{"report_id":"3a8a84fc-a869-4dfb-b3d5-fe71bfa4a54d","version":6,"status":"done","tags":[],"date":"2026-02-01T17:27:54Z","url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"172.67.178.228","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"title":"Mycasin: Crypto Casino Games \u0026 Casino Slot Games - Crypto Gambling","dom":{"size":374650,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30051)","md5":"cd2ee26a1347a467e767565b46ab845d","sha1":"c72bb25ddafd61d6ad2c7b1e501fb22bce9a1507","sha256":"a1e773b4e4572ab6513a306f689889546a4998fabd515018e2b6f1511819574a","sha512":"ed32b37e6c5faa844a3c6f130af0f6d7f2a570a5eefbef0be909826c72a499d70f636b930eb8eb916caee390912e342a063a97afb4a62b389f7e74c755c18962","ssdeep":"3072:JUIJUctdVGiOC8Cu+iNMozaBAUkmKYtv23D6M/2yT+VvzrhJUo/i2/8Gtxo:JVttBrIQTS","tlshash":"bb840a68e402da68e4275ded317aaf3a918fd677ca63c85cf3dcc5a403868798f915c0","dom_hash":"domhashe80857976db0cc2ec0d05722ad4cba59","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"172.67.178.228","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-08T17:27:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-01T17:27:26Z","timestamp":1769966846,"ip_dst":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":46450,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-02-01T17:27:26.716807+0000\",\"flow_id\":1119477001279179,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.44\",\"src_port\":46450,\"dest_ip\":\"188.114.97.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"mycasin.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3445,\"start\":\"2026-02-01T17:27:26.710347+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mycasin.icu","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-05","domain_rank":0,"first_seen":"2026-01-31T21:15:16.779732Z","last_seen":"2026-01-31T21:15:16.779732Z","alert_count":410,"request_count":205,"received_data":9480596,"sent_data":170539,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/ce91559d705a6f80.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffca57ca28216716952658164becacfb","sha1":"558ae2e920765a2076592b4b168b3d4ddf339d5a","sha256":"bb1d593df6a0ee012c5e177fbff4f96e75910044292eb6e9d451a35eb38c2c2e","sha512":"c7bfd7c23d31e691b37e6158532f112b8c8a7cd587476f7330b4d41c6aa9e8113d2cfc819c8a4fe883caff42d186b029ed92e0f03ab20c04ca3024852228bc1b","ssdeep":"","tlshash":"2051acc21a4803bda9c691747215751393ae21bf75dfb4e4cb2d14b8c293888eb734db","size":3112,"data":"","first_seen":"2026-01-11T01:55:53.524258Z","last_seen":"2026-02-19T17:02:28.647973Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b10f9b9006411b6afcb5843e7c57c31d","sha1":"a7731eccb8b59abe9c0743003d304b3453e69938","sha256":"30cd123786f0b612a543aebae24a5dd7ac167190d35ec78e66c949a4ce868f44","sha512":"e5f863b39ab02a5072a1c5087569aac9fd79ead2888c61dd36312cb32910bc428a2aeb691f194bd3444c3ff6c6e146b26689ec519b06c2100864149bcafb8671","ssdeep":"","tlshash":"6ff081f47452f9a7c5a23424013b7f17176f110e75089810d71fd154573aa3b8393a8e","size":573,"data":"","first_seen":"2026-01-31T21:08:57.386599Z","last_seen":"2026-04-28T01:10:54.359165Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/3d29fa3d9e6cec4e.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"103bce398bf72f998ccceacc2ffe6e80","sha1":"db2b28d3061395776a370a3539b6ae3bf15d9dce","sha256":"29b058437c3f7686ecf84d33045a537cd24e4f01807e2af5cec8649b51b1dc18","sha512":"10f6ace8ef1373d40e4d4376c214dfaa5e4a45a1dd6a6a0106a59756da63c78791241555c08f24471707cff6fe63ed751d2acc6a6dd00b6ca7538073507e54f1","ssdeep":"96:v0dZm2etxGIWIA1srSVMS7frIDtjyMB0whWDxcxv:R2efGII6sr8j7focv","tlshash":"97d1734891969bdcf5b704a8e92e816cb06d5fa5cb5d0978f9bd38351e000d07e69bcc","size":6370,"data":"","first_seen":"2026-01-31T21:08:57.217994Z","last_seen":"2026-02-19T17:02:28.862354Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"10d8b01b1b865a519be7d5b88e98bcac","sha1":"80cc14de2c8bb984866e74720f37ad57a80e9acf","sha256":"ce33f60576204820a75cd31723620bd7247276841db0647fb820abea4c8ab03d","sha512":"cf9a2f01ddc7113f81551041381a6e81350c9febe4b7f24f2143df7177c5bdf87a4cc5ef95a5a14ab06aeab4a710635b1e8c60e816eeeebe0766eeaa643d7208","ssdeep":"","tlshash":"f0f00e358b3c10220aec08f9c0898be83e2d7262e0245060fc69de7d0948cafd053eef","size":525,"data":"","first_seen":"2025-07-20T14:54:50.990021Z","last_seen":"2026-05-03T11:29:44.74931Z","times_seen":1359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3e3e350f78cf22bd7b335d70b41a58a","sha1":"cce22220b6a8dff76692755cc45439b4ec474a4d","sha256":"ee6bb81f4e9fc030a39a7c71affc4d1f2b900baa4b4c7af83361388d7c39599b","sha512":"15b6cbf8bd67e82a4952004138ebc95c44e4d373317826f1560eeec13416cc1d6a38d834609ef4b713e7a9c92d1b1bbf84de08e2e4061ed3d1e3891982c25b0a","ssdeep":"","tlshash":"3f90025ff2302063a756122b166f15456421626565550869123830eb4955148474265c","size":57,"data":"","first_seen":"2025-06-30T14:23:19.448274Z","last_seen":"2026-05-03T12:48:14.752767Z","times_seen":42908,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/5664bd740cac6a96.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"838e5b67c708c3caa4ccae2ab6eccfcd","sha1":"b2666226e6fb839315d216fb69074265386b6b8a","sha256":"3afd0a23cf42518fdca2dfc42bffe1b2c611189b89799ecbae2386434adc8e3f","sha512":"845acf9755edd329f45184ad9bccde9249a2018ea514934ae462a84992c69b4db39d636b842de7d5c71b9187c3e2fedab2b41095dadbbfeb40a683b3f9d8c76a","ssdeep":"96:p7ctuv2BtSDxfARZ0kqJFv2H43uuqoE91YTkqdYqiEAXjv2YM:oBtDRCkqJFezuwgYjlXK/","tlshash":"d0a1b6b231a0f490d16b4294c03b441eb27a2d3e609d71b493bd8cfd67e544de6a2f97","size":4813,"data":"","first_seen":"2026-01-31T21:08:57.248038Z","last_seen":"2026-04-28T01:10:54.184543Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/def7cbf195df9f5a.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"971912a88b8fc321b1e02c9bfdb119c8","sha1":"13a51b0bd9f9f2c32118f3d9316f40f973a5323a","sha256":"7514ca2d94bdf7565bf10f198d551a4a1b715765d20f7587aeb1591b808686c9","sha512":"bc0517c20439d8656f1c01310675031fcbc20e9b2d1ded2ab2462d47e47342d72502c75d35953d2b1079a3519a71e73ff18197b7b367a85769c427b44198fa63","ssdeep":"768:a4HG0/x/V2i4d9Im/22FljzYvX9ia9Qsm9:7mox/V2zdWm/22P3YvX9ia9Qsm9","tlshash":"8ee2d8997241b2677ae28196d83f0116f2242926140d803c76a9bcf77863dcff57be36","size":33270,"data":"","first_seen":"2026-01-31T21:08:57.211453Z","last_seen":"2026-02-19T17:02:28.670347Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/7844c00c7b87d4b8.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f596bd85087ae8c7da24ce1771082c9e","sha1":"b7529d11179acbc5a77d79cf2cb3196e1dcc643c","sha256":"b8089e9f96c5d58bc21c3403009eb46a6d86ae550566419879b9615a439ba651","sha512":"fc9bf925cc24f25650d96a00d8acad75c7f110c1459c93473aa4e885f2347766465cdaf397133edf42f4c0fdbe22c42d36d0e352327382fa5a0be1efa1ad08b4","ssdeep":"384:Sjl699ZRlP6Xe9XEbp1k2PF/TG+IDCOa7f3flVC:Sjg99ZTP6Xm0bpfNbLI+Oy4","tlshash":"5a7229e02109793d909f118eb22a651d772d3a46e00f1838b27ddcfc12aded43197bea","size":17521,"data":"","first_seen":"2026-01-31T21:08:57.369086Z","last_seen":"2026-02-19T17:02:28.737399Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"00933d3d76fccf8f1d330b001b6dc118","sha1":"72a3f9f693a7d05bb6f1b38fd381a0f4e8bb5c7a","sha256":"4009527b06902e2fcd3c2ce78c0652caf43bda1783d1577198d0c3919782c607","sha512":"8fce1ced1efcaf7f17f0fbc71664f0ca59f5f7bddc682fdbc8b9ef3862def740a845bc3cd5cc3926c09b98782296d14c9b38d50b2dd6cb53b296ec76ba558602","ssdeep":"","tlshash":"090156a9f328199a66d92fbfa06a570c7460603e380600319507edfa1700de021cbd8e","size":845,"data":"","first_seen":"2025-08-20T23:30:20.291724Z","last_seen":"2026-05-03T13:00:15.218608Z","times_seen":32459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/2c69dda28e67e57e.