8deeae86e11a2b3bb6c13d39b6a150e32c7a373e125ef","ssdeep":"1536:mjTgFrHE8eDVwwZl8IQGFV02WUvPR/Ry13:mHZ8eewOGrWUR/U13","tlshash":"dc530231ac0a4668fb38e7b35806bee663d97da5d04c075920d7ad70836af370c1a576","first_seen":"2025-03-08T14:29:59.914571Z","last_seen":"2026-02-19T08:22:57.980832Z","times_seen":214,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/games/ico/SweetopiaRoyaleRL.jpg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /games/ico/SweetopiaRoyaleRL.jpg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 50010\r\nLast-Modified: Sun, 03 Aug 2025 13:56:19 GMT\r\nConnection: keep-alive\r\nETag: \"688f6a83-c35a\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50010,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"ef9c22f992184d586c64d1b57f8af2bb","sha1":"a9dc0dbd589a9023ba89d8e85e24c57b3de30ee1","sha256":"46ec6b1a417e16c99026f1c3c200d0856ab2673d093967974dae53a49d08339a","sha512":"5013198aa21e7a29ed009ba6c41cb994497798382eaa7a4db3e1f737f412e6eeae7d9c44c0dc30950d50b5fe377faead9ba1ac1c7f082d8cff174b389533a363","ssdeep":"1536:P+59g+O8SdYcSpqub5an0AwI3nK7PqVDlfy7ALDUs1xm:P+597O8SODpqubvAr6judE0Q","tlshash":"1a23f13ded1866ddf5a66730e0717e5caaefe85c3a654194c46f74c88bc3081e299c38","first_seen":"2025-08-05T17:20:37.228184Z","last_seen":"2026-06-12T00:18:49.525964Z","times_seen":182,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/games/ico/PossessedNL.jpg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:21.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /games/ico/PossessedNL.jpg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 44551\r\nLast-Modified: Fri, 03 Jan 2025 08:59:27 GMT\r\nConnection: keep-alive\r\nETag: \"6777a6ef-ae07\"\r\nExpires: Sat, 30 Aug 2025 16:04:21 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44551,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 464x348, components 3","md5":"cd4d0e00ab7cd5cb7e7018f54c153360","sha1":"70c351d2e74031ce1755e71a9d1900ec93a16a81","sha256":"8eb183ea336abc5b13ac8ea743ecabf5dc77acc7a73c7169732f7e34d7c83367","sha512":"b7683d4d35c3be17206c02e17cbc0a1dea22a6a22c75def3b83b09d7dfcf9d9c5ded1d0eb1a8f8f0a081cfee18b2770b4589724be0116bb2cb1ff0a5fb98c7f6","ssdeep":"768:wBQvTnlhe+vjum4lBr4pvxbCToTYxfdZdtGuLLxljqCAbZdWOurxFA4nipjJi96:dDlDv3rTzuPNAb+9NF5nipjJi96","tlshash":"3b13f1fd84f911d4bbb909f6de416d2af2d471187cb024d373a7e85c2c9f31482a698a","first_seen":"2025-06-22T12:57:21.102304Z","last_seen":"2026-02-13T13:44:35.70128Z","times_seen":198,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":68,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/banners/public2.avif","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/banners/public2.avif HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 15541\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nConnection: keep-alive\r\nETag: \"68a56618-3cb5\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15541,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ISO Media, AVIF Image","md5":"1f72c0e637abb0f63b60ce48966da8e5","sha1":"350942b7a2c6fcd11f8b7b709b83befb43bb1296","sha256":"37e9c654a5268ca7476c0f24316595c6958987c499b9b20d4c690d234f62c27f","sha512":"e50601efc0febe2c5e0a9df40688e4ec8bd20d2a8200575de75e2cd2d57b8fa6332760108fc8ca04104f9d6c9c4d4593e400e8b2928081e980e685e6928b2190","ssdeep":"384:nWCtthOcwGhEXREbthTEWCPS7WPfrs3qT:nZ44ph8Pfr8qT","tlshash":"bb62d12caf3b8d90cd7d043c8eb16d617b6e975cd4b0c383461539a745c2e21ec179a9","first_seen":"2024-12-21T22:28:58.054897Z","last_seen":"2025-10-28T14:54:16.233413Z","times_seen":27,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":132,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-29T16:04:18.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:18 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69355,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (64371)","md5":"341cf16b58099ee0caf965c3fcd9ddd7","sha1":"b1096bdfd5f0855c9d7112a411053945b82a877b","sha256":"235c21e0c0c0d4460408394ced788ac458d576c7be4e1529e806fe1bde553e49","sha512":"3bf24c874fbf29649a8dd2cea63f11371a95376caf085de99d29056198e39a5038e6bd98296ea8978771b4d6aaf0cea81337e63b25b33ce5bd5890b1925988aa","ssdeep":"1536:F87kRaxvdz+EyyBfK4jXFJ6N4TxnV2p5CK/sGN+k8a6aqGzOWDlpSykKdbOLtJts:6j7fK4jXFJ6N4TxnV2UKdbOLtJtZxjvI","tlshash":"e4633001ea01162ef65286bf8484ee529fd2cdd2ca1157aff3526e4cb26d06df34d722","first_seen":"2025-08-16T01:15:05.829442Z","last_seen":"2025-08-29T16:06:10.775828Z","times_seen":10,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":194,"dns":49,"connect":66,"send":0,"wait":71,"receive":1,"ssl":76},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/footer/payments/litecoin.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/footer/payments/litecoin.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-12a5\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4773,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"93edb733903adf6957e1e50757d1dbfa","sha1":"684943d3832a33a7bee11defa4db5cf07f69ac29","sha256":"9e01176bab3a1d0560eadcd93ac75b3e7e1ac3298bcd32006e102c8f486a10f9","sha512":"6daa6b99f3352e6a214db80af8d4016c56b4404ab783a26cf818bf2f7a236b38bfd165de4903eeff7bf3ff43b4f16d4ae42c5126c24fd79248c03807c0984293","ssdeep":"96:CgxAH/Tjy0GAV7ukw7NvZh1oamyP7qENbMWR3Xz+bXTeF:CX/60xV7Zw7Nhhi2DhKXKF","tlshash":"dda193ca37e464ecf488cbf64b57a0d92102a1ff55458a1cf7dc5e64aa5081c8c276d7","first_seen":"2025-06-22T12:57:21.198549Z","last_seen":"2026-05-24T00:49:22.645Z","times_seen":219,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":202,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/js/bundle.js?rand=1755689377","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /js/bundle.js?rand=1755689377 HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 16:04:20 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 284129\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"68a58209-455e1\"\r\nlast-modified: Wed, 20 Aug 2025 08:06:33 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-08-29T11:30:24+00:00\r\nx-node: m9-up-gc98\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1204814,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65508), with no line terminators","md5":"3060b2c726fb94106cafe785d8a12dec","sha1":"1f7d48a86a2ce9abf8746d0477926c906effb25b","sha256":"f52047d0e1a18dfdb8a2640d500e76010d117098522804e62573c9f8d8679d08","sha512":"145c84ec661fe812a0f2cf4c43e462438af719e41e433f77eb7fc29a5668bb5a2548437084bd1f4294bec0f917d161c648e5f805168bf3519747ee99704654aa","ssdeep":"24576:BVSwS96xbB0ljHeY8yuWoBm+QsVduhEyuD1eb4d5oVIUfWuAbP36IHg:zSG0lj+Y8yuWoB7QaQFu5eb4d5ouUfWG","tlshash":"8b254ac5b1c0f4a502d355e6643b2009f23a285e7809b064fbbccddbea5659e6273f39","first_seen":"2025-08-20T15:19:29.067858Z","last_seen":"2025-09-01T11:30:14.332835Z","times_seen":156,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/sounds/outgoing_message.mp3","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:21.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /sounds/outgoing_message.mp3 HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 16:04:21 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5014\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"68a5820a-1396\"\r\nexpires: Mon, 22 Sep 2025 10:20:19 GMT\r\nlast-modified: Wed, 20 Aug 2025 08:06:34 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-08-23T10:20:19+00:00\r\nx-node: m9-up-gc81\r\ncontent-range: bytes 0-5013/5014\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"7bf3e4962a5ecf1f8cbcc2ff3428f531","sha1":"f75c694461a643d2e096ae8d0f6c1a9d19602eee","sha256":"d44244617bf21df7a137694fa762d5cab3b82cb9fae8f33de5917977b02b2a11","sha512":"53fb17ca3361636acb0b80107f66810150a8bbed9aa5f878c2b1fb5a23ddf7fd349b30eb082b05efb3c0d08dc5383d30ef15d0ca99ad98d62e0a9a335112ed6a","ssdeep":"96:nKEOyBuK+1D2sMVx9FX7+0YQQinefV/1gr/EaadKXdGdimO1:K2QhGvYinsLE/SUdUime","tlshash":"5da1399616202262f6090cbf124ec2f4e3996f6b39044726b67cd290f46ffa25366983","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-07-28T04:56:45.548227Z","times_seen":16641,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.jivosite.com/avatars/2256902/6785307f33c88.jpg","fqdn":"files.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:32.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /avatars/2256902/6785307f33c88.jpg HTTP/1.1\r\nHost: files.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 16:04:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34923\r\nx-obs-request-id: 00000198C81D8060B027481D5BE430F1\r\netag: \"77aeca14e35c9bcdc640c9d01f7f3aad\"\r\nlast-modified: Mon, 13 Jan 2025 15:25:51 GMT\r\nx-obs-tagging-count: 0\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Disposition\r\ncache: HIT\r\nx-cached-since: 2025-08-28T16:34:30+00:00\r\nx-node: m9-up-gc91\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34923,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x150, components 3","md5":"77aeca14e35c9bcdc640c9d01f7f3aad","sha1":"fc7ba8bee21c4763213efb931c9cea8a9c930b39","sha256":"62994956494eb858f348315d3a2c0c94d02aa385d4a3821c6ce5ff73b8156b71","sha512":"ed94b0beb6463dc7c0affb12f3d547b5347b6671b566088c41caee7f42d6c755e50ca232b1e1b42333f192972d4196e6df9a4aa5cb619ed4d3d4a8232f4102f7","ssdeep":"768:CwedMqHzj0Cvce/otoDQmfy8fmNVYLu4fhGajBT+fc8:7eNjN0boBpwV5YGiT+/","tlshash":"34f2f16ec2920bcee180123e014257a9db36a7717375c33348d79afaf814d0e6b4a18c","first_seen":"2025-07-02T10:58:57.979319Z","last_seen":"2025-09-04T13:32:19.858124Z","times_seen":16,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":183,"dns":63,"connect":58,"send":0,"wait":65,"receive":10,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gamacasino413.com/api/games?lang=en\u0026device=1|2\u0026page=1\u0026category=30\u0026per_page=25","fqdn":"api.gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:39 GMT","end":"Wed, 01 Oct 2025 11:24:38 GMT"},"fingerprint":{"sha1":"49:9B:4D:46:E9:5A:F8:7B:0A:B9:B0:62:CA:47:1E:D9:6B:63:61:51","sha256":"B8:C7:C1:D5:A5:97:F4:72:F6:CF:44:66:0C:46:FC:9B:8C:F2:FC:51:B4:C1:EE:15:A2:37:83:16:94:87:59:64"}}},"request":{"raw":"GET /api/games?lang=en\u0026device=1|2\u0026page=1\u0026category=30\u0026per_page=25 HTTP/1.1\r\nHost: api.gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://gamacasino413.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6188,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ccf758938022f41ffcd8a07bda6ffd62","sha1":"bd0bc3f095beb7c93b4213a43d622a080e72f079","sha256":"8087516e95d520893bb62c3cd0f2895466af45b473164f1a3926a465ea80d793","sha512":"d2eb40441545706c41d349c00f38665ac32b3e5b6b75f37647d017ab954793d887bb1ce9fc82e629241471b11f80bba44f71f0b79656e7a7c84b2206825d2c57","ssdeep":"48:YPcI9/Xbqe4A5MSoYtLCQve5r6Jeej2PmfBI+3HJaWYQ:qcIZMSBrvqr6JPyPmBBpl","tlshash":"5ad118ba44280cfecb1726a51fe37e9e409d40c68acdde6414decd4c49edaf6450a8b7","first_seen":"2025-08-29T16:04:49.944643Z","last_seen":"2025-08-29T16:04:49.944643Z","times_seen":1,"resource_available":false,"data":null}},"time_used":747,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":747,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"api.gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/banners/crypto.webp","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/banners/crypto.webp HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nContent-Type: image/webp\r\nContent-Length: 374544\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nConnection: keep-alive\r\nETag: \"68a56618-5b710\"\r\nExpires: Sat, 30 Aug 2025 16:04:19 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":374544,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4aba00eb4b00cb305f99e7baff3839d7","sha1":"fda9bb2fb505f19e4b1a8028ad8351ea370b919c","sha256":"6d49d9952840b10560ef0b9378e56db4e0b2833ba24ae90885dcbcbf884679d6","sha512":"b2cb3ce1985f9507736484fc4d0ec86c96403687085eb9d1d8f1673dc45714f3903d98c70b11e4d9b0bcce38afa7bdd07f801d98921a46e1a5a13dc0ff8cedf9","ssdeep":"6144:mEF3ltcKBEo/cImhwugwO/mDRG0XMDzksET7ws0aWOI/loyRXgTIS:mEtltpXNwOYRG0cDzkLT7j0asoiXrS","tlshash":"5c84235e506825a8d10c39d8ac60e35dbd21fdb9a7cfc155eaa0776c8fc1eb4e29e304","first_seen":"2025-03-08T14:30:00.006859Z","last_seen":"2025-10-28T14:54:16.246673Z","times_seen":25,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":142,"dns":1,"connect":66,"send":0,"wait":130,"receive":254,"ssl":74},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/icons/burger.