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33dc57bb9392fef432b1f5274e953108","sha1":"b98c3c6d5e93c3b768580b4dd7850384eaf61955","sha256":"6cfd34df21a22ff32f90c60f4b88b98523ade92b6a03432c4ba62b9b72701b97","sha512":"7020a27704c45175411e81c0bbb8b9c4d0dac262bf3cc8d29bde16361cc08e093d0ce2d6c4af51646777129a64c45a3618382b54e5bb80ae306cb53d1a92d945","ssdeep":"","tlshash":"b441a7d9a3507ab41cc82bf086730012618631bb72cb54b4c33989e0b6978d8e7e789b","size":2315,"data":"","first_seen":"2026-01-11T01:55:53.495242Z","last_seen":"2026-02-19T17:02:28.678451Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/b56bfb8753f2111d.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e68a13c76892f30a85efabb13d82ca1","sha1":"966afd56bd2dd10ac30443a969c57de7820276eb","sha256":"143ac296f86033ddcd6f04439e75754aef4136412b75872a710be987fd05f423","sha512":"7efb5a92b6fb9e7cf28fe24b78c7cd93aaa393bbf28dad89e0445c7790de25405e6caf21dbba8602c134dc70d37361234d9425cb1487dee4b6e331616451ac12","ssdeep":"384:u2HyPM3ojR4oAQgGTH1BS8UEHMupcS3hHgrhiiGE6oSmLSpfz7SG2n6:u2Hy4lCHdMup3hHOiiGN54Spfz126","tlshash":"b2d2c7e33112f4728adfe2efa0a70466a33d26189409453c7d7a9d8d326d6447297f3b","size":29045,"data":"","first_seen":"2026-01-11T01:55:53.570094Z","last_seen":"2026-02-19T17:02:28.73521Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-05-03T13:31:45.152626Z","times_seen":109646,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/ph/static/web-vitals.js?v=1.318.1","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa1e3521e57a40ad394b049fa7ff3bc5","sha1":"ec88012f680be684d8d430c5efd61fc29b658374","sha256":"b17014672e5f28d0dc0cad40ee4d09feb6a1201dadb3932b1f3073a8e4f387d6","sha512":"729c7ed37f0f321fd1c588aab554f289ff37fce9a3cb7dfa78cb8f47db8cbacb69eb0660ea2e245a540dca857f4cf277f67f53c7d789609006e56799ce3ad282","ssdeep":"96:tzI8C48z+TJzq4L88kTAFKb5rbCKHDuqqUtl0AcJ4c0jU4mzWuCD/ZDZkRlulDsd:VC4F4Sk8FKvae0f4TcWuEZDyCSXEdij","tlshash":"eed1d9f59f41e53921bae2b6d47a514333396386a409409ce23eefd0146d4c6739bb32","size":6599,"data":"","first_seen":"2026-01-29T18:42:31.973098Z","last_seen":"2026-04-29T06:18:08.504495Z","times_seen":3481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/fcdabb53594fa7cf.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc35eefdfb561070a6c3fd395b8b0e06","sha1":"0e99f80f3609455f7a1d0de1e932575bc2931551","sha256":"6df913cdbb4364f61f7eb112cf23d1b40438d47fe337266bbc9c0acefa387e26","sha512":"52c394db82cb28e8d4376c834989de504542e9d324d5df43688f5c03344a4388ec7328597a3396e7cdeeaf4e9384047a52d812771be24361972c3dac98d90cbf","ssdeep":"3072:3LSLiYawBqU4ebR8+K2k5tx9FpWgJlg4P:bSKU4ebR8p5txxdJlgW","tlshash":"18f33aaa33a725334be9829ea4b51200f3365658604e043cfb7c9dd7296888b71f7f75","size":159127,"data":"","first_seen":"2025-12-31T07:43:06.450662Z","last_seen":"2026-04-28T01:10:54.191549Z","times_seen":185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"95fa3942230da52eea85aa98acd43c97","sha1":"3d533cb5b7db33eadd80836d3d43c9189ff6d3e0","sha256":"51486445f6afe27ced0ba0a7243ba591bca8c0139c00a397f7017f7c922575a2","sha512":"e9b618c4e4267b5111b8cf6dd75c06477b08323c255a8c7ea25bfeb0b3a24cb30881dffcc18b06d2ac631dfa45cb04f9ad631e0197fb85c25cf2576877386797","ssdeep":"","tlshash":"59411d54f40ef9b16852de0f223a4e3584c49ef9d271d588f38dcad642c35ba439968b","size":2291,"data":"","first_seen":"2026-01-31T21:08:57.389508Z","last_seen":"2026-02-02T22:33:10.222291Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"31619d55e3ea112688f5b2c35a85a3b0","sha1":"ff7336b885b5b6c461fc0bda16fcb04337252312","sha256":"649d1cb5c209bb6905c3e91e9cde73a962003a641249f9f509f0b5be65057c5e","sha512":"eb8bcd7305ecc790b1e69ac6c4109f679645917971b544d9553d3017d3ec1c33e5868204138cfdd78f46bab565ad1ab4b5c807ef962b00a842132a3b03b3a721","ssdeep":"96:LE76kMyEYXSYWNYhs/sB5k0RZx20WbWVCydv76kMyEYXSYhHwV:puSyAaQV","tlshash":"f5b1ce3d2002df4eedab2e58517d8c3a258dc97b8766ceb8c1dcce315a4a07867d69c0","size":5285,"data":"","first_seen":"2026-01-31T21:15:22.127917Z","last_seen":"2026-02-01T17:28:01.064915Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/op1.js?v=1.1.3","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bcfe273763be53ba87613b21d4bd80b","sha1":"0784b9ce9f450c2bb33a9b08a5f2de2633e0a481","sha256":"d79474635d2a5fddfea4f74fbcd168be27fa6a40545ef2d801cf146121cd41c1","sha512":"f5de8b0a6c09c0502c0d247d566d69ee8deb3e67b463d7a31de7a5e0adcebd353ea513f084a6eb4504f602999bba6806015b75930f464a7aa6b7d7ba0290961e","ssdeep":"96:aTF5H5HQTNy2o4j471V0HjDkAMEmLmwwrHGNsuNS3DWmoLxu:e5Z52DjM1VYjwAMlkrmNseS3gu","tlshash":"7bc196e332ea25f246ee74a9d6213252a73817b4340e501cb76caddb1484d06b3e5fb4","size":5906,"data":"","first_seen":"2025-12-19T01:02:07.6499Z","last_seen":"2026-05-02T23:37:49.107997Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2870c37277e2b061986ce35bbcefc5d1","sha1":"f37921f74015e08ee0625648ae697de9f4c11a4f","sha256":"d3e1a6cc1c55b4d31e8521c79dfdceba78bec28e85147d89292e00beca6ce9a5","sha512":"1367f9b658ba79e40cc32c66689930097ae53b72e9bcf4167bcd6eb530de9b79d78eb84e75e64d576f44882b6da856c70363e900089d67e20f787dc57e93fc69","ssdeep":"","tlshash":"11513e2d600aed0cd8ab5e5e013d5e3655cdc97ad766ceb8d29cca76424a038a3c78c0","size":2946,"data":"","first_seen":"2026-01-31T21:08:57.391699Z","last_seen":"2026-02-02T22:33:10.224804Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"933682ec098a27832d260e61f8260676","sha1":"0ac5c9c38e3fea3e6d0e130214cdd6d2e5320589","sha256":"ab6f2925bef418c90d646c90bbc67f787cad8a1e24047eb5301154b6efe4c6a0","sha512":"da7fedac24b8f0fd363aa084435d5fb90cb1399fada749a35ffda540be9944d11869570f66389dda6f8c3f0d5e6b2750cb7b00f192f6976ab0559726a73a5898","ssdeep":"","tlshash":"5e51f03c2016da5de9ab2e18117d8c39258ec97a9726ce75c2dcc932554b078a7d35c0","size":3136,"data":"","first_seen":"2026-01-31T21:08:57.39267Z","last_seen":"2026-05-02T23:37:49.282214Z","times_seen":184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bbcaa96b6157551a8c8c0c2b7f08e5ec","sha1":"a2e0ce031aabf512cd5ad17b90903c681a131c87","sha256":"2e350167097b057c9810dcc2436e9451c304755a97c6c75f2c15b75a2755b7c1","sha512":"122c0d1a67e85e4b0fe0fe48b89e6c81ff53d76bbb85d9e2445c662659ac9b31223a46a9865093245220758535843460694d81d7f333e62b1fa2ca09a1eae722","ssdeep":"48:LSJtLaXLdAul/+1jCQQ1iSa6WHgOkxpqu8wQDIh0FmrRiEWn2iD6RVLNIcabbW2k:LI8LO0BKuxdWG8heT","tlshash":"a4b14a0ebc19db019d3aac7d023b9f7a44ccce73cb61d969919fcd490a166f21be8841","size":5463,"data":"","first_seen":"2026-01-31T21:08:57.393482Z","last_seen":"2026-02-02T22:33:10.225905Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fec25bfae45d385fa351dfed85d613ae","sha1":"1948cf25c040432e5d3eaf2caa2101daf182b5ae","sha256":"d267e487102a6c2cbe9fb44cf91fa0e008d7cd182cf666d71d9ab8b14993a559","sha512":"ef9d40c74bb2074d263c98d805e596d293adb613d609bd1ffcf54118ae3f3f604e94d895df7fcb28e959d4f1aa9b49ada30f4f138567bb52656dd1cea0c750e2","ssdeep":"","tlshash":"1131462e7c15df0aec3a7c69003fde7b50cc8abb8254dea981decd150a0a57a27d59c1","size":1720,"data":"","first_seen":"2026-01-31T21:08:57.394345Z","last_seen":"2026-02-02T22:33:10.226452Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc48946414353a508a2e81688dc2256a","sha1":"60b4b3d7a8361dfcd3cc57643430adbb79222f32","sha256":"2f1d469070d877446b7a3eb789f05b5b88ffdd772027