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/icons/burger.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-149\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":329,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4ed4755f57cdee27a1efbd4ca2ec9aea","sha1":"651bb981d8aaa65e613cdd9a8c13a48dd63f8657","sha256":"25c1bd09fd9627ff0af2e15d6fac31c7a0b56ee0fd269938b03ff222e9e3f59e","sha512":"4fe0801bcac529b8a702263122f6a839bf270473e7e6be483818efbf766ac2272231fd7d25646214a99aa0be58014764b8c9c33e616ef0a727132d2f1b31459e","ssdeep":"","tlshash":"c4e08675c39fde6c61078e11d6e7bc055643e09261700878a13c91f0d0f26628f1b8a9","first_seen":"2025-08-16T01:15:05.864791Z","last_seen":"2025-10-28T14:54:16.254355Z","times_seen":23,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":192,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/footer/payments/ecopayz.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/footer/payments/ecopayz.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-166f\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5743,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"adc048ea24eac4cddaca1d246a678729","sha1":"b43921a8921566b6a9577cdb1bdd7a227fdf4512","sha256":"f0c9dceb77ae14050c497cadebb3b457d2390b3773c70bb23a97a273afae1a3e","sha512":"95d647c92eda1a160bd0a81fe5625d3726722432109fa5fa0420764e93a979548edf8bbb9ea4351423142e87d55abbee56af29ebf3940e7593434854a150dedf","ssdeep":"96:SJHwrwEB1ByzBfzm/Jc8TwqdEN45u/aMx86M8/1z9weTmMQMQu+DLZVLF:S1wd+V8dE7/aNIqeTpCLrLF","tlshash":"0cc1a3ec377893f4f54ad7ff872654b5340360feaa4589dce3a86c29a48155e1c84ac2","first_seen":"2025-06-22T12:57:20.997339Z","last_seen":"2026-05-22T01:16:04.978096Z","times_seen":145,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":156,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/loyalty-program/4.png","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/loyalty-program/4.png HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/png\r\nContent-Length: 8376\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nConnection: keep-alive\r\nETag: \"68a56618-20b8\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8376,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"22fd5a64619a2325d19782ab6df3fdc4","sha1":"e4df7625dd291615363473bda90e7fc92aa9330b","sha256":"7827f7f4a4c40d7bb3bbbbe0724386a48823a3b9c96bc6ae83ee4591b46fe135","sha512":"fac1bfba321e4bb6fdd610a192f22c18c09777db8f6585101b7689f9b51dfcd9ddc7a24d8e2f06a803aed17c7d05096627958ff7f3ab6e7c4af3b7e671f57621","ssdeep":"192:lsdljLtanxwdlndbRJkBbu79sr6Yr1tTZy+Xe1PyGeNs:idlFaxwdlnd1JkYsr6I/Zy+u1PyG+s","tlshash":"fe02bf7140af4d08f95544ad571490889f313e39ae0b1e7de45f8306b695ab326cbc5a","first_seen":"2025-03-08T14:29:59.842146Z","last_seen":"2025-10-28T14:54:16.247411Z","times_seen":25,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/games/ico/SanQuentin2NL.jpg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:21.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /games/ico/SanQuentin2NL.jpg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 56812\r\nLast-Modified: Fri, 03 Jan 2025 08:59:27 GMT\r\nConnection: keep-alive\r\nETag: \"6777a6ef-ddec\"\r\nExpires: Sat, 30 Aug 2025 16:04:21 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56812,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"7c3be9ab175fbb005271d657123d6244","sha1":"2c2561015aa712c6a8f10c21bade1e46d31565a8","sha256":"8c44f54e896fb647f8b6db93f7d8573458b175d1866490cac1a38135255aa57c","sha512":"ac31799b906c98a9e05ffa02c0af72f23c7937083618b6099050aff7dd1ee006c46e0353c2bda28f080a45d2d37be5b1bf9ab33d5ec4778cb911a06246f4b854","ssdeep":"1536:jHZJMb952AV1n7WSGOWhFF7hMVEPnUGdhr7xIGeYNLavOHYf:jXMbLVKxTFVMV6UGdhvxJvNuv9","tlshash":"b5430188b1b149cef4bd5a744fa5b4dc80cf03855313241be2cf2a3bed556018a5abaf","first_seen":"2025-06-22T12:57:21.222338Z","last_seen":"2026-02-19T08:22:57.711348Z","times_seen":212,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/icons/fire-icon.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/icons/fire-icon.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-583\"\r\nExpires: Sat, 30 Aug 2025 16:04:19 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1411,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6c5207d67857950fa8b65e08ee335639","sha1":"f8d6f45a717ff77dbf7d8c7f01468b7f6a339245","sha256":"da18fa3bae3456d74fac3ed77ea9d9d0ae267c8520e5cb814f392465ccfb84e3","sha512":"aa7b73c2bf42ac579153d65b686e06ab54360b78d4a2f7bfe0482bbaaa01c6816879b950e3f3a84b3849a0bda4cb99ed96ff81b739b59aeedec639a401a69b15","ssdeep":"","tlshash":"c1210cae834853eca487ca5dde3491b0370fa0b9b79f82e4a65ecb3080538c4dd83908","first_seen":"2025-08-16T01:15:06.673385Z","last_seen":"2025-10-28T14:54:16.200207Z","times_seen":23,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/games/ico/KillEmAllNL.jpg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /games/ico/KillEmAllNL.jpg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 69742\r\nLast-Modified: Tue, 08 Jul 2025 11:25:31 GMT\r\nConnection: keep-alive\r\nETag: \"686d002b-1106e\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69742,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"f6fa8a03d5abc09e8adefda159c59618","sha1":"0b3bb349fddefc3fefd3c3008475c256fec612a8","sha256":"3dd5839f119c5345bfe877931805b2f6fc8422b7d4955d4f90ee9517a14a1e77","sha512":"22621c67de76776109f285353e10756a8d819eefb849996b78146c8f4e50e17ac8b280fad3977091d9dd06ba14974f8c3cb1aa8881cbf9436d3d129275dca513","ssdeep":"1536:wxblqsdSn+9FMdOGG3cLpe1wMwkbO2GdcsOQu3DWR5qADg:0lqsXMdFdEwrkqcFDWR5q1","tlshash":"fa63f1dac35466dff6f0fbb26c4b8d5893924ee12360773e3d85514620dc3131aae9a8","first_seen":"2025-08-05T17:20:37.533938Z","last_seen":"2026-06-12T00:18:49.494479Z","times_seen":106,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":147,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/games/ico/DeadwoodRipNL.jpg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:21.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /games/ico/DeadwoodRipNL.jpg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 57786\r\nLast-Modified: Fri, 07 Feb 2025 09:54:04 GMT\r\nConnection: keep-alive\r\nETag: \"67a5d83c-e1ba\"\r\nExpires: Sat, 30 Aug 2025 16:04:21 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57786,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"9bf3bc96569465c6e11fb25760fe3d74","sha1":"d5817fac9971a4b3cc2daf8bae8166d52660ff4b","sha256":"9e40bc332d7979c61a7830c977983bafe96257ece7e9033a5931a052c005b6e2","sha512":"03da3c7b7dadb8f2ff58b93b7642709ad98eb166231ce62a4a1fa6967467836cca04d2e76cc6915c9143f87d9cbaaf488c481f60866e9add5d9c0f54c9ccbbe7","ssdeep":"768:QG4dHj0Bf8s5njeKfhKpf+w0Gg/E3JNkjA2osXNDgaQfzpRIG4h9j9hofRlc2qv2:QGYjUf3/4JhwE3pyXY3wh9j9h6G2","tlshash":"0243f1d5d21f05d8f9a148bedd329dc115fc5ca9c507761ef5c3302aa86eab22ac8620","first_seen":"2025-03-08T14:29:59.797664Z","last_seen":"2026-02-13T13:44:35.810265Z","times_seen":200,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":66,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/games/ico/FireInTheHole3NL.jpg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /games/ico/FireInTheHole3NL.jpg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 72251\r\nLast-Modified: Tue, 08 Jul 2025 11:25:31 GMT\r\nConnection: keep-alive\r\nETag: \"686d002b-11a3b\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72251,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"480e63994cfade2ac2765153870c7979","sha1":"d988ad62186bd89174ef3b68bcd16bd02f4812e7","sha256":"8fba0749d944e3ae15d783c931df600c8a6da87f9d37597bb9728a3ad05fef54","sha512":"51efa7a325fe7187f9c14f04a69c62abba9815bbc455081bbb8636884ed1c6faead05b0cfc54118a80261230035066e9d5cf898d0d67dbed6acd6918733c53bd","ssdeep":"1536:Y5gU93NDapkNqpQyA9GlCOgImSFnIjt6U+Nz2reWJt3YzBtZpLQC8VT:kDapCyA9GlCIFnIgOeWJJYzBtZyC8J","tlshash":"376312c659e996823358c1bd80be0e2fc3835f389799da33be601dd4db9a035c91b853","first_seen":"2025-08-05T17:20:37.047623Z","last_seen":"2026-06-12T00:18:49.608992Z","times_seen":103,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":142,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/games/ico/BonsaiDragonBlitzDDRL.jpg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /games/ico/BonsaiDragonBlitzDDRL.jpg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 83891\r\nLast-Modified: Wed, 02 Jul 2025 09:46:46 GMT\r\nConnection: keep-alive\r\nETag: \"68650006-147b3\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83891,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 464x348, components 3","md5":"fd785597dd255500f029b184e71572a0","sha1":"f5516e903bc28ddc62e0ccfd188cb936657be94d","sha256":"4da05107b2156106e30e4ac7277569eb6fa03c495cc851e7ea826083ab65b739","sha512":"bfc27f50fe67aca170188e668bfc3d7261d155dc1556e89fb26fefb8549382dd732f3dc1be1295e35fd7a28b2f0162d59e3950b8a4a7b2173a997dc74e3e6ce4","ssdeep":"1536:m5mGm/B+AUoVQYlfCcCbXxFc3QoCuUBF477yEBesrYL58gSG5tWSdNpq3ACmBZa8:mG/B+AU5yanc3hcBFGt3A58gvmArBZR7","tlshash":"81831238eef005d53f9727d4062faf298caa7d8265c659c69bfd19f29a4704c36c2821","first_seen":"2025-08-05T17:20:37.264219Z","last_seen":"2026-06-12T00:18:49.660477Z","times_seen":101,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":136,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gamacasino413.com/api/category?lang=en","fqdn":"api.gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:39 GMT","end":"Wed, 01 Oct 2025 11:24:38 GMT"},"fingerprint":{"sha1":"49:9B:4D:46:E9:5A:F8:7B:0A:B9:B0:62:CA:47:1E:D9:6B:63:61:51","sha256":"B8:C7:C1:D5:A5:97:F4:72:F6:CF:44:66:0C:46:FC:9B:8C:F2:FC:51:B4:C1:EE:15:A2:37:83:16:94:87:59:64"}}},"request":{"raw":"GET /api/category?lang=en HTTP/1.1\r\nHost: api.gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://gamacasino413.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3892,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f90c850df2bf4c56ee82b44e1888aac4","sha1":"cbade907505ffd4fdf7fb23e4c0338e2fdb17f76","sha256":"e564ebbe37eabd58cd569482eb2f038c36d14791e71bc45842f35c647ea0fe57","sha512":"9ac53029c1a2098254eecb0f6e1302fd4dc9567aacc4c9dbf3d870f156933f65211255eb1a35ff668061937a9615b8c0244f7674393575859dd87eb5396183b0","ssdeep":"","tlshash":"f581cf33e11449fad369bfc53cdf360629ea125c3dc0ee2a8a88d60902956f94727977","first_seen":"2025-08-05T17:20:37.480188Z","last_seen":"2025-10-24T13:57:14.506672Z","times_seen":180,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":43,"dns":2,"connect":31,"send":0,"wait":48,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"api.gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/icons/diamond-icon.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/icons/diamond-icon.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-59f\"\r\nExpires: Sat, 30 Aug 2025 16:04:19 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1439,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8faa344f1cc1aae26cab7cdf8c124d13","sha1":"9bd911ea55d2c76045990a46a7a6792fb0f13aaf","sha256":"5882ae75a7383f94a589bff3bc2b33e881e31b87c77bfbd97be879059735158c","sha512":"a90316f286e5d99ef13a0638ae64d2dac1906affc1194036566a1545c6b3d2f5f1366328801f7c448401805339baaf55fc5e1ee4baa5a800ee98fe7010b633af","ssdeep":"","tlshash":"5121ce14d2d92145212bcbf9d6bf3007151b38f70ec2544ff39c4aa3df066eaa593a84","first_seen":"2025-08-16T01:15:06.542446Z","last_seen":"2025-10-28T14:54:16.218641Z","times_seen":23,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/icons/lightning-icon.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/icons/lightning-icon.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-1b5\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":437,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50b91b6891a865e103798887fc18f29e","sha1":"f70e64f0628a951ac425846b6db03b43f7ba89e2","sha256":"5965dcb878be8b64e48623d461e117b6dae83fc26b473f4a74a8c303085fad1a","sha512":"3f728b608169c2fb38b3a358f85c06ed108dcefea9f76312b38cdb1afabf1ff0841ac4922e8f84f7d5ae56911e3c54bf13179902ac76ad2266901dd9a2991d3d","ssdeep":"","tlshash":"c9e0ab58a4ec062acb0c025030193454a13ad0c502c8c66cb1cc72263b5ec8f1d33edd","first_seen":"2025-08-16T01:15:06.252439Z","last_seen":"2025-10-28T14:54:16.231575Z","times_seen":23,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/js/c775408/chatcontainer.js","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:32.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /js/c775408/chatcontainer.js HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 16:04:32 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 71828\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"68a5820a-11894\"\r\nlast-modified: Wed, 20 Aug 2025 08:06:34 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-08-29T11:30:43+00:00\r\nx-node: m9-up-gc82\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":298448,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"121a81b58b2fe1381353fa74b29bf37f","sha1":"f2399f81e037e43870ebacaec05ea70ea24fcd25","sha256":"78b55aa83342da20d2ca142f652c4ea9022890e8380bc3b89293c4ecab701ac6","sha512":"d721284ab22598591d4619d222da3d8340aed2a41f977c273a0241e854ef2674d7a1ea9eb7930b89b5ea653b5351c81ba38ee6cee1dc3f9587ee9dda93ff9a22","ssdeep":"3072:ifHy9dHe/o7gMv/dDYfOLxIQ3i49XgXDeRoOw3Odayf81+9FP:4y9hHdDYfMxIQn9Dw3Odae8k9FP","tlshash":"6c542ac472d0f8a942e741da947f2101f2292c2df409b958f3f8dcd9ab5598e2266f3d","first_seen":"2025-08-20T19:14:17.38903Z","last_seen":"2025-09-01T11:30:14.326201Z","times_seen":83,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/css/c775408/chatcontainer.widget.css","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:32.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /css/c775408/chatcontainer.widget.css HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 16:04:32 GMT\r\ncontent-type: text/css\r\ncontent-length: 21164\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"68a58209-52ac\"\r\nexpires: Sat, 30 Aug 2025 11:30:30 GMT\r\nlast-modified: Wed, 20 Aug 2025 08:06:33 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-08-20T11:30:30+00:00\r\nx-node: m9-up-gc33\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98561,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"14653fcb6b98056fc2f1c0d0fa41c882","sha1":"873ce2441132fd1e5d39c4b29be3d5b7daf98d63","sha256":"3c3061a58a12ca9502e6780e0cf53eefaa4a63f118654561e641b30d8ba22f63","sha512":"04ae872ab59f6207ee30eb9d28dfcf8312244abda748aff6b25670812c9f42fa376d8f9678793b1fa74c9effc5d4006d78916eb304928e848b86c85fef087983","ssdeep":"768:ZGHrbqKsv6I7l6rKsv6IQbQm5LSwpOIwUwS45H9tuK7gfeuv93Uo+BoB5otexSt2:ZGHrbav6zv6T1SwG3bem1Bw5otexSt2","tlshash":"25a3e662b681652db01bc532eca2fbbd643dd012db231fbaea55b730c78b5d71722508","first_seen":"2025-08-20T19:14:17.396246Z","last_seen":"2025-09-01T11:30:14.29458Z","times_seen":79,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/script/widget/config/ziqY8DLV0e","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:18.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /script/widget/config/ziqY8DLV0e HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gamacasino413.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 16:04:19 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1232\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: gzip\r\nexpires: Fri, 29 Aug 2025 18:00:28 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-08-29T16:00:28+00:00\r\nx-node: m9p-up-gc69\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3024,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"e34dff3d65d3d16b7cc001b80519667a","sha1":"ffb14d7d41f0e0d5e18b680b2c2414fffb087a42","sha256":"b52186f4343188c6ea5f2a77b23b3e13513054da66aa500d106b82a3ef2d61f2","sha512":"641d3ac51f795e449f2401408cf142b6dc36b0ae22136aead69a3c33a49a70fcb1ed6fc7815887f7420277c3c36b95de905e6ee46ad332ae7a8988c12a39bb8a","ssdeep":"","tlshash":"4f5156711c892cb70a8afb83b187bd82547807479b815e71eaad8c3c3a5b654231b95b","first_seen":"2025-08-22T04:09:12.699944Z","last_seen":"2025-08-31T02:20:17.213099Z","times_seen":20,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":122,"dns":1,"connect":58,"send":0,"wait":68,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gamacasino413.com/api/tournaments?lang=en\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:39 GMT","end":"Wed, 01 Oct 2025 11:24:38 GMT"},"fingerprint":{"sha1":"49:9B:4D:46:E9:5A:F8:7B:0A:B9:B0:62:CA:47:1E:D9:6B:63:61:51","sha256":"B8:C7:C1:D5:A5:97:F4:72:F6:CF:44:66:0C:46:FC:9B:8C:F2:FC:51:B4:C1:EE:15:A2:37:83:16:94:87:59:64"}}},"request":{"raw":"OPTIONS /api/tournaments?lang=en\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://gamacasino413.com/\r\nOrigin: https://gamacasino413.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nAccess-Control-Allow-Origin: *\r\nVary: Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Methods: GET\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Max-Age: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T15:56:16.616317Z","times_seen":17582408,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"api.gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/icons/recent.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/icons/recent.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-19c\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":412,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"779234f2e86c5e386c4952cfe7d688bc","sha1":"541eeee42ef27b3fa7a3609313d275bf4a84ac4d","sha256":"d72f4749ea3cf31a27b69687bd03627b4a1b5c9d4ede532c35dd4caedb3d16b9","sha512":"1363f86e7ec463b45fc55abcd9806625fb18aeba5107728b28011f4b01f2935fdec94f050bfb333946f16239b375687acd25be5dd91477db1b8ac50ffa19c741","ssdeep":"","tlshash":"53e061e961e8934c0d4947123a3eb0ed5176f0bc12cd0cbef54c272ff08add95a42651","first_seen":"2025-08-16T01:15:05.920384Z","last_seen":"2025-10-28T14:54:16.179389Z","times_seen":23,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":153,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/footer/payments/astroPay.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/footer/payments/astroPay.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-1765\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5989,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"98a36d27b829e6de9be09abc8bab1cda","sha1":"c2122afd6703ae0013d0e1adbdd28c67ca74973d","sha256":"172c7dc8397760f691b6335433862132add82dcb72c3ee58b7d6f5d81a508699","sha512":"8cdad17709cf22c03fb25164bbfe5664903f5acc8c98f1ab7bb86cf53024decaddea8950fef8eb9af8c85bac7ed32afa34470cd4cfe89400482218a17b726272","ssdeep":"96:syqqHYHn7+X1/3PXnCq7do5h1ZBXJL2x4/sU5S/RFdeN2mjjM4KqL2VcmFCEc/Kd:suJX1vPn7dqzXJLBsSS/QFjM4h2imFCm","tlshash":"71c1b6e6537892bc45c79f5eef229951932fa0bab516c2c0ca6ddfa450c7c88f707850","first_seen":"2025-06-22T12:57:21.202247Z","last_seen":"2026-05-22T01:16:04.591477Z","times_seen":145,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":174,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/games/ico/AncientTumbleRL.jpg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /games/ico/AncientTumbleRL.jpg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 59077\r\nLast-Modified: Sun, 03 Aug 2025 13:56:19 GMT\r\nConnection: keep-alive\r\nETag: \"688f6a83-e6c5\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59077,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"c4ba4b35dd8192f6f673dd27ecb01be7","sha1":"10ffc673a6387be2edb3c059c90c1c93c2c2e5e1","sha256":"43bc6f202dcb0e8be0deac6a40c10fb9b6f5b826d5751f88d6b019435756dc89","sha512":"5410209a1227e0dcc7fc8ddd2a3709ec9480c5e2ec3ca0dbb8b88850a6b1cb661ba11a95e4a740c6e9a5e5a3482abbd94ac34b048ba58089a6e96b459ad77927","ssdeep":"1536:yHDdyP44znB0g+f40X3NJciNufoLRbbqVea:yjA48gw0NhcfGOp","tlshash":"064302b0e32f13c5ef9c0c7be9692d58daec015adf5ee14984ebea000e5079e1257e64","first_seen":"2025-08-05T17:20:37.296702Z","last_seen":"2026-06-12T00:18:49.721631Z","times_seen":195,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/games/ico/WavesofPoseidon.jpg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /games/ico/WavesofPoseidon.jpg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 83511\r\nLast-Modified: Tue, 29 Jul 2025 09:47:15 GMT\r\nConnection: keep-alive\r\nETag: \"688898a3-14637\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83511,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"3133bfb206c77491d0fbd715eacb3a12","sha1":"21501afbe2104039a871965ca0353c53ed1b5029","sha256":"43b619465db228e885e2029d17c38cc19e3b10dfba42be0ca70f1306545ff62a","sha512":"273db49ff3e3842677f57c56d5495df797a86c60e40d68aa8b916400c0d983634d7440111e0b05fbed7c1c8c4d13f17029247fc89c4d0e54b132bc7fd72a831d","ssdeep":"1536:MZdYP5H7r/AnXWeaHNJ0+JrMHnP3QuBvS41R8IOQJESksq20Oj:lP1vSWv02re3QU1R8ZQHkq","tlshash":"4883123294b66dfafeb96ab9c3901e6825f2c91007c10fcc39c8db97cb05d497a36491","first_seen":"2025-08-05T17:20:37.198738Z","last_seen":"2026-06-12T00:18:49.572581Z","times_seen":184,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":66,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telemetry.jivosite.com/w","fqdn":"telemetry.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"87.242.88.149","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:32.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"POST /w HTTP/1.1\r\nHost: telemetry.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 300\r\nOrigin: https://gamacasino413.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: JivoTelemetry/0.9.6\r\ndate: Fri, 29 Aug 2025 16:04:32 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T15:56:16.616317Z","times_seen":17582408,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":129,"dns":0,"connect":57,"send":0,"wait":56,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.gamacasino413.com/api/translations/en","fqdn":"api.gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:39 GMT","end":"Wed, 01 Oct 2025 11:24:38 GMT"},"fingerprint":{"sha1":"49:9B:4D:46:E9:5A:F8:7B:0A:B9:B0:62:CA:47:1E:D9:6B:63:61:51","sha256":"B8:C7:C1:D5:A5:97:F4:72:F6:CF:44:66:0C:46:FC:9B:8C:F2:FC:51:B4:C1:EE:15:A2:37:83:16:94:87:59:64"}}},"request":{"raw":"OPTIONS /api/translations/en HTTP/1.1\r\nHost: api.gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: skip\r\nReferer: https://gamacasino413.com/\r\nOrigin: https://gamacasino413.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nAccess-Control-Allow-Origin: *\r\nVary: Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Methods: GET\r\nAccess-Control-Allow-Headers: skip\r\nAccess-Control-Max-Age: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T15:56:16.616317Z","times_seen":17582408,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":127,"dns":48,"connect":31,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"api.gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/icons/main-loyalty.