f5a721c060966b8f7467","sha512":"f08381bfd86816af3e061586ad25ae232a4a0054421f7a2a91c453d8130f294786baec00b7b70df1fb95f3a66282a3ba4401a53d878ff382e317abd0d4f09b7b","ssdeep":"","tlshash":"25f0e5e2dc12cc0fc3634e2d283e6c7532cdda7006a9624bbc94c9395dc6e380ad0d92","size":444,"data":"","first_seen":"2026-01-31T21:08:57.395189Z","last_seen":"2026-02-19T17:02:28.888807Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"56349caf4abe4f80098d17cc84da57b5","sha1":"9dddd21f9e3d10ed06caa61cb9ca6108d9bc4429","sha256":"9c69e579ce81e354ea505e34972ed2739a74ff432308efb14e30278b969ee927","sha512":"53941b792038f5119af27067887a54f18d665d2d56c5b48105317e70568659cdf02576e310c858f2d35ab530062f25d3551c25d1c5b380d31f4a2ff911241c5c","ssdeep":"","tlshash":"1d31e89fd85af8507c61dede457e6fb685c6c8738434082cab9ee898003143353a88a4","size":1681,"data":"","first_seen":"2026-01-31T21:08:57.396111Z","last_seen":"2026-02-02T22:33:10.228066Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/ph/static/dead-clicks-autocapture.js?v=1.318.1","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc981e3687edce8a3d22380972ee45e3","sha1":"1955fa562b42c9f134b62e7ac0e9c11bbfa4da75","sha256":"a40d91c2014cca52defeb2481998498f02fc53526fd05302df0e0e490173814a","sha512":"2dc021b1b3ef375290f2d59d97ccc6bd6306aa4af2791c6cc29a129b50acc89a0566e5b27074037312082f55966c0bda2d77ab2ace32ad4a2154d08176e1c2c1","ssdeep":"384:sw+VM/tkSeCRi2WzHiAOjCQBgxjOJWgikn26FT:n+D9QeOMgM6FT","tlshash":"69420a88b7d0f3b12bd7145ac4bf1702f03525082556c824b159ecdab4adb1622bbe7f","size":13059,"data":"","first_seen":"2026-01-12T11:07:28.642714Z","last_seen":"2026-05-02T04:35:08.724281Z","times_seen":5160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"18bf10c127cb1e647d3f8d5e71155e88","sha1":"84e8cb0d677ae7eb20531ea8e2d8f8edf76e918f","sha256":"6c57a7496aead431c61611c4b19cc8f8dce9f3e2c7ac335c63a116a9e0af337f","sha512":"18a06c3cde4acb99f5cac215f9bd3f7454ef8e96878c61a915718345bd0d451b107c1b44de7e88d47ba90a870ae6244ce61750046396c65883435e46c2dd5e18","ssdeep":"","tlshash":"0e31de2a5c09ed46e97aad39063efc3500888db347505f69c7adce0e298203c5ff4e10","size":1540,"data":"","first_seen":"2026-01-31T21:15:22.137795Z","last_seen":"2026-02-01T17:28:01.071338Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e98d98370b9189e9319516ce9cc2953","sha1":"b62dd5b8392a4fbbd904529896e246f6f64095fe","sha256":"6e246b1adc6b2b9f732ec3a00a54a3c11898989e0d9c18de906831e16f33324c","sha512":"60178882cae6a4b351189baf4a0a7ab4f4711cca3c51016b39225ad74dd49e6c7c8d0188efd7145ea9445f296f1a882cb2a075788ffc292b88eeabe527ba6679","ssdeep":"","tlshash":"e131c69fd85af8506c61dede497f6fb685c6d8378434182caaaee89c003153353a89a4","size":1680,"data":"","first_seen":"2026-01-31T21:08:57.397856Z","last_seen":"2026-02-02T22:33:10.235148Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cbf89f93643bde77f1a42b20b7aa4b20","sha1":"0a149ced46b0df0a7106b46d2c013b787e24d389","sha256":"d797c2255ede2cfbcaf8829f073737154e2d44a574e9515dd10a02218835afd8","sha512":"9cb0a7f09706264d23a46d6e04d89824fe6cec6c4f0d7e8a2c72adaca8f587ce8b0e2ec2fc3210e4d7c25627cbcfae4af163fde9f31347492086b36111030177","ssdeep":"","tlshash":"ab9002a931c2e0009a533364505f18cc5074c47024854981845494a15c65024521a85c","size":47,"data":"","first_seen":"2023-04-12T06:31:27Z","last_seen":"2026-05-03T13:18:02.064899Z","times_seen":17693,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/ph/static/dead-clicks-autocapture.js?v=1.318.1","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc981e3687edce8a3d22380972ee45e3","sha1":"1955fa562b42c9f134b62e7ac0e9c11bbfa4da75","sha256":"a40d91c2014cca52defeb2481998498f02fc53526fd05302df0e0e490173814a","sha512":"2dc021b1b3ef375290f2d59d97ccc6bd6306aa4af2791c6cc29a129b50acc89a0566e5b27074037312082f55966c0bda2d77ab2ace32ad4a2154d08176e1c2c1","ssdeep":"384:sw+VM/tkSeCRi2WzHiAOjCQBgxjOJWgikn26FT:n+D9QeOMgM6FT","tlshash":"69420a88b7d0f3b12bd7145ac4bf1702f03525082556c824b159ecdab4adb1622bbe7f","size":13059,"data":"","first_seen":"2026-01-12T11:07:28.642714Z","last_seen":"2026-05-02T04:35:08.724281Z","times_seen":5160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"86a74f5f184204cb09ba94eb7c44ebe0","sha1":"82cbfc5730126f67a68bf55978565a8319a21e39","sha256":"9a16760c4a59f3b0e1befa7835483a7c388d3c0e2095fbb47e55ff8bde32ce2c","sha512":"77c0ddb1beb1be7516ad2eefa7a15bdd168a99ef9ffd957ab4dd8c5408a661bb43ae467a03e3c747d84f4cb50cc5eb3e2bb719a905fa552800b51da8205c19e1","ssdeep":"","tlshash":"fb31e69fd85af8606c20dede457f6fb685c6c8338434182caaaee898003153353a89a4","size":1681,"data":"","first_seen":"2026-01-31T21:08:57.398654Z","last_seen":"2026-02-02T22:33:10.235751Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1fbcf6a3d4fa540a1cfffe923b3d5023","sha1":"4e793f3827a01e9c4e3d4550eecfe42ccc2cc00e","sha256":"612c89ad7a94b48c64eb1de27b51b969a3de814ab4d5ca2f17f4ab7e74c4982f","sha512":"a5d055d4a24fd88875fd4057d1e8002793101d1c95f9c846bf92e6cb4e205b42d0e620d2496dd730874eec5b2b6a694e377b9f723393c8464fbb8b95bff0cbe3","ssdeep":"","tlshash":"1d31f99fd85af8506c21dedf457f6fb685c5d8338434182cab9ee89c043143353a99a4","size":1685,"data":"","first_seen":"2026-01-31T21:08:57.39951Z","last_seen":"2026-02-02T22:33:10.236333Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e2016cad477c6d44523ff529dbecc23","sha1":"6f96871336ef4f329929cebf82088de58f11e30d","sha256":"f52bac6565e51b0233babc08265efc2a896a1dc65a0a3373990de093f13f5465","sha512":"9e773dce7f8fe5f1c7b6e9f77f46c759f021e99bbe5d5860f48e9e9ceb7ceb762c70f48ab26f2a47b8cf34760c8fce89ca119a6a11400a34ac7b0754d67f879f","ssdeep":"","tlshash":"f331e89fd85af8507c30dede457f6fb685c5d8338434182cab9ee898003143353a89e4","size":1683,"data":"","first_seen":"2026-01-31T21:08:57.400264Z","last_seen":"2026-02-02T22:33:10.237544Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"55403819db816098e810c6ec761889a1","sha1":"79f1b0c1235623ae1a895e3af2edc6bb7371de50","sha256":"699cab3d934b41b790c7132a34e4b188cdc7ce0f3734ddcd99c7944cef3d5fb5","sha512":"b34bf5f3fdb0c54d9aa3887252a3a4b533ef6bcd836e205c54448949c478127ed8aba1c8d3f019ac956cb3235768966e98aa433634272992df91a633e311abb5","ssdeep":"96:LA9bF26SXV+lL82QbHjfBGN+XVXOEXV+xV+6XV+4VX8SeV+OtVX69V+KJV+DV+8r:282QbHjfBGN+memCj","tlshash":"13b14678b41acd58ed8e3c15353f5c3a658d939b869ade62c2e8dd20828743dbf526c0","size":5424,"data":"","first_seen":"2026-02-01T17:28:01.076228Z","last_seen":"2026-02-01T17:28:01.076228Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/1b665a0afce73dad.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2e0d2938c329e8e4e3bb947c411965e","sha1":"eb9ab849c9e0f4a8dbd455cecc450bbee2988bf1","sha256":"fa375e72bdd6a25673f1deb2341903ddb31dde73ac45085ff8146e1a750e7150","sha512":"5af91b03962f20bc171e220cc361e202255e5eaf4777430d72f2dc8780f4da664b1df6d7e8d2c8363720491dfd1b81a022437d4a1359c5f91d76b5d090e60be1","ssdeep":"1536:M7JIDwUDps7xdBmFLkjBnx01mId5iYthtVo:GIbDpsBCLkRx","tlshash":"4243d8d97392743117aa1225907e4107f7b999d0114b8028fa6dcdde3aa449ab2f3f3e","size":58483,"data":"","first_seen":"2026-01-31T21:08:57.240408Z","last_seen":"2026-04-28T01:10:54.143261Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"70e1370686de0cc1b378647a097ce16f","sha1":"19a633232b81f17e57efce11d2d708d3b4fcdbe5","sha256":"a32064d4b2898662e8e8f1a0df1fa6822a9a5e2f62d1b99a2329cf9a9998d812","sha512":"2cc0aa7cb98b77ad8ea00fd80a2fd1bc0c434f56ac7f69c3e349323831e74ff9c823dcf0f6cd47a5051cfbce0443d06f6ee6a27a626e3d670eacb89d66c3a2ae","ssdeep":"96:LK9rtxsn2XHeXH5q7ZQSXV+lCZ0XMXHJCXzXH1fsXbXHD6XrXHpSMXCXHyN1XZXa:5oMGmi","tlshash":"76a158247416ce5ced9a3d66343f5c39254d925bda8acf26c2e4d92083c743daf927c0","size":5055,"data":"","first_seen":"2026-02-01T17:28:01.077741Z","last_seen":"2026-02-01T17:28:01.077741Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce7ecd70580f0e4475dd9f877f1bb2ea","sha1":"54eeaaff065b43a574f3fd7aca6074120456be76","sha256":"9671f810237cb703fe22c9342817a079d21a127bb15bd48da165a2a6f8087216","sha512":"2d5db9f67887ad23ec1a876f0fc1c24e519c296ba7127b6eb5371e987130a2d0f16e5d72a760253e4039dd61b2b575e2bf558b6fdfd484792bd9688b3fdc22a0","ssdeep":"","tlshash":"dd31dc24b815ce59dd9a3c26393f1c792a4d806ad74ade1a93e8d96583c347d6b23380","size":1855,"data":"","first_seen":"2026-01-31T21:15:22.148663Z","last_seen":"2026-02-01T17:28:01.079064Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/d9025b4f6a92ee7a.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a659a4b0e579811bc5023929ba4844ab","sha1":"d22f81bf0900edcbd60abf802263d8ec80c8f5ca","sha256":"912749bf60af5412f1089a97b3ab5bd639378d17917765c0b01537e8cc49a753","sha512":"4916005e5e2a0b57b360240aecdc5909c87c486e19a985f79ba95011c4cfb1bea15601a4944e22754114b24ba7cfbaec9867fdf3126f28dbf91aba0abdba790e","ssdeep":"","tlshash":"044154e1b671563b23b8059cf2359712b7a7883b810e05b0f15e882d19ec8d9929fb86","size":2350,"data":"","first_seen":"2025-11-23T22:59:50.452286Z","last_seen":"2026-04-30T13:13:25.211252Z","times_seen":188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/b699731cda0020b4.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"40440d0a26afb7694208aaa1124c32ae","sha1":"92e8a42be6d633c2e1600636ad212c413efc6dad","sha256":"5e5beddff18019122661132c259f1c8997d53a8136edaf8eff390948b963c9fb","sha512":"81a7ea351def4c29eebe87171688734b80801a7e40786a86a551687cd6bf81530a7f543c9fbc1fb6f4b42a857fa970238926bbcc24ada2c6b2b2d7389d2b0e08","ssdeep":"192:OqB5qeZR31Jm74v1o0n+K8jvZnSGQpXeXcBorSncmMcRD1o26Ss1RviE8VSTtrSF:Ooq8RhKnjvhm/p467EIa3XDoOar","tlshash":"ba62f7e576d2f071a3ba1ae6d03f0056f2691db4240d1010f369e4f9397489a86e7f7a","size":15305,"data":"","first_seen":"2026-01-11T01:55:53.572093Z","last_seen":"2026-02-19T17:02:28.75444Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d67c9b2abb6b10d7ecfbaafdb5b9181a","sha1":"52fa0f7adc8b2d352b66abc1bec5baf4683d3f68","sha256":"27916dc2eefad962207291d32a8884d3418074afe51b41a5438d9012c7f0461c","sha512":"eb89060d7cdcaa6c876c85be38f2306f3b6b0f1621bf98fc61617a7e936dae32ff073c7ebb48ba3ca900673354d050f36f6adb1bf3e1bcd379409ccdf4a7fc81","ssdeep":"","tlshash":"7b713c687059cd59eccb3c61253fac39264d47aac55adeb3c2e5d960828b47cbf427c0","size":3505,"data":"","first_seen":"2026-01-31T21:08:57.403486Z","last_seen":"2026-02-19T17:02:28.902517Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c27f942349f4062694a39f2ca3ce5317","sha1":"66062a3f43737a25fed31db9b33fe41c9dca2836","sha256":"23d51377bb3b2bc289d3144cb79bcfddd97e7d18f066d99e88c7fd9b1ad61a49","sha512":"6714c20d82404c3c5fc77bf68e551cca73a51b7006301097877dda3182af4495d848b92321b43b8e86461ca1add3425907b0347506733f7c2b1e3a3107ebb75b","ssdeep":"","tlshash":"0e800474c1c00c17c173003f54341001017c4004444014001354515c1013355551fd45","size":34,"data":"","first_seen":"2026-01-31T21:08:57.405082Z","last_seen":"2026-02-19T17:02:28.90331Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac0dd6aee1f82652ddb3d2f6f22fd526","sha1":"b3d90e3dcb9b8476b9ceb0b1d7c636e5cebc88a2","sha256":"cf3febcdeae6ecd677d81e0cc3689589a76b30be5f334ce8d1350eba213dc3e6","sha512":"b5cb2699e8855db9f35c8fb1ed90afad099efb840c467e56d2c73a8f7eb920bcb6ceee6553595b86d453d3cfb2620e902ead1d7f2c19b80a7c4c4dd9210d7e9b","ssdeep":"","tlshash":"1f21e07162ff53b4541873f4c9278aa2bbdd2c787b49e788ca06cd1192d236ccc99897","size":1411,"data":"","first_seen":"2026-01-31T21:08:57.40602Z","last_seen":"2026-02-19T17:02:28.904038Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"056fb3c868a551d7e6a64cf41ae20613","sha1":"3888cc639eba121e1623d9b6f07b38302dea3787","sha256":"1bef12ad84df3ffc564241391a9a54db7333e3b975c08b0dfb015d5c240475a1","sha512":"adc0d6f75ec696cf7f55f5c1d3f4bdf300aebbb762e7fec00f0e6e39e6b1c01a63b5f29b35166e857137e19390dfe30ff0102d7aeb120b2881578c8253cccd69","ssdeep":"","tlshash":"6f2142e556f435e0e601a3e0cc2090a87b5a20be2b27c6dcabd82cd0e75015d436cc93","size":1295,"data":"","first_seen":"2026-01-31T21:08:57.407054Z","last_seen":"2026-02-19T17:02:28.904795Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c94577b3251a66f77be24a435490bea2","sha1":"4a31b81503f592b259b6a7244933e522b72a9bbd","sha256":"2dcd6f8c16713b0566d62d7acd894b66f1ff55577c57bcc234cb50b52e396a11","sha512":"5e0f19e2d9c84644016c619a9b8d1ef6b203f911e82150951f508200567df51b5a94a196d44c13f43d8f755b9f7991c3f308db00b0dcc768711d548e586158bb","ssdeep":"","tlshash":"fd4161b8b046c96cfcd83d52383f9c2b10cd86a68696cf19d6d9d82041864b97fa1ac4","size":2134,"data":"","first_seen":"2026-02-01T17:28:01.084254Z","last_seen":"2026-02-01T17:28:01.084254Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e187df6a799d115c150b971c5b484ae8","sha1":"9fc8459f87689adfa10940c8b773111a9a188e1b","sha256":"788113977cbae4eafa345d80f2f87e8f33812d0cfbbe1f4618b1423ba8823874","sha512":"bac0bd64f735642ffc522219fd18036ad0323d0fd7546887c9d614d5ddd103a04dbfbac820042e69676fd078846ba7f93c85ab81fbbcfa1fd7f574f3667c5763","ssdeep":"","tlshash":"53014139a124ca61cedb112b793f4ca9678c94894718cc04565dd66973d247d9b3b480","size":804,"data":"","first_seen":"2026-01-31T21:15:22.157244Z","last_seen":"2026-02-01T17:28:01.08538Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/e3b0cf32d3668e3e.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e5379c1bbfbb186f837f831921c4f13","sha1":"e3b42b23015fe4463332662702dcbdc12efd3256","sha256":"fc40324411b1ef5263ea87012729f52d443136ffc93caa8940b43297f86b0c25","sha512":"45334f3cda20eedb7c3304206c9ecda79b42979634544f7eb54ae9b6fc8ad133e9b0cbe0dcc15585f769e74d50e0bbd599f8a2b5fa43a1a3d844e250053185aa","ssdeep":"768:jouEv/zy1gk+eUNXbkX+4BNtr3kJMlDE3BkefskEJ5sa:cuqu1gk+eUVkX+W3wCDENfskEJH","tlshash":"bae2a5e63602ba73e3dd01da50b64459e37e255e2009402cf97d5cae3a78949c0ebb7b","size":32483,"data":"","first_seen":"2026-01-31T21:08:57.293702Z","last_seen":"2026-02-02T22:33:10.107202Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/82dd7d6267e09cb8.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8c4246d22a1a06a7f417da630df5915","sha1":"9df9c9183bc1b5f82cd24ea69b7e25a5af00f7de","sha256":"853c2c482fcd17d31f8ed4788c289e260c3da301ce12fc9bf6ba190e61e512fe","sha512":"e5b56350b103b601538c2762ecb1a05102c648b66436ccf600010f6a699bbcce8ba8498a84c30a9f3cacd1637c21100d92e574d9d960c8e040936eee9261924c","ssdeep":"768:HT3NPN5/4OYWH7pyZpRATNxU2nwSre084SlFO1V+mtmlCg3v9aCjUeVhWqMDPSRn:z3NPN5/4OYQkz2To2nwSrex8jm3v9aCv","tlshash":"3023c660b14171762a4343e4442e03096f3e79b4678c546bb7ac9de71e62cca4a7ffb2","size":48586,"data":"","first_seen":"2026-01-31T21:08:57.230118Z","last_seen":"2026-02-19T17:02:28.742744Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f116a6e17b5499916aa4cf9c14e37464","sha1":"29226226a8b7d7e33f7f62fc4b0bb916e1bea585","sha256":"eddf47d0daa5a948c6e1de4e311178d2ae6cceb51723228f9f289f558a2f24c4","sha512":"158dbdbd41fff026dc343ecf68cb8b3ba24d458e69d52b195dae9168188e205e53af0dc2a77664c83573462993176a25990164b366537978bf5487660a48ac1d","ssdeep":"96:LvTkUIBhk3/TtVdzgmQ1PfNjliKSForEUTw+S59qR+f:7nA6Pdg7Nfll7fEUTwVgy","tlshash":"bc816f806b7bcab8f515bdae0b337c343c0128d32a12d195c7a5ac09d99443d5ea9ceb","size":4181,"data":"","first_seen":"2026-01-31T21:08:57.410236Z","last_seen":"2026-02-19T17:02:28.908805Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e0e3483dbc707afc9343e409b2ef302f","sha1":"93a083c54d32eff9ab330d1467e310821446792e","sha256":"d075d9a8eab512645a484b04ddd2880f2662da6b4f291d416dd7a74437d2425d","sha512":"725d3686b97380c5edee24a9bec48c2d9264310342ecb8f2b79d49ee8ee61738aa5cc50a17f2f22ea0ae8537e451f1c2ce30a15f9798d3932e87b609d3bc6b32","ssdeep":"","tlshash":"d6619548b35dd6e4fc45bf9e02337c743c9128e721079999cb859e28e04403cdad5cea","size":3437,"data":"","first_seen":"2026-01-31T21:08:57.41151Z","last_seen":"2026-02-19T17:02:28.90956Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/27b71be17762de0f.