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/icons/main-loyalty.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-d9c\"\r\nExpires: Sat, 30 Aug 2025 16:04:19 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3484,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dda89900793b14d34712c8df3bbb445e","sha1":"c59501490d00f623cef4dd5fc73cc3a4c41cb89b","sha256":"478a087074a1ac54bd766a8cd80e4023daba819ce8fab7f6edff07636ac3ffd8","sha512":"aacb386ac0bef0de9e0f3017fe53aacbf59674784914c6178e818d82caa93c45806f987ffba42c3c144de28479d0271153d953bd28d0e4668288a13642363f6a","ssdeep":"","tlshash":"86711ce7a395b3c4e817dba1cd233638771b3cba3fe9c2d9c152999556221ad484cc84","first_seen":"2025-08-16T01:15:06.716425Z","last_seen":"2025-10-28T14:54:16.255126Z","times_seen":23,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":135,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/tournaments/tourn_desc-5.webp","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/tournaments/tourn_desc-5.webp HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/webp\r\nContent-Length: 177114\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nConnection: keep-alive\r\nETag: \"68a56618-2b3da\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":177114,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8e2e437096d68f00456309683b2f1c70","sha1":"c1ffc7ad9c961de7d10796aa48dfc7d9682718d2","sha256":"2e273ffe3b2f5263a9416d2e452634d36ebada27935c7c0425fced3ba843482b","sha512":"1e08f4767a4e5205be43b60bd9384e6865e4745c36fbb61aacbb4ad6cb2b36c0a253b94a5efd4274e76d59e9bc5df2473aa5333170d9960e7189690b0e0ed5c4","ssdeep":"3072:MpwzObspxKwlSr7Exw+G1cOMRpLhyKg1XgTeosYoM7asve9aXmfDMs5g1f02RIq:swKILpk/Ee+G1gJ5zvsYojsqfDMEgfAq","tlshash":"2e0412dfc40af6b855bbacb833980caf606055541cd7192747524f7c228ebade52e38a","first_seen":"2025-03-08T14:29:59.835094Z","last_seen":"2025-10-28T14:54:16.27429Z","times_seen":25,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agstatic.com/wlc/flags/1x1/ru.svg","fqdn":"agstatic.com","domain":"agstatic.com","tld":"com"},"ip":{"addr":"54.240.174.48","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.agstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 25 Mar 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:22:43:3E:BA:C9:EE:89:8A:DA:E5:F1:6E:A5:1A:CE:62:7D:8C:8A","sha256":"A8:15:5C:3D:F0:FB:92:90:3A:8D:33:6C:77:5D:61:01:E8:D0:25:40:55:13:A1:47:54:B6:2A:66:2C:61:44:8C"}}},"request":{"raw":"GET /wlc/flags/1x1/ru.svg HTTP/1.1\r\nHost: agstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 294\r\ndate: Fri, 29 Aug 2025 15:48:30 GMT\r\nlast-modified: Tue, 26 Dec 2023 14:45:29 GMT\r\netag: \"b5556eb6e16708fd2f7ccfc0b204bc5e\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: xXKkXPorcSbYVCTw6kHgTcOopXsl9zxrwOeiT2d2M6IMLHksgWReDA==\r\nage: 951\r\ncache-control: public; max-age=604800\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":294,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b5556eb6e16708fd2f7ccfc0b204bc5e","sha1":"f46b9c780444a4513b32d3972dd13b42ae386a9b","sha256":"1562997120cc48657c55544098ab20d6ea0b635d223a2d21a32f2888d0247a1c","sha512":"b8d13f7cd9dc54ed22b9669836e033e6b2afb3486bd0447bf401b71b5cff1675e30858567e68d99029cd4c31ec7f6e44b2403bfd0b240b1471db29bd2b43825c","ssdeep":"","tlshash":"b7e01291988cd54cc94942358f3cb1b3607bd8c965c0158df5a12d1120d33b75c55adb","first_seen":"2025-06-02T18:43:51.073879Z","last_seen":"2026-07-10T20:37:54.85204Z","times_seen":168,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":32,"dns":24,"connect":5,"send":0,"wait":3,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/games/ico/PrayforThreeHG.jpg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /games/ico/PrayforThreeHG.jpg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 63098\r\nLast-Modified: Mon, 14 Jul 2025 10:22:22 GMT\r\nConnection: keep-alive\r\nETag: \"6874da5e-f67a\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63098,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"7fc821e5171665da61ec1a836c08e32b","sha1":"698feb3cd29e00d569cd58ed3767c8dfb5ff13f2","sha256":"22812947b66d0cd7d72b529692cc0f386f4063fab0ed791eecc3546cebcf5498","sha512":"dbaa16980867ab1ed516c7bbd01ff329fae864f6546954c4aeb82457d5cac3ceafae3b22ebc86e0264e42d7dec81a82b60c473be65e36e260512230f84fb0778","ssdeep":"1536:noZwopIZaXniEQjpIZCvLelvlS/ww3/IDGR5E8LNKmQL:noZXpIyiFj6seWD3/5c8ImQL","tlshash":"1a5302273e486391ff3297f16436cbdca5d11e49646884c274f5b042d3b6ca2bb729b2","first_seen":"2025-08-05T17:20:37.549425Z","last_seen":"2026-06-12T00:18:49.590882Z","times_seen":102,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":97,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/runtime.d442bc55bbc78f55.js","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:18.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /runtime.d442bc55bbc78f55.js HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:18 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-e99\"\r\nExpires: Sat, 30 Aug 2025 16:04:18 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3737,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3737), with no line terminators","md5":"b8e8dd438fc7a8b09a8a9e6ee008dbbf","sha1":"ac9b4aeaf9865624f7a89dd656e3c79c468d2a00","sha256":"aaf18aec86d9a85674d2ba0c6d248f911bbb021b3db1ee0d083e3245c6b23448","sha512":"d2f35c22a69b697de475a8dbed149ea76375cf591104ed36871185924d2eec8c18993b0707983d383dc22d7318f6cb284bf525c592d4e029a0c144d10fb37311","ssdeep":"","tlshash":"4571f8b52218fd7626f204c5583dd681a3087837465b94b2b76bfcbaa069dd20825ff1","first_seen":"2025-08-16T01:15:06.012355Z","last_seen":"2025-10-11T19:16:38.73949Z","times_seen":18,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/banners/Gama_welcome_boxes.png","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/banners/Gama_welcome_boxes.png HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nContent-Type: image/png\r\nContent-Length: 129559\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nConnection: keep-alive\r\nETag: \"68a56618-1fa17\"\r\nExpires: Sat, 30 Aug 2025 16:04:19 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":129559,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 464 x 400, 8-bit/color RGBA, non-interlaced","md5":"a9609fe1fc87ef2703267b1eaecdc6d3","sha1":"bbac33d492d008c7cb13cc7add790e7fbca41373","sha256":"982d0f3572e8c044cabe4690407f65bd5b152ba4145b75f942d6c3a8a81e3005","sha512":"96efbb1444b8f29e848bb89ae4d92135efa14ba6e014847c5eabb92b8cd6ff2da59104fe7b542dbb5bf0b6528e4c6aa9bc1cee7e768c8fce93f79ea8722303bf","ssdeep":"3072:IX3Fk6UY8FabXOYSEV4hhx4xg2C+vfHqkozvZMHclL9aEIyofWj:InoaqYSEVeYHHIDL9aEIBfk","tlshash":"8ac3122fa385de9028fd4a376f809189c96c3918c7cfd418692ed51cdf5b23a91f68d2","first_seen":"2025-03-08T14:29:59.959356Z","last_seen":"2026-05-31T00:29:46.246656Z","times_seen":65,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/icons/search.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/icons/search.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-265\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":613,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8de169ab79ba9c4afd8e5abb97f11d97","sha1":"94e5f828fe21c2a71874fd8dadfa39a0028e3c50","sha256":"3cd4604e75190c3b95e93ea79f075c0275db6407af8bc613915eee7ef452f0fb","sha512":"5af640efbda69e1cd0e1bcda03d6856a7867e4fc909183e114c0aa52981378981b98dbe78967ad6c6399be5806f6210b594e097637ac3a1afb8b36857467a3b6","ssdeep":"","tlshash":"17f049e851e873d0d519f309862934193a2261f5772e8c0af55fc2c01e04c589e4a5c8","first_seen":"2025-08-16T01:15:05.849646Z","last_seen":"2025-10-28T14:54:16.150309Z","times_seen":23,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/icons/dice-icon.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/icons/dice-icon.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-5e7\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1511,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"21dcbd2b0c9e14da808a15bff7629c21","sha1":"5ea9132ac3cf4f542c96cb7cdd06b779fd668e20","sha256":"f5eff69cf602f9940fb82a12de3fefa975a2bbcd0a65a271222949b4e1cccec2","sha512":"802390b18e2e2840d51556a7275eab4040650b57cecd76b4e7b39611449abbab66e204a5e751f9ecb83013ca815b8f7eb94f106fe7ca5141e72a67fd896a341a","ssdeep":"","tlshash":"fb314d595326c694d584f7689545bc301eeb02c4b5c0cf8553eba8cee46688e8cb9cc7","first_seen":"2025-08-16T01:15:05.883621Z","last_seen":"2025-10-28T14:54:16.181077Z","times_seen":23,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/loyalty-program/2.png","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/loyalty-program/2.png HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/png\r\nContent-Length: 5454\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nConnection: keep-alive\r\nETag: \"68a56618-154e\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5454,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"73b4819fbdc4cd2480bb6972d21a4eb2","sha1":"580bbf1b4ac3748b41781236a281a050a6a6f57f","sha256":"0d588174c782caf9e2600f16de4373528be3f91d6391f9262bbbb755ea29d6ef","sha512":"eae64c7a8aac8a24ac03b4e25d8c367a407daf0a21643da6d3013e58d8a34975a732c9ecbc408e815da424abb1f022557fee740931ff30c704e65f4bfeaa4989","ssdeep":"96:/WXcngJEKKmBk1IldMsaNj7fGDXeS5xuAQzvJfU/dHkM2gAn3:/IdJkIl+sg4XegMAQz8dE13","tlshash":"d9b17d84745e79e00b722141c4a341e8ee9c6a05dc69afb3df5ca4d588f7e90340a5cb","first_seen":"2025-03-08T14:30:00.031074Z","last_seen":"2025-10-28T14:54:16.174506Z","times_seen":25,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/games/ico/BeheadedNL.jpg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:21.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /games/ico/BeheadedNL.jpg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 55731\r\nLast-Modified: Tue, 17 Dec 2024 10:14:15 GMT\r\nConnection: keep-alive\r\nETag: \"67614ef7-d9b3\"\r\nExpires: Sat, 30 Aug 2025 16:04:21 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55731,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 432x324, components 3","md5":"91712e4e821c5438156227eaa64ed773","sha1":"b135b73c390951365de1c56dfd70eb46ad6ed2c0","sha256":"bb33897f047c21e80474f8addead1c44b99ebb5025adafb95fe06261e3d91c2f","sha512":"a6348708479abfa304bc85008f7eec58070467eb056784a72c87cbc5a40246010b21dfe16e91de60aa785536a6bc2a49b9e295372c58372442a646e12495da22","ssdeep":"1536:Ft6R9d+NAg5BSAOsKT8LEgiUrxl+iWmy00:Ft6RmAgZOsKTIEqrxl+R","tlshash":"da43021830cc4194f67d66b7dd28feaa00ed54dc27d8bba3058d4e114aa1fd59ef8e82","first_seen":"2025-03-08T14:29:59.992218Z","last_seen":"2026-02-19T08:22:57.884471Z","times_seen":213,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/styles.ffc8a242704bfe25.css","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:18.