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4096c4d4d5ac98daec5aa8644d190e15","sha1":"eda20aa13991a67cfa896c2cb095ff2cc3eeb066","sha256":"a4e704b26094e68db8a6c959285508c57e758610aa915c4c8c38bf9f71801e62","sha512":"20bc9534196dd3654f1e511b2f8762774d5621779a3f51c4251e567ac2c2cef57ba58e1c7e9d2ef5c54b9babb5199ee2c0a475d1908a5869ab905bbf98ec0a13","ssdeep":"384:ojpSDGGRkRSrTfIVZ/X+C90mkdG4+Z47aYSwTgqGFJp:2S/8Z/X+C90fMzZ47a8sF","tlshash":"dde2b6b572d4faa2129341f0c43f2017f2684c7521ad7470a7e4cc9b765888da6bafd9","size":33285,"data":"","first_seen":"2026-01-11T01:55:53.408677Z","last_seen":"2026-04-28T01:10:54.33573Z","times_seen":184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1028b0ae55fe86fa0135133a581f59a2","sha1":"9e391fb7cb34a6c09df81c765c9aadcdf2c8cc55","sha256":"1bb94cb864247f1b5105fdc6448b85b7b0b6415b0f1142b5d7dee84e8b30c2a0","sha512":"b774af72139ffc8e74f5d682b5cc48e68a5499a413dbd7e9e233c0c332f7807671e0997ae3475b8503f1e651c1b5a342c9a52643950780440be57185d3a10d82","ssdeep":"","tlshash":"6341ffe4a3d192b3234d7afd93626837f903e8a27916e0d981801d79581549ca9f4cbf","size":2042,"data":"","first_seen":"2026-01-31T21:08:57.412207Z","last_seen":"2026-02-19T17:02:28.910272Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7dff027882da0341495ba68ca5b56b9a","sha1":"4f4d37397b761b3e98faefb77a8b942ebf95baad","sha256":"a594cc7275283b67b7400bc9cf684cb7ba5367425208953c24221ebdafd9b6a8","sha512":"d84cd09696bfa64b64f2fd4e785d1a2ba030183f92cccf9024c5d22ca00d5996d25e9f98f756e55a00409ae7c7b576016398a57c3d1199b17b697d22f326070c","ssdeep":"","tlshash":"c98000b0c0800c3ac0ba00233cb8300222ac808a80020080e3a8a08c22322ca8a8afce","size":34,"data":"","first_seen":"2026-01-31T21:08:57.412868Z","last_seen":"2026-02-19T17:02:28.910984Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/ph/array/phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN/config.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"18c8e920a48d5bb95921e6187c07df2a","sha1":"fb3dd7bab6f2653b6f4a734c0624ef46ca779d78","sha256":"20333bfd82aee4085ca68fc8768b0b251267ca5b5c93d3fd464c690eeef54b0d","sha512":"0a10abcba25f402288531176bc4ca609daf16ad26b3d678b1de79e37dc449b3a647d29b4efc90e63d2153d273fc1d0cebeae2adc797fdd432ca5751f96cf9601","ssdeep":"","tlshash":"1d11ab1cf9a004ba00e6715c5fdbe1836fbb858792444c2cf5c40550f70ea2b9543fc0","size":860,"data":"","first_seen":"2026-01-31T21:08:57.376306Z","last_seen":"2026-02-02T22:33:10.199626Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9051b8fbc6d56b1cc51ca5858a4b82a","sha1":"afea37999959d990d87a327c8e39eaf603f9f0f2","sha256":"c6aa20662b3e22992c12f4e69cd335bb7e6ba28893d596d8674e8c76016d3059","sha512":"2e4dd93fbfa65ae811516da2deae1871fc1495ccc63543a738cf67472ea4f3f1e0aaccc00cf3092f38388b7555be212fef4a55da7ee1ac7d457eec4c9080e314","ssdeep":"","tlshash":"b63145e45161cb7cf946be6c99232d11cd019deb7d91d4d641915812d0690e0cb59cff","size":1828,"data":"","first_seen":"2026-01-31T21:08:57.414289Z","last_seen":"2026-02-13T04:13:07.757219Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4904d04204e17635b3b5578b35c9ca30","sha1":"c0b6c903fe8c2f835b770549feff5d28a249b4aa","sha256":"9f44e491c01757f421aa47b533342eef1f9f459854a2161b91243b3e955f1693","sha512":"fdf27fab923ac1b2c44209b0f701f1db57d081814f59da811374467562ca84074a1d6fc171bda214378f2aa1dbdf1587df59a09e0bfa32cb49d6bc6b680bda38","ssdeep":"","tlshash":"77117275b01ac959fe993c06383e6d3b6049839a8696cf65cad4d861414507dfb42ac0","size":1072,"data":"","first_seen":"2026-01-31T21:08:57.414993Z","last_seen":"2026-02-13T04:13:07.759685Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/4b73fe5a475716f9.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d36b24fc99ee384e0689eef065597a6c","sha1":"8ef86b2640497083b9d8305d48babc41bec3284b","sha256":"c36e1856c14ed3099197c8082b210ea9ddc07a2a7ab4663c8b3e65d5e12dc125","sha512":"5513fdad3b32216d6a72ffef92b37ac87e5ae6ae430c25b3d1b926723eb66fd719678cb5bc560f1f17db468b1ecaa676b908676ab2e2dac079dbbacc7243c59e","ssdeep":"768:7ndxrGZTCyFcQvmOwaCHHZgKIGrBvnKgApILOHz2syklZ0:7ndxrGZTCyFcQvKaC9rgALOT2Xkli","tlshash":"f1e2fa947520ac75de2f4afd7089c412a7fc2120c9186861f2fe5cbe13d9ac97362b8d","size":33710,"data":"","first_seen":"2026-01-11T01:55:53.449721Z","last_seen":"2026-02-19T17:02:28.864329Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/be7248fa84c6d551.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"598a7c75a166616da34d0720a50b9cf3","sha1":"35eccbe396ae1d530fb0174811f94c4a35dd1c10","sha256":"99be381c3d3f98808a540d62ec9cb7fe1797ff9e3588e5078a26d52374152fa7","sha512":"5ee7366a017183c0a2049c1735a9135a139e62ed6411726d18b9edce9ce57e7d27bf5fe1b8ce6f915773d1d20e0c0a9cfa9ee383dda62d3a65043daafe744328","ssdeep":"","tlshash":"5651a5413444b164353629a8a0bf000e766e1b75834cbe3296fd74fd262189cdb676ef","size":2515,"data":"","first_seen":"2026-01-31T21:08:57.246674Z","last_seen":"2026-04-28T01:10:54.169753Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d20642de5598670fa53acc2944bedd41","sha1":"607780618fe3f368ee947c55c7d3f27f6f8499cc","sha256":"b23a3fb96d58ac053ddadd6e53df1eab5ab0c0c083e7564fb76f4e703a065db7","sha512":"2d56e7c551bcfcf59e5deca97201e2a61033d0df70cab1b96579e045b9dabe39e34f9bc4c9055d95365702fd8f1d784e3e1f13bbecc078497b7df414ca34bb81","ssdeep":"","tlshash":"1a800470c0410c15cc35001fd4341101017c400c40001441535050c470751075f05d4d","size":34,"data":"","first_seen":"2026-01-31T21:08:57.415703Z","last_seen":"2026-02-13T04:13:07.760311Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc5fe6c5692f7c6888c23eb005d33bd6","sha1":"41751e1b3e744af66fff031760e14f39ab8e7e11","sha256":"c2fc027d772d7ec9cf978a65b519dfe1713fea1274c77e3803d45c6986b5ae4d","sha512":"5cb8da8eaca5c7c45243b34ea40b1bdfb0e44e2f7f2acdc1d07b6ebfd0663a576db364afbd777e7f8ec9709a33f841af426821afd9d870a44baebe54b64db262","ssdeep":"","tlshash":"8d31d09523ed92f9f048b4fe291594502c9321df7de2a178db613d20ba911484ea1fef","size":1710,"data":"","first_seen":"2026-01-31T21:15:15.04624Z","last_seen":"2026-02-13T04:13:07.760879Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c67b78482e2ea3d05b16b8900491c7b","sha1":"0baac54493aae6f7443b7012cc9e219e2ead8e66","sha256":"2029b1ef0a1d17b6c66fa84330d55c085d32b3f1b5314178251f97cbcc22e2b0","sha512":"ad4d5ef97e94962e57c22494f10bfa90120a0333b9656c72df490ca43dee7b2f19d007c1f0a84de0f3fa1c0f1ef6f0934be0feb7046330cb4c1dacf8586d4849","ssdeep":"","tlshash":"bf219ad53159d468f808b6ef07337c62e82a5ad555f280a8d3938948b4c68b41e14da7","size":1213,"data":"","first_seen":"2026-01-31T21:15:15.047034Z","last_seen":"2026-02-13T04:13:07.761422Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e94ee81f01b6c46a34d25cb1267b531","sha1":"316f65f45b52c49e2826a59b6d9e7cf098b3f163","sha256":"32b6856174f405088385c8c6681f87e5a23d98cc00b168bec5f7e65553f2967e","sha512":"3413b9f5962b070ad7ea7f8d7dbbd28e47e7d00c706a88778bfc71b2e67f4ec410518fd4177277c68ff80807180b2e2dd619ea18c6d43f8718b0830e5a8eb0df","ssdeep":"","tlshash":"8c21110471365659f95ccdeea2435835bca28f4578398f28d2f2192dc8b89ec0d794ef","size":1416,"data":"","first_seen":"2026-01-31T21:15:15.047952Z","last_seen":"2026-02-13T04:13:07.762022Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/48f61cc265d47694.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dee46bcb482bf82bd4c1029f187c68ee","sha1":"d7cf4d6188a9313e31590dacf5902ec8b1f1b311","sha256":"1943b9c626e8cf07bb3fc5f19f03effe59f3be189438303a477919db148bfc7f","sha512":"ac80a472ed1005853052a9817975646693f125531cb9f9d5ce6d69b490caa8c18bc06077c18d1ef30fd5b71d39b97c7fcec9559537c9f12ecd8c6e972743b9a0","ssdeep":"768:UjLnQztxulYXI6KJxcoQNLE5k96UJGSgf5djPZ+a:aLQYcNLGk96UJGSgf5djPZ3","tlshash":"d9130959b021ecbb223bc1fc906e1416b26d5d79e31a6a24f3ff896c131494531a3fa9","size":44188,"data":"","first_seen":"2026-01-31T21:08:57.327027Z","last_seen":"2026-02-19T17:02:28.753031Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/08c39a0012534f66.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff39d75e72b017105228a3e3937e7591","sha1":"f2d18c32727ea5c8c3025c3dd6062cc64a0205bf","sha256":"bde5066619da447ebe65deb46930149c780552d9aeaea4827915013d287be571","sha512":"cc6a711c714a6309780c59e28fe35a28e70d35720b3c4f0eb25986f230329c1a1e047514909fc053fdf56233194352b7595f57e4de1271c715d0fbbc315a5cb4","ssdeep":"1536:0N29IxBQi6ha/rqj4gUnFZSul2PmOot685j:05P6M2jDRuPn6e","tlshash":"73b3f7f935d5f48207ab40a6c03f0006f32c5d37189e68a0a3e5ddda756499de1b3faa","size":111402,"data":"","first_seen":"2026-01-31T21:08:57.335286Z","last_seen":"2026-02-19T17:02:28.643844Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/ph/static/surveys.js?v=1.318.1","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eed1739be3b5f3cbcb8b4348da95df6c","sha1":"a6a9bb3c87a1d6a5e9a3c3fa4a504cdf5fb8c933","sha256":"aa71231d82c88044f916cb947cd23aae69f132701555cd8bce2b400c55ba388c","sha512":"cfbc612fe5f11aff4caa160599c8b2bf4291b118f8343596b0f447b2f5dc996d1cfd333d57e2893830174b1f6229dd49a8028dd13d3b31fe8648646e1eed875c","ssdeep":"1536:JXbkgL+74ocKIQvuE1p+5WeLIVZCnT9mYGfp/r4BL:1Ygq71zgZT9mYhL","tlshash":"b4934cd5b640f1ae41df81b4207e4842f33d2b1afa0d4958b157dc943de9848a39ffa6","size":88854,"data":"","first_seen":"2026-01-28T03:11:07.691683Z","last_seen":"2026-02-16T00:04:04.164647Z","times_seen":1184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"47fc33a115bcbb7a73308b5841dab94c","sha1":"9131ee30ce6eabcfb4c5538393de2e805969b0ec","sha256":"070a80f96f4e8531b9291857d19b97c2fe9bb8efc157863a45a702b308657561","sha512":"a9aea81b3c9906291620dd40fbcba69d34381e50efa5a2586068edf8aabdee4f1898db68566ffe26b69e7ce8e1cbe19446cdd81fd5c95d3354e5563b5b13281d","ssdeep":"","tlshash":"66b01275f089dc26cc75342b01b62e3105bd00c7000184005f94d91490d217d6702d04","size":102,"data":"","first_seen":"2026-01-31T21:17:18.014273Z","last_seen":"2026-02-02T21:49:52.989006Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/7699dd9768b273c7.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5dbd085ce6a6c185ebb193a0f6eecf9d","sha1":"73b8784d3a8c8320e3b2f06e0be20c96e8a7008a","sha256":"33022dc63e01d695407e491ba7831429b9d207742b86938a2ab14dee4720ba40","sha512":"a073e598ebea89dc13853921dac5ef3fd74c1de418739f4897067307614ed807a0e9349c365933698f45ada338197b841f55e255854e2be2c2404d9e4908fe25","ssdeep":"6144:Da4781+VuYZlk8X4QAZt7dIURZyHnE3Qer/Ut18OZzljzC4l:9PHAZBdIURZyk5iZzzl","tlshash":"16b44af93695b1735ba602a6407f1002b338196b240e4864f365edde74b884aa1f7f7e","size":529278,"data":"","first_seen":"2026-01-31T21:08:57.204993Z","last_seen":"2026-02-01T19:38:23.454705Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/8a9983e0eefa6ffd.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e2778cdf6269909553d3706405b77a3","sha1":"aa1028f797111fbd2ac1fe8befbc5fc3ced497dd","sha256":"e05ee3375ac81e36ce934885bd42fd26f7873892d52da992947b6ca7ca198772","sha512":"8343355873776a7f3aa490a93a9d79e43be7527396f977f53e07ec8552e29b4fefd257638ee0c3e1e4ca1f9df0080d4bae32bf866763876a99daa0d247e9804b","ssdeep":"384:fBNKeDneohgZlz7FSwiSCD7jVCdBLrS+X1Fv2bTNKcjGbvYekGLLoo+eqfQS5y:5Nurxh54fVCb++n2babYVoNqfP0","tlshash":"04d23f159165bbecf53b04b8ba6d806c721e9b54cb0f8939f5b83c311a410d47a67bce","size":29243,"data":"","first_seen":"2026-01-31T21:08:57.384918Z","last_seen":"2026-02-19T17:02:28.621203Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/e3d00364d13321ed.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2486934aebd0b00e55e68b6dfbe9d0fe","sha1":"848dbefe394be98e044928f1374fb59929c92f93","sha256":"11380db3ba8aec5597b4cde9773951510aa89424968a8c7435db112f37901b0d","sha512":"807a83e35db9c4bc646787d3a154bf2e80e386daafb9fd97ea6059fbde48bbc924847a8108bf120b524c4edccc89acd8e5139ae522a1a2655a29dc720a4df54c","ssdeep":"192:uF1HgFrAHRNiN/Rv3cGggerToWWeoedmPWo21UCS+94eNSIOEPZJJb1I+7mTH47C:YHgcRNiN/ojfoWpHmt21u+9vdmTHS5W","tlshash":"1382b6ea7282f0b197bb10a2c07f400bf2793565245d4054e7a6c8ef74f056e86a7f7a","size":18259,"data":"","first_seen":"2026-01-11T01:55:53.455045Z","last_seen":"2026-02-19T17:02:28.7957Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/a7c7a8fadd85f653.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6736d35e645199d0fbb2c26ff1a4c4f6","sha1":"330babe7ad7a1a008df4fbfcc4aa2022ea5216a0","sha256":"a6c5341275522eea933fa0b30bbd42b98d1d5e1cf7db03c462ec5256d35523b2","sha512":"28bed02c6ff5722134d2315615d52efb1c3a29ffa7bb4da160554f9a7433ffbfb879ce9d3c2da0d6a67a42b3ad8476e0253814cf7aa8dd3197fbf256900127e8","ssdeep":"192:GL4RE0SZ4r+zeLhVbzB44ZdLIx+7TFnRA88KlWOfSeLzt:QOr+E5ZdkxGBnRA8flWOfSeLh","tlshash":"ed42c9546154aeece5bb00d1f82f810d312f3f98c60f8870b9bca8b91a645d43b56fda","size":12584,"data":"","first_seen":"2026-01-31T21:08:57.356712Z","last_seen":"2026-02-19T17:02:28.855421Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/438b3221d8ed98ae.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"776e994809ee498e36929c1369e977ae","sha1":"bb87b2a8cad358a2b6b54008384ada9992d775f6","sha256":"d7ed199cabbda4d46f786e339ce99c16a7127aefad702bfc2e779527413fd749","sha512":"505e54da0c580cb4f6d9b2143e1d83e793f10296d84465dcba72442c15ba4bb2fef4385bf203f10566f6f2c935c91faf721172b36cec84945fdfd717b3ed9df1","ssdeep":"96:fWKeBCnhISV+FdytrbbUp+nOliRqCWj8HpQd4roafQBoabmj88p+qjFfww2R+Rg:fW03V+Fdwbi+OMLWjwdlpli9R+Rg","tlshash":"07c166e7b7c433a1904d437052237112b2be39bf33cfd9a58aac85c4595d84ca62fd8a","size":5995,"data":"","first_seen":"2026-01-31T21:08:57.243873Z","last_seen":"2026-02-19T17:02:28.633034Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/turbopack-8b7cbc757f5a124b.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcd0b1d5248ea7beca980ad82efa6807","sha1":"ff3d78d01c42f6bcb8afa64500820e3b31dd94dc","sha256":"10f69d74fdef4854f791540887c3c947f1f50bcee1a89db478554eb66e9ced61","sha512":"84019404a81099de2ee1ba054b0603f518f19e56e97bd2d5b208acaf96af0f271d4f5a4a7f1efb9f2d63af2c42a81720283872f3a17486466c0b735848a34dd4","ssdeep":"192:3spVl08YEsUnUj5E4dn2Npl/daXMh6lW9xocxkUk1MsOR:3spVv40bl/A1UroQp","tlshash":"6322b4da33a6f073436fa1e6807f0044f17944b9145d582893aca8fa28394ae49e7f67","size":10680,"data":"","first_seen":"2026-01-31T21:08:57.353463Z","last_seen":"2026-02-01T19:38:23.504412Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c236e034006be48f651e4c6107d6c686","sha1":"20e4747bfea14c1312892176aded7f55c54670a0","sha256":"4de59df36b741479a9e648ac3385e37a5f2b4768ba5f46a4a1d24b9eb32a2705","sha512":"72731abea833d808e6ba0ba0c6687170df85c183efcae6f069a4855947ace432c0d8d1cee528187ed76422ed705069e3dee8d6760df6df7b7d8d5882fd50ff0a","ssdeep":"","tlshash":"6e31d2da6649b1c07445d3fc041358b4ba8b387b2f134aed86409598af54e98ceedce9","size":1451,"data":"","first_seen":"2026-01-31T21:17:18.015001Z","last_seen":"2026-02-02T21:49:52.989871Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/4b5fc2a2cf150c41.