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /styles.ffc8a242704bfe25.css HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:18 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-81820\"\r\nExpires: Sat, 30 Aug 2025 16:04:18 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":530464,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"085f1fcf8c04dd18c3984ce4378cb1e0","sha1":"84e64a1f01e7bc78d61c2523527ef06b665a5c21","sha256":"38c27e4382f9bb254eea8a8b4576436a67691f8c47edb7bbb9798f839f1a5f39","sha512":"146aa923df4cdee01cd3d46dad4417434df0bc9ea4e7b8d38bd8d5533a3b4c2a25c3d0f6cf9291fabd4e737ca72e6da5aca02d6868030424e813cf68089804ed","ssdeep":"12288:Y1IhSdiD7DU6byXVRsvgIjHFH0d+vJLVYLLzTfTyWQbW0ZdB9YB76694+9yi+5td:Y1IhSdiD7DUOyXVRsvgIjHFH0d+vJLVz","tlshash":"dbb48371e028a1e6bb23c46ffb84b6e857b5f95ce6031d9df059cc0c86c5122619b72b","first_seen":"2025-08-16T01:15:05.856252Z","last_seen":"2025-10-28T14:54:16.181924Z","times_seen":23,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":131,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/banners/BannerCat_2-19.webp","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/banners/BannerCat_2-19.webp HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nContent-Type: image/webp\r\nContent-Length: 33498\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nConnection: keep-alive\r\nETag: \"68a56618-82da\"\r\nExpires: Sat, 30 Aug 2025 16:04:19 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33498,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"91c9b7ff41e9b7b1ba957f922a3164ae","sha1":"23b05c97583971c97e1a088d7f638d8c5e7eab66","sha256":"ec2dd99cea31f659db98213463b0ca080d7f11c99cca39f25c43833527fbffee","sha512":"e966b1be20e36ff9cfe61fafec2f339760167fc26b2511d4d6c2def9203182c28535745dcde6222785b233b6ca6f47783e09c8efbac4a0a73648a5ad4a75a7de","ssdeep":"768:imNIOvFoJwZWX9fD72zRYATbK3XYax84gR0Y3sY1G1zd4J8w7dm:XNXtydtH2N1Tyw38Y1G1zd4J8l","tlshash":"4fe2e1497c14b48bac1d4d8e4f3d3778e9ed14a8a7162fc056247a39674f0a16b47bc2","first_seen":"2025-03-08T14:30:00.003344Z","last_seen":"2026-06-28T01:26:31.934501Z","times_seen":65,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/footer/payments/visa.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/footer/payments/visa.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-4d5\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1237,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fb44a62c392a656466cc4292c9b01c85","sha1":"da5416404e086527d249121a0e02b121b6282d23","sha256":"f596ff685b00268e18c8a108f8775fbb10d4cc568fa8fbbd162e944df9300ac9","sha512":"75f411e468604379c0959ff8108d22ac3cb94597e6a82cead9e87396d53e8318e036156502513522451ea464b3d3b6bb51c0060e87d2c4c72455ee414577dd4c","ssdeep":"","tlshash":"e521e0c9b5b846bc889d479ae72a714428eb60bd78118e44f34cdcf09a72a9da448450","first_seen":"2025-06-22T12:57:21.080048Z","last_seen":"2026-05-24T00:49:22.674969Z","times_seen":218,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":126,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/tournaments/tourn_desc-10.webp","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/tournaments/tourn_desc-10.webp HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/webp\r\nContent-Length: 85540\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nConnection: keep-alive\r\nETag: \"68a56618-14e24\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85540,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6385ac82b5bca94c2bcd70593e3cf154","sha1":"727ade7fdad87d17b783a90581f1636bb827b998","sha256":"2d28ae92237b5cd802e14aefb463ff8f09f3d93d1c70370646845821602e5ebd","sha512":"1629d7b8ee509515959016dab462daa8bb3e01720603c3d2627a13b2806f7abe24ff9253f1a87b22c50b7f27320a4b82f14874004172028b0cc97ee6ae290bfc","ssdeep":"1536:s+JJwNmh5+YpKNu3Aw5tjP5Z8BuYPx3WBjrEjujnTjyFfqLIKf/hgSSdXu:s+JJR5+YpmczFZ8B79WBRjnqFqhgRXu","tlshash":"928302bbbfa7f352ef73a3fc7a845688bb961b29ca1250f9b1f46d3000412459d1d04a","first_seen":"2025-03-08T14:30:00.062841Z","last_seen":"2025-10-28T14:54:16.151865Z","times_seen":23,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/footer/payments/ethereum.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/footer/payments/ethereum.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-1c2c\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7212,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3fe499243090a7dc549b24c1b9429f7f","sha1":"3b2d21f6225ca42bdc073c72232d1a993b293b1b","sha256":"161524c2c8f622ae04f7cc826368f931e489fe7a990b68db701aa81dc8159f71","sha512":"cfa25450d0f995b67327ad5e9a1c6a516bb421a2b026257aa7e22ef9d96b166bf24db0e3a8c7a44b9c8bbfe2f16840b9a94f7fd3623786112d969c234775c5c6","ssdeep":"192:Ax6geMbCgSrnuVk5RnK7GdYZMlQXVNlLlN:x9gqumTdYSlyP","tlshash":"d3e1c7dd1f3107cce884d2fb6f2694d9318ac9fea5488885d3ba8d3aa4d14b44d5acc3","first_seen":"2025-06-22T12:57:21.20873Z","last_seen":"2026-05-24T00:49:23.070595Z","times_seen":219,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":184,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/games/ico/AngelvsSinner.jpg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /games/ico/AngelvsSinner.jpg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 91758\r\nLast-Modified: Mon, 28 Oct 2024 05:57:26 GMT\r\nConnection: keep-alive\r\nETag: \"671f27c6-1666e\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91758,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 464x348, components 3","md5":"51ccd61c083756fb9a62240f86dcefa9","sha1":"75b0142be63508a1f844dad09e15e7f770ae8a57","sha256":"6eb0f603fb35ac8b3a353d84b75311e46396b724eb3be56d9446101e83ee7c93","sha512":"1911cb7fe74b0c7cee0e43b5494fc5d12777636cda74030b35bf4787ef0e0fe24c59771ac016b0b41751002d62f39d488d108aaeb2e3a309e7418819c08c25e3","ssdeep":"1536:Jy0vuk+BGzn8vAsoYXJ0XHV4Q5e1Xg2LvZk8E8KktOEDV6C4EkU0+/s1wiIvNiyD:JTWLB4oA+Kd5UbxagcC9R0+K/eJD","tlshash":"23930211996596f9f5c47920b8e48adf32e66434c5bf74ea60e34b820bd38347b7ed04","first_seen":"2025-03-08T14:30:00.033927Z","last_seen":"2026-06-12T00:18:49.671937Z","times_seen":10,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":70,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/icons/tournaments.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/icons/tournaments.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-24f\"\r\nExpires: Sat, 30 Aug 2025 16:04:19 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":591,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"38acc7f48e8be247c804321a20c2febe","sha1":"a777b04689675e91ac9dcbf569b528e0683e27b7","sha256":"24b6310d833d1cb0d4411fcd294b37e8cd4ec3f7c5586748ab9acc662207e874","sha512":"73b241841fae61d426369a550b7e1f2225a314fe4079e90b5a18efbc7f2029cc2414f537b9747b5fb537170e3cb6a13d6ab8eebd4eaf83d1d3cc7f9c03b65483","ssdeep":"","tlshash":"e5f08be4d9ecb2f0b90ac302d21469557f69b13a432dc78ab5d0bbe1361cc6618ca6dd","first_seen":"2025-08-16T01:15:06.137613Z","last_seen":"2025-10-28T14:54:16.204541Z","times_seen":23,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/tournaments/tourn_desc-9.webp","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/tournaments/tourn_desc-9.webp HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/webp\r\nContent-Length: 181258\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nConnection: keep-alive\r\nETag: \"68a56618-2c40a\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":181258,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a91ae639e4788eceb6aeeea87e050771","sha1":"011bae91bb828d6e0c7b4ee67e7675893cdaef8a","sha256":"841fd59349619c14cc47e0663647a06102cdfef0c2700ec37a32043e85fdfc97","sha512":"13d78fc95cee1f2c080aa1409513633ca73a9829849a1858113b63c46d83a74616c5539c2496cc4fe403083810027b1189eefefa6d13b62492ab5b0a489c17c0","ssdeep":"3072:ZlK/32XU0V/LSrHlaEj4Dl5FI//PB/ROR2NZikr69FGYcUKjZlsXQahUtF:G/3OnUH0FI/B/ARD9FjZSX","tlshash":"460412c5eb6a83aeb29ef56340e25c35c9d81a59987717879ce08c88c894247ccdd3da","first_seen":"2025-03-08T14:29:59.853504Z","last_seen":"2025-10-28T14:54:16.192874Z","times_seen":25,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":67,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/games/ico/XwaysHoarder2NL.jpg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /games/ico/XwaysHoarder2NL.jpg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 69719\r\nLast-Modified: Fri, 07 Feb 2025 09:54:04 GMT\r\nConnection: keep-alive\r\nETag: \"67a5d83c-11057\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69719,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"873b9f49061efc9cc74b8067033b9e93","sha1":"83dc9db5b4b95a50030e3305c6d2a29eb8454845","sha256":"45c0b313bc983dece484dbb235a88e911bdc5d121d1e46d690d3137df7e6e45a","sha512":"7cbdb7728a4e1ad34c52a7dacaf10770bd23ce51f5fb7dee95679b8a426f0bbf4282fc209c31d65e76568ae28db64641bd3089d9d13b9c95e58bf803abb17f52","ssdeep":"1536:T0i8gcLkVTdICxXcMpRqwuTQ04sLEWpZPVA0L:I3k76weQ0ka9VB","tlshash":"2763023f5018e2eb52412fa91d5b4874a6ec45f24c96786a73f34cd2f557342b9c63b0","first_seen":"2025-06-22T12:57:21.154828Z","last_seen":"2026-05-22T01:16:05.056424Z","times_seen":215,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":67,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gamacasino413.com/api/game/last?per_page=30\u0026lang=en\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:39 GMT","end":"Wed, 01 Oct 2025 11:24:38 GMT"},"fingerprint":{"sha1":"49:9B:4D:46:E9:5A:F8:7B:0A:B9:B0:62:CA:47:1E:D9:6B:63:61:51","sha256":"B8:C7:C1:D5:A5:97:F4:72:F6:CF:44:66:0C:46:FC:9B:8C:F2:FC:51:B4:C1:EE:15:A2:37:83:16:94:87:59:64"}}},"request":{"raw":"OPTIONS /api/game/last?per_page=30\u0026lang=en\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://gamacasino413.com/\r\nOrigin: https://gamacasino413.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nAccess-Control-Allow-Origin: *\r\nVary: Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Methods: GET\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Max-Age: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T15:56:16.616317Z","times_seen":17582408,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":84,"dns":1,"connect":34,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"api.gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/banners/BannerCat.webp","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/banners/BannerCat.webp HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nContent-Type: image/webp\r\nContent-Length: 22910\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nConnection: keep-alive\r\nETag: \"68a56618-597e\"\r\nExpires: Sat, 30 Aug 2025 16:04:19 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22910,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3cfa79a1940ec4dcacb845de36bd85c9","sha1":"da8a20a60db787aacfba362d14cd0698fbf6a517","sha256":"a40a623da087a3bc75068e8ad18e61d1aa908d7bb5ec075e4d8316219d2fd6fe","sha512":"80840de100640de9688f7da6487cb9074270390c6a6d07b683beca866cff36ef16aea7f803b0942d5981934c3512f202ab010c48b5a8c473ef07a0031abd71f4","ssdeep":"384:uibQeKwVByQk9JLJhtXdyBj9dsTdUiCQRvD8EZQnQJLzlkPPywZoKh/nGSxiA3yY:u1e/wQk9ly9dsTdUhQxASzs3fs1e","tlshash":"e0a2f1e73cfa3585c83e4112e8fc9a5d7a2e3203c64182c1e87999d12cf66bcb24d8c5","first_seen":"2025-03-08T14:29:59.960398Z","last_seen":"2025-10-28T14:54:16.245139Z","times_seen":25,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":86,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/banners/BannerCat_9-1.webp","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/banners/BannerCat_9-1.webp HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nContent-Type: image/webp\r\nContent-Length: 21366\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nConnection: keep-alive\r\nETag: \"68a56618-5376\"\r\nExpires: Sat, 30 Aug 2025 16:04:19 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21366,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c635c2cc5c3cddeba8816fe709b1323f","sha1":"69d1e76343c81e9e76a8610468998a882a2bb4c5","sha256":"aa58b1de9036e3d8e8a5af9560e2d5ebc84cd3f647f9b0da3155632f95273b02","sha512":"30347356ec7888862a8ca3139c117eb04fd4e6c0e7329d01f0942c4520f12adc0cd9907a487c94f4babce528633c281298941b1fcb5a2079f57b23f0df062ada","ssdeep":"384:ndzoEEhMjpJVfLTJh4HKjkv1kUfNAPqiWN48682Tp3Cb8JRV/oJcN2fcYbL:dEthixfYqjwkWSPvWyT5CfcN2fDbL","tlshash":"daa2e085c484af52bcf7b6ee9432e4a9a60a1c8f62dd4372ee55322e70e1570f64c1b0","first_seen":"2025-03-08T14:29:59.961476Z","last_seen":"2026-06-28T01:26:31.97325Z","times_seen":65,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":74,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/banners/public.avif","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/banners/public.avif HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 