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a2db0f51ceee4b64dcf2f34b7cc5de1","sha1":"9d13515ac8e3613937c7e41e704ff52760ddf473","sha256":"3e316fdf81283e8d0d6e95f67225560ef3c1c3b33230192de20cd9a9516a75f0","sha512":"80ac75dc3f6084d84660a5bc6fed6ae94440a6018061ed1fd18289c226952ec56b4790a8d42dc197cb5277edb1596fe26baeea78de76d04cb07d3f621a6657ee","ssdeep":"768:PfCxyEdRqNnKG1+g3fA1SjjDrxEBK8mO2V:3GyEdR2KG1FP","tlshash":"78d2b66050457abcf56708a8ba6dc40cb11eae6cc70fcf18b57c7c253c5a9816d96f93","size":29517,"data":"","first_seen":"2026-01-31T21:08:57.196019Z","last_seen":"2026-02-19T17:02:28.856281Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b1eb7fa09104259b8c4160c7aa5426d3","sha1":"129daa1018dd0207d9839d74a255c69db499adb9","sha256":"c0fd47073ba433a65ddb3a086f02d928ec7e6cc913295ec120fecb0f9266b243","sha512":"65715b1065c0a2a4f2f5bdf16356746803c2089dd6089663bddfecebb08c55f8309f478676d2e2232a4c7e054f85ac357cf998f7045b4ddd0ff6068b8cb0403a","ssdeep":"","tlshash":"22b01270e049cc36dc35381b45742d2101fe40c6020144905fd0d564e0e207e6603c04","size":102,"data":"","first_seen":"2026-01-31T21:17:18.01576Z","last_seen":"2026-02-02T21:49:52.990754Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/944ac4923c54ffbd.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0a3c6529b52f3ca76fac8b4824ee9af","sha1":"38b98c5b73f6c046e438618cb9085e16dfa344cb","sha256":"28f068c9ca2b7701f59bf1e653a54c3000dc2191a0800c26c1693ef283148541","sha512":"bd0a312fe3106a32e07f3c53a52c6ec5f4d434a2b485995731710da7d9c69c8f1aae5536cdb8469914ff8f2228875d802ab55d30af07eb0183e371249fa8b94a","ssdeep":"96:ESEwSEWAR3IWcvh4KyqcnnToxHYypVENVIctVwdj6BKGyFpEKo:H1KW/nExH/pVsIctC6A9sd","tlshash":"ac915494a990efdcb45e01a8a03dc00db16d6e6dce1eca39f1ac34b129550d53b6b7c6","size":4385,"data":"","first_seen":"2026-01-11T01:55:53.465489Z","last_seen":"2026-02-19T17:02:28.643228Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/699d240ba76ab6e7.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb3634cf9dbe461ce7b21964ef674642","sha1":"5be5159bc385567dce6e3ac8a821c4628079c72b","sha256":"4ef0b88dfe9e08a67e8361b199e7c5c0267fb4b0ec83ade00c6ca9d55f131d58","sha512":"a512adef8a10ff7d93d6fee4920da94225ddc9f03872b0b2d991ba8ed14cb6b136ebc6382dd9924f7a1c84f8b6a98ecba6dea9e484f774878da9fd576d27336d","ssdeep":"384:CeEJQfhNlOuEi1z9J9TvpiIuy7A7QKGwpRCSNBcAoU8bs541hAblbH36AxVeNyYi:CSN6y8QKGwamoUh541U9XarEqM3","tlshash":"8a03e9c5b320606243d651a384b50203f329a999540a455cbb7ceeffa97cec971f6f72","size":40939,"data":"","first_seen":"2026-01-11T01:55:53.435896Z","last_seen":"2026-02-19T17:02:28.60695Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e75b8340fa5dbcdbaa98f4a9ff444843","sha1":"d343dfad942f061f0541260081f37825f145dad6","sha256":"96793ac56e4cf2bef3d2345d9a0e93a44160dd6a8babbcb28d1730d8835317cd","sha512":"73eef66a783f0853e28dd9d4617e0f5a387f02fc602b73917f24f3f5d1ea05e22ce2eb2ad44c9720132c4377699a520d3135391395f67da3137297f5cf2abebd","ssdeep":"","tlshash":"3b31cfe12b3d60f2f22bb8de84572539dc0271db3e03888bc3b21d593159d5989594f6","size":1552,"data":"","first_seen":"2026-01-31T21:17:18.016952Z","last_seen":"2026-02-02T21:49:52.991677Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a50b8abb9c9b0bb0df3bbdd5d4f56a8c","sha1":"e8203ff2130935192b95a67e69f4255a853e56a7","sha256":"25019ff5dfa77bdf6116a10c3c679e4880d9794055f8b6495196968a5926122a","sha512":"600771576212b4e589eb68407bfd63113195d3052063566ccdde13af47a2f98000f64a8bbe377e555e4ce744f7775bc6252dc92e6919ba4e58b3d9267801467a","ssdeep":"","tlshash":"56216e847726d930fc267cff02121f383a9528d75923549103d45b25fc118b6cba48fb","size":1403,"data":"","first_seen":"2026-01-31T21:17:18.017636Z","last_seen":"2026-02-02T21:49:52.992632Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d7448c3ce60b7e49f4ec281d127d7f8d","sha1":"3246e82d721d35d9b2a6ee6bd56af3897f08de00","sha256":"a30a9d83e89b24dba1f29f30295ff41a15e2ac9c601850300158dac25983ed71","sha512":"d8be59e14e91a9457209ad0d2e984c19c683609a5f0a96336186b3a8fa3975b6a26f9d789f449f9d38af88dfe58d33132eed43d48424b54476fb392e9d3e9e42","ssdeep":"","tlshash":"32219dc093a7f7b0f145f86dc714772abd8c61f6531396e582928f48b8225e2c8b04fa","size":1405,"data":"","first_seen":"2026-02-01T14:20:22.539377Z","last_seen":"2026-02-02T21:49:52.993452Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/19b0da46175198e4.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2007ebf0b401ba67c261030cfee8e756","sha1":"e38591bbe7d137269496a20c91da35ea00581c71","sha256":"e49adb5040e39e1241fb0ec7756630b4a0bbca6dc3cb4a82abb2c15772c1b528","sha512":"7768dae710c0e0a546c9502c8b1f5e49cde8ecd56541cf9dc726ffb8f694d4f5ed2ef5e5a27e26da06936686bb3f571f39fd2c81d85589f00808cf11c3353109","ssdeep":"384:lDxQbCQlLQVt1VmIudAorv8ii9gGTHR42VqzR6l+mgebWgrw1gC:lDxQbCQlYHmIuq9zrRUElHbWgrugC","tlshash":"a5d2d690d121b8b8ac6b89eef57d801d721d1b24c71d0b25b1bb6efc13446c87e53b9a","size":30131,"data":"","first_seen":"2026-01-31T21:08:57.374651Z","last_seen":"2026-02-02T22:33:10.172899Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/c9d86bbb7c4acdee.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"375038ec8cec6aada72e25b152bbeef5","sha1":"c78b20a01aa625bdb0e1ab2358db14698586a570","sha256":"606e1f12073f6762a118cf232414bf2899bf3ffd6f7fd06ae61dd2363cd682aa","sha512":"97d64ef9834f0b04009a43f212061a31b40a484389b2959a10b49264597a5c6a9a2af0e7b45d248e3bbce3d70e036cee4a77bf53eaca3c7f7a670ab7d43b1c5e","ssdeep":"3072:ueuxDvbX1azHazaNQNYBr5XtP9hO9R3+VQVhUGHTbGpLsev6ns4xlPfetAvJQXEM:ueuxb7jV2ECNvms+lPnjz6x","tlshash":"2c940888b760b022835666e0052f944fe27ef92d6c4a44bcf654e8f57cbd889653bf34","size":416158,"data":"","first_seen":"2026-01-11T01:55:53.513192Z","last_seen":"2026-02-02T22:33:10.118728Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"41991b2ad6fd74830ef3fffe03af7281","sha1":"d0724bde873dbfb44164e2cc16509c6a005bf753","sha256":"1e4c05ff7f9b7e7554b1c288e42121fd9b224065954e16c175955fd38ca2a239","sha512":"166662558a7dcfdc8528babbd94770c5597948ef3607b54d4af5cdd1300756fd3381b9858a61a2d591a2c86585185332e40130e3868bf5bb45b0b160443fe135","ssdeep":"","tlshash":"4c5110a1a327cb7cf5ed38ff01ba2c28a9469cc16641d80a97c0dc5640864bc5e636ef","size":2689,"data":"","first_seen":"2026-02-01T14:20:22.540925Z","last_seen":"2026-02-02T21:49:52.994297Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mycasin.icu/_next/static/media/Inter_ExtraBold-s.p.331e95b9.ttf","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/media/Inter_ExtraBold-s.p.331e95b9.ttf HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"659e4-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ceuuOrjqWy9Bb4m4DV4g%2FH3PJO%2F7FvcWTvAY0PukH4Nf1XoYfiS4kYlNdditFW9mE5pIdNv%2BgFB%2BlmVVYzOmQRYX8fIUdYDgVOdV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbbf475a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":416228,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter ExtraBoldRegular4.000;git-a52131595;RSMS;Inter-Ext","md5":"5061bd7701b1b3339f0c80e69a2136e4","sha1":"4a028f1fa4dbd6b4bfbfeec4a5b5e222a005b563","sha256":"3c13487b8f2eba0a78cad4cefd19272b0f4e53d61c223e6b266ddf0b332e9f1c","sha512":"65875f9f205cd70d2e1b86fbda2ac8875637e0b3e0bb37ade9da20717b0f17d2108a0cf2aa1b246affd73bea233b510d37d13193801d94e5148d3ec4159653dc","ssdeep":"6144:3VpTx/VCC2wfBsJWPziKSQVE58IqsfnHGR4tGX5/2nHTAl84RSnj3k4yhT18:3Vp+C2wfBDPziK+4suO49lfR98","tlshash":"38946b23e706db0ecd1a1d3486f5cbd037babca1792ad24bb0593a19cc931f41aa71d5","first_seen":"2025-03-15T18:38:34.528748Z","last_seen":"2026-05-02T23:37:49.226159Z","times_seen":193,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/2c69dda28e67e57e.