14410\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nConnection: keep-alive\r\nETag: \"68a56618-384a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14410,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ISO Media, AVIF Image","md5":"8c4dc9bf15d8108ed5e34850df94c8b8","sha1":"342ef4470db54f3cf31f7cd19091a4b0a0946feb","sha256":"f4f705389b4c0402ac0967bf71d22c328ef486f23aba56048078568196542ee2","sha512":"77e16f8de7b18d3a4adf1887085e0e670de7c8d853ca06cadd2933845a09d9fbe3989cbbb85484b7163250dcee5081e405850bb3cbf9e80a8b600bcd4f86cac1","ssdeep":"384:dkucVJinIWB+Rg71oaGACoHIT5BUyldqUrLPePlmYKqU8Q5XSX8:dkL/yBcA1LGKoFBB3rLDYT7MSs","tlshash":"e952c028b34daf54ea04317c102eb8213649ad962497a0ca36353d4c6ab86fff4b654e","first_seen":"2024-12-21T22:28:58.050016Z","last_seen":"2026-02-02T22:51:55.729808Z","times_seen":82,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/banners/rub_gama_dropwins_header-scaled.webp","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/banners/rub_gama_dropwins_header-scaled.webp HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nContent-Type: image/webp\r\nContent-Length: 91390\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nConnection: keep-alive\r\nETag: \"68a56618-164fe\"\r\nExpires: Sat, 30 Aug 2025 16:04:19 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91390,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2560x640, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fc87815e1f66a6ab5163011e20196fbb","sha1":"ba8a334b9f246e226275a52082e0e4ade64dd292","sha256":"0f3f1f0e065330b4b4f5bf3644ca9ff2025264dc031c9392b0dd7f264b184456","sha512":"94528e8905a1cc071da385c052843952efc87cb5867d6194823a5c7b902cec21828e3d0cca42c4e69d11cc23f0a8bce36cc90a544eab9652a92addf5bfb4d0e9","ssdeep":"1536:xjVvLndg8dNhALPeuzxp2qLi3G/j2Naaa9hjj86G2ZKvb0UFhbOaP8iXXdl4jzs:RJLdg8dNhALPeuzxxsKjca19l86ndwpn","tlshash":"819302b4abc40eb816d5c2fb4bb467a5181ec5104476382f6f6c56ccac23a2f44fe897","first_seen":"2025-03-08T14:29:59.851454Z","last_seen":"2025-10-28T14:54:16.224625Z","times_seen":25,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":84,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agstatic.com/wlc/flags/1x1/ua.svg","fqdn":"agstatic.com","domain":"agstatic.com","tld":"com"},"ip":{"addr":"54.240.174.48","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.agstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 25 Mar 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:22:43:3E:BA:C9:EE:89:8A:DA:E5:F1:6E:A5:1A:CE:62:7D:8C:8A","sha256":"A8:15:5C:3D:F0:FB:92:90:3A:8D:33:6C:77:5D:61:01:E8:D0:25:40:55:13:A1:47:54:B6:2A:66:2C:61:44:8C"}}},"request":{"raw":"GET /wlc/flags/1x1/ua.svg HTTP/1.1\r\nHost: agstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 249\r\ndate: Fri, 29 Aug 2025 16:00:31 GMT\r\nlast-modified: Tue, 26 Dec 2023 14:45:29 GMT\r\netag: \"57d4015f254507bdb4e39b2e8193c2b7\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 8K7Aj0BWTRvG6J21AeOI8W30dByqC9veGlZBIBeXK4iUyNA32uE6Mg==\r\nage: 230\r\ncache-control: public; max-age=604800\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":249,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57d4015f254507bdb4e39b2e8193c2b7","sha1":"004c37ca50a2cdbc025a0d033b5f9bd56ca57b47","sha256":"d1e8353bf48e58af71cc8ed25d65a1db1013b26d6fd8e8116073731f8011eef3","sha512":"1ee2f466f447fc7d3dd4a3f3245cded880b56c7ea26dc48c59b4490a9876e7ee24db77f3a4d32589340ecb7d3d1c797f3d16071be5b773aeb53af09448302f85","ssdeep":"","tlshash":"9fd0a7f492bc551ca42843348f2c72cb6667604a72f82595f1502c24265e6eb9c5b7de","first_seen":"2023-07-21T14:15:06Z","last_seen":"2026-02-14T05:30:50.894723Z","times_seen":55,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/icons/game-play.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/icons/game-play.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-55b\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1371,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bfacd2642e4b9a2ea3829dcf328a3ce5","sha1":"4b3fa8960909698abfaf376ed660fdf9e154a98e","sha256":"33a5b895e48e115e44d07550ac7d9e2ab361afdb08ae41c956446e8e20694665","sha512":"e1ad62c47dd79de9bf70507c1357221b71b8d399553128754b5ee2c242398e7b263a3a257ff519dbc0e2e8ac26b354d7889d1b10d69882e8defef25bdf7558c2","ssdeep":"","tlshash":"ab21ee816b2d6069b300ebe5faf0fd2ac84415e97db1ae61c7e14ad2c50c8ed0e42cd7","first_seen":"2025-08-16T01:15:05.906155Z","last_seen":"2025-10-28T14:54:16.21538Z","times_seen":23,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gamacasino413.com/api/translations/en","fqdn":"api.gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:39 GMT","end":"Wed, 01 Oct 2025 11:24:38 GMT"},"fingerprint":{"sha1":"49:9B:4D:46:E9:5A:F8:7B:0A:B9:B0:62:CA:47:1E:D9:6B:63:61:51","sha256":"B8:C7:C1:D5:A5:97:F4:72:F6:CF:44:66:0C:46:FC:9B:8C:F2:FC:51:B4:C1:EE:15:A2:37:83:16:94:87:59:64"}}},"request":{"raw":"GET /api/translations/en HTTP/1.1\r\nHost: api.gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nskip: true\r\nOrigin: https://gamacasino413.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76416,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f46483966241dd94efb7d4698a8fee5a","sha1":"2c7b947436efdf32abebb6a1ec7894e65bb58134","sha256":"2d14b071585334ab0d2b9201bf8161074788f7a289ac1f87d1f37587e4ed3041","sha512":"cd18169c821c6994ffa1827b1db4539686dd7d36e3db8e8f77d62932034adb7a6578a438fcc3ae6ef819347ce6db72418019e9c8b0690b7b7ee0087f9d846ce4","ssdeep":"1536:6Ffmr58WOGc6xLNtUVugpA9WKSfFDG7/ZfAfl7X78B0W82eZ+8dnNSc/CCq9FfrO:4uF8eNtUVugpAkRdqrR+AH3vm","tlshash":"3473d75fe78c23b307d202d07a8f67e6b76d40786362d5a478adc12c2359d355a339d8","first_seen":"2025-08-16T01:15:05.966175Z","last_seen":"2025-10-21T16:44:04.586486Z","times_seen":22,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":50,"connect":34,"send":0,"wait":52,"receive":25,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"api.gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/games/ico/BloodMoonWildsYGG.jpg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /games/ico/BloodMoonWildsYGG.jpg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 63699\r\nLast-Modified: Tue, 17 Dec 2024 10:14:16 GMT\r\nConnection: keep-alive\r\nETag: \"67614ef8-f8d3\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63699,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 432x324, components 3","md5":"01e8442265301c2a63078213fd6e59f2","sha1":"dcf5697069884cdf6e3c94caedfefd0e8bae64ca","sha256":"c530f0b5f40c3ed541cde0cf042dff39ade625ca8ae000530d2c4f7ec10b77f1","sha512":"3b8f4a42a3452fa0030129bd2de97d06231fb473d06c67464ca84156adae1a4eb032431d7f692643f3971eef39f0b763e402a25e68a2d939df546bf9d86fd769","ssdeep":"1536:g+tuhwu5QtNJXyXxkiT68/pcT51lnde2vRdiELJ8GFlDIwiHQb:9tmw0mhwxPT6opcLln0ELJ8G4wiHQb","tlshash":"905301afa112ced679e5547cc81a1d644aea1de659df93bbcb99ced038f0d03241470c","first_seen":"2025-03-08T14:30:00.018035Z","last_seen":"2025-08-29T16:04:49.987461Z","times_seen":3,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":73,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/games/ico/TsarWarsNL.jpg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /games/ico/TsarWarsNL.jpg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 60455\r\nLast-Modified: Tue, 05 Aug 2025 05:28:19 GMT\r\nConnection: keep-alive\r\nETag: \"68919673-ec27\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60455,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"90f78bf8ef7b8c08f7ae77e20d621283","sha1":"958db61788c0737c26af3514283d9f77c96112a4","sha256":"d3a924194ca9a08cd7ef2e4aaa460ebd52600284a8115a8f54c75db27e90a378","sha512":"486784ec4529f5ce2b8a2fa928f5bff3d910a49219c9647e2aed54a1d5ffadd23585ab2e218cac7d717cf75105f552f321e1b3f4168e272c7cf8a61f8e5e8fca","ssdeep":"1536:o/AhdI+Iv3UaUyy2CAdx/0pM5l+/LY7dwxa:o4TI+IMDyVb/0pMwEBwA","tlshash":"2c4301b5718b97d8fe4e37ba05e67de0c4c33fe60aa712e3a5edc38540054664829233","first_seen":"2025-08-05T17:20:37.292167Z","last_seen":"2026-06-12T00:18:49.646057Z","times_seen":196,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/icons/promo.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/icons/promo.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-370\"\r\nExpires: Sat, 30 Aug 2025 16:04:19 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":880,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"38c84e18ea45e7ab0b2a2011602671e3","sha1":"6f19e421ee332ac31e3b812f7bed7d3c1c18eb3a","sha256":"f5da4fa124d5bb52897619d963fd8b6c8c042fdcbca915744d00cd49f643f6d4","sha512":"7f278847ea5aafd28c4fddfab5a669cd5a0eea7dd8a49ca2079dcae708ef6917d2da07b9885bdcfbe0ba10a96ee23299ed1e99344cb9d32babc2185ce989caf8","ssdeep":"","tlshash":"3411e371811c55ae85a7cb788f3b4146732df0fbbe608364b54d46f7b50348dd847120","first_seen":"2025-08-16T01:15:06.637564Z","last_seen":"2025-10-28T14:54:16.213948Z","times_seen":23,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/footer/payments/master.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/footer/payments/master.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-348\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":840,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"65c3e82ff58fc44a441f2f66a98b468d","sha1":"a44fbbaf538a17bdb70c2c2eae6abaf4bbc2a47a","sha256":"54cc8b9b5ae72dff20e674903762c4f25668bc87da2c55c2a3978691e43e2cd5","sha512":"19da66a80cf63453e02b62d40c5705fedf190ff9b425f31c1bfe16a03546aabc904baaa0cad360d38323391345719a687b0e053a2a5f1862086bbab0125f204b","ssdeep":"","tlshash":"8e0188ccd27c91a8fc0c53c98f24246c3e4aa23e5270c1daf00e98a496d6c95c410ba3","first_seen":"2025-06-22T12:57:21.081259Z","last_seen":"2026-05-24T00:49:23.477892Z","times_seen":219,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/tournaments/tourn_desc-8.webp","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/tournaments/tourn_desc-8.webp HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/webp\r\nContent-Length: 205608\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nConnection: keep-alive\r\nETag: \"68a56618-32328\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":205608,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5b915346d0a248fd53c5dce64653395b","sha1":"cfc8dc865c3d6ff001547d5af1800e386fcb33ca","sha256":"ab39e1cf362b1ee85bd77e03b505dd52d80f9c55f3544648b992ba59eb5223a9","sha512":"03878438f46c05f529d10a5c82bc43958f4c9f6d54bbae78b7b1c4a4fd2bee7b8c5265204687fafd83c7bcfa2b3f4e459a391003d0663049dabc29f3de96cb84","ssdeep":"3072:y6jwUn2WhNKKRLKfLac2pWMKR0eXqdxbjgeBShUtwka9RCkkvaqYsppL63dz2I+G:zwU2WLnWacxR0ewxbHSswxX+FVxUdBf","tlshash":"1d14231845e79a9e19f77db9d301a53200626f4300fe3f8e9a0b9947d5ae4458bc82ff","first_seen":"2025-03-08T14:29:59.896071Z","last_seen":"2025-10-28T14:54:16.261995Z","times_seen":25,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/loyalty-program/1.png","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/loyalty-program/1.png HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/png\r\nContent-Length: 5774\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nConnection: keep-alive\r\nETag: \"68a56618-168e\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5774,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"5d50b7e44fe6c49ea196cf17fa90acaf","sha1":"6687e221d67481fd2d653a8c352548425473e64d","sha256":"8a1e1c1d4352a536c24b26c969c8891fe1a67ac3ec4be0a2db4c22643c7ce077","sha512":"f5da5221cfd6baa4e8ece7198594798d6721c6c4259439de4c4310075fecc89c91f5b11a3c9e6ed411ab6e933062b077a40fb57a95ce7156e5382f1282ab9c93","ssdeep":"96:ouw4e263gh/eHD5YyWVUeiXEhLel01+Z/In5iNCiO++VJ2mjST1fI0:Yh26SStYyW6fEhL6K6g5rjIi0","tlshash":"4ac18e55453a5318808adaa950393254f2f0e17c7f53ff72d76223c0bceea2a3aad100","first_seen":"2025-03-08T14:29:59.98919Z","last_seen":"2025-10-28T14:54:16.234251Z","times_seen":25,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/games/ico/TheDogHouseRoyalHunt.jpg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /games/ico/TheDogHouseRoyalHunt.jpg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 86403\r\nLast-Modified: Wed, 23 Apr 2025 12:35:06 GMT\r\nConnection: keep-alive\r\nETag: \"6808de7a-15183\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86403,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"85be01ca421281e9410f72e99a70fa89","sha1":"41ff31e656d56896a05ab9f859c8172a63436712","sha256":"0224881420bf0589b29f229ca7e9f3c0fb45960d4909f1c714c76f61ec303ebd","sha512":"957a6a3a6702fa000d8d932cd822bbd315f24fbd05ac9ec4ddd6c390c5997f75774f7e963fb06620ec5d3ca5a4e9f15000a0eec0a6059e8de60a2e00b00cbc82","ssdeep":"1536:FpQ6wcmPClQ6k0qMwZYQILPfhJhFRxyXGkBoXysZai9patNckDt3rvko4ogSTI94:L3mPuQ6vqMwPwPfJFRxyXGkmWhvkzhhG","tlshash":"b083125c6bd7d472d5cf6e680f404b89f0d4b7b080ae82e726c03f2651b79e29a446e7","first_seen":"2025-06-22T12:57:21.041199Z","last_seen":"2026-06-12T00:18:49.53587Z","times_seen":23,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":77,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/footer/payments/tether.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/footer/payments/tether.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-ce7\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3303,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b7623eec1db8da3ee0ab1aca15c81ea","sha1":"7376c1080dbcd43c0a87153b0f81738090c1ae67","sha256":"1c6845faee131c97bb9c586095cda10016abd0f82f8e704eb86d9fc219cace8e","sha512":"d5051c0cfce9a1bfa9defdedda8e79161eec3b601664c4382486409058fce507401b69055c48b4c39379d41edc97668935f40bf51c1f50bc717c980a016268c7","ssdeep":"","tlshash":"3c6193dc76a851fcb404f2ee2b0721693d0624fbbb684a50f62d4cde3996884cc84ef5","first_seen":"2025-06-22T12:57:20.92505Z","last_seen":"2026-05-24T00:49:23.610091Z","times_seen":218,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":217,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/games/ico/FireMyLaserHG.jpg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:21.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /games/ico/FireMyLaserHG.jpg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 66598\r\nLast-Modified: Fri, 28 Mar 2025 07:04:47 GMT\r\nConnection: keep-alive\r\nETag: \"67e64a0f-10426\"\r\nExpires: Sat, 30 Aug 2025 16:04:21 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66598,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"b0b7d3ac64a423452e7b6aa580af0410","sha1":"4493aa0990d48fa40eb3166b5c1888fc19899399","sha256":"4179cfd27a3dbfdb19b17d6a3b806f4adbcff5ff59dfe484539845387312f6da","sha512":"d84d3bc3ad01e7016cf7f6e1491369abcdcd17243348527fa7a45c4798bf30f558705ab1ff392bc169c343036ffe3ddbb42fb589728f66073a1c343e66164295","ssdeep":"1536:rCX83NpBz1ksNKqHTwpD/def9/antpmz6zrasRfirUFHHb2f8dhDC+mj:C6PBKsNJHADkanH2sRfjFHyfAh2pj","tlshash":"ee5312133b86bad8f70d737ba225cb342cb4963560b93a4976ed915af203931d0631f2","first_seen":"2025-06-22T12:57:21.164905Z","last_seen":"2026-02-13T13:44:35.664222Z","times_seen":211,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/sounds/notification.mp3","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:21.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /sounds/notification.mp3 HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 16:04:21 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5808\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"68a5820a-16b0\"\r\nexpires: Mon, 22 Sep 2025 18:50:22 GMT\r\nlast-modified: Wed, 20 Aug 2025 08:06:34 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-08-23T18:50:22+00:00\r\nx-node: m9-up-gc69\r\ncontent-range: bytes 0-5807/5808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5808,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"9aa341af370c4e59155717260ba0f282","sha1":"0c1216ecead8d1409557c843d96202c063f3f252","sha256":"1112436abea08c851302bba4d4e37a27e25e5ec26b20474667a3369d41154bab","sha512":"e6663f8406d859a7ae65e6eb9512ed1e79244b8f5b2119823f80fed99c17dd4a086cc17083f3cd70b6dd990c39b3be80142f303a7c2a9fbb9302147e700fa5cb","ssdeep":"96:XYLRSqytFnbfWnHBaSvgEyZMZuiusJ0jQDrrQNw:IMTnbfGhaSvg/inqc0m","tlshash":"cac1297acc3c146fd81e88b53f3bb0c9421c61803a00d8e61c99bb5bd6b2ba975468d2","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-07-28T04:56:45.463772Z","times_seen":16642,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/css/c775408/widget.css","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:21.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /css/c775408/widget.css HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 16:04:21 GMT\r\ncontent-type: text/css\r\ncontent-length: 18447\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"68a58209-480f\"\r\nexpires: Sat, 30 Aug 2025 11:30:17 GMT\r\nlast-modified: Wed, 20 Aug 2025 08:06:33 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-08-20T11:30:17+00:00\r\nx-node: m9-up-gc10\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":113923,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9d3703823f1b24818d48934739c248b8","sha1":"50d5ef6e339a699688994b3ce4bcd2cafae682b8","sha256":"b41f916c2cbbcbc05ce9eca4e34863fbb74f3f278e77f7da73f43af1f6df7f6a","sha512":"da28d5cf3fd5a34c0a09d2742ac50894d14968f033e154e9ed24937d2c6c35bca2614e8c9aa0e3220fcf6f079e71a6007992fcd5524f2d0780b6bd0356b0583f","ssdeep":"1536:SL5vTKGyO6G6PrhmDuzyP2I2CjSQpaye6A69+KlI47UE6RFkPQeiLOcO3DX6jck6:MS8UdM2XDMOshR","tlshash":"11b3d866ead2953ce91e541ac8c5aa3ca53de502cf330daff344f3e147c66e21276909","first_seen":"2025-08-20T15:19:29.028965Z","last_seen":"2025-09-01T11:30:14.294092Z","times_seen":178,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":68,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/widget/ziqY8DLV0e","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:18.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /widget/ziqY8DLV0e HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Aug 2025 16:04:18 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6197\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\netag: \"68a5820a-1835\"\r\nexpires: Wed, 20 Aug 2025 14:29:16 GMT\r\nlast-modified: Wed, 20 Aug 2025 08:06:34 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-08-29T15:28:32+00:00\r\nx-node: m9-up-gc233\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18073,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18073), with no line terminators","md5":"bb67ace13289d0a81d036d9fef5831a5","sha1":"899370b37be05ac62acc0eaea3be85094ac53de0","sha256":"f86b7ffc0af355910158533d9fbf988232bd7656e53450579a53ffffe6d029c8","sha512":"050d81dd86043d98d3974bd5ddb63c8aa6bab6464ea5ca7045d77b01fdbc383d0780736a98e86f87e4000012de4a406749c741ddfd0d29719e1c6a01ff6a42b7","ssdeep":"384:boUJJkQymrml40+rANbl0q09TmF0q6QlEeJBz8U08waxceb4:6lviAfJMKv8UDxceb4","tlshash":"04822b6e7959b93743b208b5a16f6209b33549ebd404c920a405e94c7db8edf813fef8","first_seen":"2025-08-20T12:20:50.31739Z","last_seen":"2026-01-03T17:18:00.984344Z","times_seen":187,"resource_available":true,"data":null}},"time_used":472,"timings":{"blocked":198,"dns":37,"connect":65,"send":0,"wait":69,"receive":1,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/polyfills.796ae930d7e03a02.js","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:18.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /polyfills.796ae930d7e03a02.js HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:18 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-892d\"\r\nExpires: Sat, 30 Aug 2025 16:04:18 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35117,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35117), with no line terminators","md5":"45d74b85955e14c850b822c285850e2a","sha1":"7755800d46772b9d5d8dffa17fa4b3208e1a0171","sha256":"4d3cb08f890c6388ac7c3f72975058a1b08b6b1d5eb6c515890af1c861a7b839","sha512":"4c9ad7967edad381b96e4e18407f2e47b0ccc77cf812f16cad2f5d5c355e361ecb3805ce897d09dcf2cc9f23482dbcb24d34cbff75f7b6e1f44311d0b06917b3","ssdeep":"768:W+KL5a8UIjImvY7dSu0NMrLDnvtcnSX0jQ3wo6eWehnGeivq/9Y+pPPMHpFxDKsr:JIM+zedc1LQ8I4J3KytiTpQ","tlshash":"8cf2f8d63792b0b28bfa55f5917f8007e63624a0784c88d8f15d98da3c3705a91a7f3e","first_seen":"2025-08-16T01:15:05.869377Z","last_seen":"2025-10-28T14:54:16.243636Z","times_seen":23,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":137,"dns":1,"connect":65,"send":0,"wait":75,"receive":1,"ssl":74},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/icons/arrow-circle.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/icons/arrow-circle.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-2c2\"\r\nExpires: Sat, 30 Aug 2025 16:04:19 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":706,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"14c1038d1bea6e5b3c43646c91fde520","sha1":"1af0c767b2d8427c2bccc7e56473b552b578d36c","sha256":"659fac3d09c395ef1ca892d6fedb21ad55f70e64b5136779f9e2c1fd73710506","sha512":"0afd9b8d3522692c615434578c9afc1129894a6d3197ef98f1f831b7cb1cf49a1a8409074be39d66bfecf8b6f0a0d2e11dc12fdab13ccc640c32e67935806fa9","ssdeep":"","tlshash":"fd014ca4f06495a00803ab39c63d9cd86466b9be67c3a4c0d354d4951654af8ee0dd86","first_seen":"2025-08-16T01:15:05.794977Z","last_seen":"2025-10-28T14:54:16.269339Z","times_seen":23,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gamacasino413.com/api/game/last?per_page=30\u0026lang=en\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:39 GMT","end":"Wed, 01 Oct 2025 11:24:38 GMT"},"fingerprint":{"sha1":"49:9B:4D:46:E9:5A:F8:7B:0A:B9:B0:62:CA:47:1E:D9:6B:63:61:51","sha256":"B8:C7:C1:D5:A5:97:F4:72:F6:CF:44:66:0C:46:FC:9B:8C:F2:FC:51:B4:C1:EE:15:A2:37:83:16:94:87:59:64"}}},"request":{"raw":"GET /api/game/last?per_page=30\u0026lang=en\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://gamacasino413.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5452,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6dfbae93a8102330067a4a817d57377f","sha1":"ea416e71beef93a460018ac5d04ae2980418a3e1","sha256":"e897419d4d561bbd8554ff2e71aea8c3f00a65a5c04f8250dd572bf5698a353a","sha512":"bdaa9438f2cc89037e9f13e6e22527210a2929196e9e58725c1859743170653315d6af44848f1f4f924fb581940fa53fcf7ee47c5ae8aa75729b187b676ddee3","ssdeep":"48:Y7sh6J+BG6ZLZRkwy43HxLmJvJ7JKzBCjJ3+0aY7gZAqm/YBa+6:v6J6mhVf+0aYEAt3","tlshash":"bbb113598f9bccfe7354a298296bb1ebf55c203770c0daf41028d904aef957760a721b","first_seen":"2025-08-29T16:04:49.999607Z","last_seen":"2025-08-29T16:04:49.999607Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"api.gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/tournaments/tourn_desc-7.webp","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/tournaments/tourn_desc-7.webp HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/webp\r\nContent-Length: 110838\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nConnection: keep-alive\r\nETag: \"68a56618-1b0f6\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":110838,"size_decoded":0,"mime_type":"image/webp","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x345, components 3","md5":"4bff6e8e2326149a79dfd7295712abca","sha1":"97084679bd95e6f2c50b3cfe285ba150f954219b","sha256":"2ce32d235824aefe2915240a4a749a2f7ed461d8c45c6bc611055d61cf6228f5","sha512":"1d1e70bb438691c3804baf4a4c677878b60afc27f550a2610e3cb1e6a231a7aa1634124add56002341ab0a774979a4169b86085adf28d2ddd0cfe19508c76ac1","ssdeep":"3072:3gVq4ZEL0Q4xXAVcbuMpuNsn/38Op89j6b:3gVHiLJ4x7H008Eb","tlshash":"d3b312c08e83de14e8e84895a6adf500ff2f0a468f55b14787f51a42f1ed4e1be2a4f1","first_seen":"2025-03-08T14:29:59.947181Z","last_seen":"2025-10-28T14:54:16.248218Z","times_seen":23,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/main.ee0fe4ef966a0b35.js","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:18.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /main.ee0fe4ef966a0b35.js HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:18 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-1c165a\"\r\nExpires: Sat, 30 Aug 2025 16:04:18 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1840730,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"24911aad7072acd43fe8c5a4a46542ad","sha1":"310017671f85102dcc7562e2d89f3d5b218d799e","sha256":"5aa96762807cd3b3811cc80c5967dbd6dbd32dac1cffc52ede0880680d3e5a9c","sha512":"ee6d8e2645c68b176354233209630d217f0f8bf24bd9ebfe3685db90c6f63eec3b54e00c13dd1f7a9ad7d4f2dc4cacbf6dae12dc1023f761ce9064f31544be3c","ssdeep":"24576:Yz8oYCwAtK7X2LnCvvgd4+hWv/mkm0ZgaXCiecQnoxPX5yDw1gb2xXXsxEZK+fdN:Yz8oYCwAtK7X2LnCvQ4+8/hbZ7XCiecF","tlshash":"ed254aa67230e07a4adb554670265684623ca40ce607b888f3fccddc93eedd961a777c","first_seen":"2025-08-16T01:15:06.055602Z","last_seen":"2025-08-29T16:06:10.782414Z","times_seen":10,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":89,"receive":272,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/games/ico/BountyCountyRL.jpg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /games/ico/BountyCountyRL.jpg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 67176\r\nLast-Modified: Sun, 03 Aug 2025 13:56:19 GMT\r\nConnection: keep-alive\r\nETag: \"688f6a83-10668\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67176,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"82711bdb2ca1cbfd34b6fda72c831863","sha1":"6e43493a00d8dede191737cfbdda4e7bf5555aae","sha256":"f84404cccd4a53c5ac2eddd964ee6b574f506410628e4e4e9770c0ad8a7d9097","sha512":"f50ae95a0c9d6a0d956a88296673b57dc6c832a9c46168a7f81624025f740f1b01ec552134e3ab63358c86ff1a4640e9eb5239ebaccb8e00c4904e2edf92b7a8","ssdeep":"1536:sKIpgaHuzVtHiTB5xdSR9SkYt6CyCjLEAq4BWa75:sKIuaHufYviS3NyCjwAq4P5","tlshash":"c66302e63b72a392ea76b43482c978dd01d44f1bd74327a13ae8712507818476f6aff4","first_seen":"2025-08-05T17:20:37.117598Z","last_seen":"2026-06-12T00:18:49.635644Z","times_seen":196,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"node-sber1-az3-20.jivosite.com/widget/status/2256902/ziqY8DLV0e/c2cd3c4e6183c291?","fqdn":"node-sber1-az3-20.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"178.170.197.234","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:32.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/status/2256902/ziqY8DLV0e/c2cd3c4e6183c291? HTTP/1.1\r\nHost: node-sber1-az3-20.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gamacasino413.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://gamacasino413.com\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\nserver: foxy/3.5\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\ncontent-length: 183\r\ndate: Fri, 29 Aug 2025 16:04:32 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":183,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2ec81c087da314d762446057c7f86978","sha1":"35738613fc9fe15db1b7ae1f30cace8590ea37df","sha256":"1919869ee851f25640e6ea0ba324bd57369659606a8c620bba40ff1fe337f1c0","sha512":"010b5470c05d640122b3f666df5dc2cc6c5de428eab44d97dfa674c422d82349e99bb73a3be5b549a3936aae7071e82c8a6923f627c0578993fc544880a051fe","ssdeep":"","tlshash":"6ec022310c3a4ca606888220b0c73b0b092401123ec19d08a680e85c206b2c2804e00b","first_seen":"2025-08-29T10:11:18.890744Z","last_seen":"2025-09-04T13:32:19.985591Z","times_seen":15,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/logo.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/logo.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-cbd\"\r\nExpires: Sat, 30 Aug 2025 16:04:19 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3261,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4d575d85ab77b19a60e1f504f5ed018a","sha1":"f043854bf8a587808efe416515509eb8e34f117e","sha256":"2945805da7479187d0c4bf0003b7a6d660f243ff3d8377d5a90abebe440b58a9","sha512":"23235639b3bc6694cb54031d09fb802a87525337ccf1e5f889eebf0dbde21c36d0f780908b9d53306e529d2a1baf72d712ef041ee3ef046903d8181f357a57ed","ssdeep":"","tlshash":"8f61b9ef37b47282c448d39fb7a0342e2b0d68f645ce4a26d32f4b41bdc8095ee16458","first_seen":"2025-08-16T01:15:06.699177Z","last_seen":"2025-10-28T14:54:16.192072Z","times_seen":23,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/icons/crown-icon.svg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/icons/crown-icon.svg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a56618-1ad\"\r\nExpires: Sat, 30 Aug 2025 16:04:19 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":429,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cada204d38925246046e9f92405b62a9","sha1":"4905e64fc415474bfbe23b34d66b19e1fcc10a08","sha256":"01c53508c806a284ed73ab905d3b7c7f96a1b877e5fff64d7e9ad14f6596b38f","sha512":"4db516c02cead060706b6a285ddaed9b75e5feee2a23b2216f1e589470c76cd63806aca8116322829d8aa20f4f503512f4057f4555afbc7e2cf28b4e3c5e8e6f","ssdeep":"","tlshash":"bbe0ec7c822d42ecc18baf785a3451556b4f30a67243c4e0e54c427521735d6c4e7564","first_seen":"2025-08-16T01:15:06.393598Z","last_seen":"2025-10-28T14:54:16.244426Z","times_seen":23,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/loyalty-program/3.png","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/loyalty-program/3.png HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/png\r\nContent-Length: 5904\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nConnection: keep-alive\r\nETag: \"68a56618-1710\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5904,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"d5855f655031cce48db2a1a163bc1e42","sha1":"f4340adc42d2fb1fb4e826d35092a1ea1fff4819","sha256":"189da749553a74ed12828a2a4c489e4e1085be184281f19da1b164f135680923","sha512":"98490d4faa1e76f590a7fc45889fdf20ba018231bcf5fb922d633c2f187b814f49532d26f738715253347c6cf3c6f5664ddfd76b4ec49466c5569a0bec3d650d","ssdeep":"96:O4Ka15YPyKPPieO1pkcSqEMf4btFK/w7IRR8fNA6SEiXAX0v11cWauR9uNIjq:7K+dv/ocdg3AqFiXA9WaumNIjq","tlshash":"22c19ec3ad2a1a2be70409b162f0dffc9f5a3004c7b52c7f781b905614464265972bfd","first_seen":"2025-03-08T14:29:59.766986Z","last_seen":"2025-10-28T14:54:16.273631Z","times_seen":25,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.gamacasino413.com/api/games?lang=en\u0026device=1|2\u0026page=1\u0026category=30\u0026per_page=25","fqdn":"api.gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:24:39 GMT","end":"Wed, 01 Oct 2025 11:24:38 GMT"},"fingerprint":{"sha1":"49:9B:4D:46:E9:5A:F8:7B:0A:B9:B0:62:CA:47:1E:D9:6B:63:61:51","sha256":"B8:C7:C1:D5:A5:97:F4:72:F6:CF:44:66:0C:46:FC:9B:8C:F2:FC:51:B4:C1:EE:15:A2:37:83:16:94:87:59:64"}}},"request":{"raw":"OPTIONS /api/games?lang=en\u0026device=1|2\u0026page=1\u0026category=30\u0026per_page=25 HTTP/1.1\r\nHost: api.gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://gamacasino413.com/\r\nOrigin: https://gamacasino413.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Fri, 29 Aug 2025 16:04:19 GMT\r\nAccess-Control-Allow-Origin: *\r\nVary: Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Methods: GET\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Max-Age: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T15:56:16.616317Z","times_seen":17582408,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"api.gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/footer/restriction.png","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:19.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/footer/restriction.png HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/png\r\nContent-Length: 1012\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nConnection: keep-alive\r\nETag: \"68a56618-3f4\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1012,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 37 x 37, 8-bit/color RGBA, non-interlaced","md5":"3815928064e26373f788940be86ec1ac","sha1":"b9b1f0636209573fdd6c170288734fce1ff73dd6","sha256":"cbbd2a30452e97830866912186431f2ad71a3abf4400ab149c094bea28833196","sha512":"b554bf90553e39f3007b141368e4828f52bcfbc66248dce83a938e9a9144ce93bd021757515c9083e461ed166271d79e76ea01ec2152395bf41e0c08cb49879a","ssdeep":"","tlshash":"9511a8095acef46bc5541c7f3695e1e418b1dc065424c837256c4d2674586efc098e43","first_seen":"2025-03-08T14:29:59.864621Z","last_seen":"2025-10-28T14:54:16.171997Z","times_seen":25,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/assets/img/loyalty-program/5.png","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:20.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /assets/img/loyalty-program/5.png HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:20 GMT\r\nContent-Type: image/png\r\nContent-Length: 11362\r\nLast-Modified: Wed, 20 Aug 2025 06:07:20 GMT\r\nConnection: keep-alive\r\nETag: \"68a56618-2c62\"\r\nExpires: Sat, 30 Aug 2025 16:04:20 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11362,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 161 x 160, 8-bit colormap, non-interlaced","md5":"2a4d3d203e6964fc7ff0e55bb9f5bead","sha1":"05a842db6e5c105551a4756369147b3dfa485d3e","sha256":"b963aa579738e5446ef721ecff61404ae269966a851b26ec9d40351753eae850","sha512":"fbdfc43b5c87a74f4ff3271f0874f5f3770463d55396f833205f443c7c53b06663b95dc891b14d16f0244a76d59446583731ac433ae2bddf075bd19d145e65b1","ssdeep":"192:wi/BrMSWUIayP8jIcyNZcNtDmgqrrUhIi9/iSqgGpksJ6tRT9z//Xpkn/:wMTZIRP4IRZcNtpq0ii5ZQatZ9DZK/","tlshash":"8d32c01fb90f05aa7f867f732e5222d092262f2e21469fd7e014b26226fe346085cd31","first_seen":"2025-03-08T14:30:00.004667Z","last_seen":"2025-10-28T14:54:16.230648Z","times_seen":25,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamacasino413.com/games/ico/DDayNL.jpg","fqdn":"gamacasino413.com","domain":"gamacasino413.com","tld":"com"},"ip":{"addr":"185.196.8.2","port":443,"asn":42624,"as":"Global-Data System IT Corporation","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://gamacasino413.com/","date":"2025-08-29T16:04:21.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamacasino413.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 11:28:39 GMT","end":"Wed, 01 Oct 2025 11:28:38 GMT"},"fingerprint":{"sha1":"86:28:5D:11:60:90:C6:33:37:5F:77:EE:E7:41:76:FD:53:A2:F8:68","sha256":"BE:0C:D5:0A:35:C2:BE:56:33:C1:2F:53:C9:34:A4:51:A0:8D:5B:FC:6F:CB:97:DF:E0:0C:29:88:CD:4A:C4:65"}}},"request":{"raw":"GET /games/ico/DDayNL.jpg HTTP/1.1\r\nHost: gamacasino413.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gamacasino413.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Aug 2025 16:04:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 43787\r\nLast-Modified: Fri, 03 Jan 2025 08:59:27 GMT\r\nConnection: keep-alive\r\nETag: \"6777a6ef-ab0b\"\r\nExpires: Sat, 30 Aug 2025 16:04:21 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43787,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 464x348, components 3","md5":"ab18c9785d9391f3d524426a685a9cab","sha1":"7fc7a9f7e5cff997813eab3e348a761a8ef7de4c","sha256":"ae96dcffb8001aa616d8e48b0ff085c00ce8a0ab27bef5d1a31a8ef92114838b","sha512":"ac4d1ed06c779e38c161bc7ac6d4e73d275186a78c166ae487bc2f75155a27b5177262b22b96442ddaf251482b9d8522da3e4224791808a7b142e1355e4ec24d","ssdeep":"768:xY9BPdM3fxslmJxmYcKfVPbmu4w2qpUm92qDfhphwSyA3fgUGzV6n:xYV8ylmJRHf1XF2q6moqVphdjvgUGzVw","tlshash":"b613f1654f0c24d1f542c6ea7ca72e35cbfe7030b62368c5e5c5f42e14d96a2ae9842e","first_seen":"2025-03-08T14:30:00.027868Z","last_seen":"2025-11-17T11:06:56.162247Z","times_seen":125,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":67,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"gamacasino413.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}