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/2c69dda28e67e57e.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"90b-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=frjbdsuzdiedJ%2BhCtpUXe5yZiT1bk8RH2BoqXrNkJMGRBM5vGH8EkUx1Qy01cDZSZpvvh8BrEbUhoHqDZiKGYL0udSLf9pFx4G%2Fg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbf85b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2315,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1958)","md5":"33dc57bb9392fef432b1f5274e953108","sha1":"b98c3c6d5e93c3b768580b4dd7850384eaf61955","sha256":"6cfd34df21a22ff32f90c60f4b88b98523ade92b6a03432c4ba62b9b72701b97","sha512":"7020a27704c45175411e81c0bbb8b9c4d0dac262bf3cc8d29bde16361cc08e093d0ce2d6c4af51646777129a64c45a3618382b54e5bb80ae306cb53d1a92d945","ssdeep":"","tlshash":"b441a7d9a3507ab41cc82bf086730012618631bb72cb54b4c33989e0b6978d8e7e789b","first_seen":"2026-01-11T01:55:53.495242Z","last_seen":"2026-02-19T17:02:28.678451Z","times_seen":73,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/d9025b4f6a92ee7a.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:28.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/d9025b4f6a92ee7a.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"92e-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i4PdOrCJor%2FllE5yltpMjxx%2BNppqAGWqeodYWCZEdoIAsKY7SW7muXXjqGR%2FYGKTCh2qiocQdOSaxhBYDLZRf0msQHYnb7m86Q7C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328e44c305a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2350,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1993)","md5":"a659a4b0e579811bc5023929ba4844ab","sha1":"d22f81bf0900edcbd60abf802263d8ec80c8f5ca","sha256":"912749bf60af5412f1089a97b3ab5bd639378d17917765c0b01537e8cc49a753","sha512":"4916005e5e2a0b57b360240aecdc5909c87c486e19a985f79ba95011c4cfb1bea15601a4944e22754114b24ba7cfbaec9867fdf3126f28dbf91aba0abdba790e","ssdeep":"","tlshash":"044154e1b671563b23b8059cf2359712b7a7883b810e05b0f15e882d19ec8d9929fb86","first_seen":"2025-11-23T22:59:50.452286Z","last_seen":"2026-04-30T13:13:25.211252Z","times_seen":188,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/privacy?_rsc=888x4","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /privacy?_rsc=888x4 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-8994cd6b098220fa-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966848742%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/privacy\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/privacy?_rsc=888x4\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=92WHM13LAZoxEgvy2dR3F3uwqnOwGBTysGRzhkrG%2F8lYxGm%2B4WEI3Sad%2B8NbmXFUb2muEmU9RbpsfP4ih4TgmedroL0744WjXbkS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328e68bd85a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2457,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (948)","md5":"6f2542ddbc4538f0756c192bdbd313fe","sha1":"f2d971ccbe844adb51f52aeb85e16feb26ebd8d5","sha256":"8cc4f777f5125ddfaf66555535c8debb45663955401861e59e232430377e50cd","sha512":"67b3e67627402afe03e1f5c729482f0d620e262266df4d921619c60b3aef90571e10c25000263edc79e792160429af7ac06eb306ff8038a5c5a6df5f9f15d7be","ssdeep":"","tlshash":"7d519e0dc849adb498c9d59d62d5d7016588af3bf1b88ca8e04bdc64128f03d0beab87","first_seen":"2026-01-31T21:15:21.905275Z","last_seen":"2026-02-01T17:28:00.817932Z","times_seen":2,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/ph/static/surveys.js?v=1.318.1","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /ph/static/surveys.js?v=1.318.1 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966848742%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\ncache-control: public, max-age=14400\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\ncf-cache-status: MISS\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966848742%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\ndnt: 1\r\npragma: no-cache\r\nreferer: https://mycasin.icu/\r\nsec-fetch-dest: script\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 172.71.164.77\r\nx-forwarded-host: mycasin.icu\r\nx-forwarded-port: 3000\r\nx-middleware-rewrite: https://eu-assets.i.posthog.com/static/surveys.js?v=1.318.1\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Sun, 01 Feb 2026 15:28:20 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nx-envoy-upstream-service-time: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kZL12TwSUqnjxOPeCt6VDfrZFBwBix9kEwr8TbTUnJTz%2FzXa22eC1IsBkgoGsePoFm9dECH1rmepJs6egSXVXt4157BIjLLIzmaf\"}]}\r\ncf-ray: 9c7328e6bc5f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88854,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"eed1739be3b5f3cbcb8b4348da95df6c","sha1":"a6a9bb3c87a1d6a5e9a3c3fa4a504cdf5fb8c933","sha256":"aa71231d82c88044f916cb947cd23aae69f132701555cd8bce2b400c55ba388c","sha512":"cfbc612fe5f11aff4caa160599c8b2bf4291b118f8343596b0f447b2f5dc996d1cfd333d57e2893830174b1f6229dd49a8028dd13d3b31fe8648646e1eed875c","ssdeep":"1536:JXbkgL+74ocKIQvuE1p+5WeLIVZCnT9mYGfp/r4BL:1Ygq71zgZT9mYhL","tlshash":"b4934cd5b640f1ae41df81b4207e4842f33d2b1afa0d4958b157dc943de9848a39ffa6","first_seen":"2026-01-28T03:11:07.691683Z","last_seen":"2026-02-16T00:04:04.164647Z","times_seen":1184,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/api/games/home?priority=none","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /api/games/home?priority=none HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-96b4db746dfbd6ca-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"3410-JNmIeLScyJBkdyghxazxaB5xLR4\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2E%2B0WbGfqnV4IBdPm72zYIvUnDopfG0P2IFDF64pxk%2Flj0RicLvMPHWHlM4BjJHoj74VSuOfJzWwiDm78ehIO%2BrxvB0NxnFDwYWL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c7328e71dc85a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":13328,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f37feab11f2d0906ad163b94649f6c7b","sha1":"24d98878b49cc89064772821c5acf1681e712d1e","sha256":"35af18de983a7e1faa9d59f497369e71795f5bedcd3c9f563a62350805f00084","sha512":"b1a4fdf503906783f78faf9e8bdf94c4531ba69e9973a0a9d2966914ff5a0cde2d36f31092d4ec571ed2af109821876ca7d94206e2d205d34e1275015918d4d2","ssdeep":"192:Neof7taL3t5NEf8JmxEPv7a29G71GDu4AhiEIT8rj8:9azS710siCw","tlshash":"d652bfbac4954ca9435f6f0110c72d0ef4bd2e2331c81c69681aee3cd99ed97e60769b","first_seen":"2026-02-01T14:19:43.942168Z","last_seen":"2026-02-02T20:55:17.580137Z","times_seen":32,"resource_available":false,"data":null}},"time_used":1228,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1083,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-ultra-burn.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-ultra-burn.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40680\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:54 GMT\r\netag: W/\"9ee8-19baced5690\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XS%2FPRVO0iEtDL%2F34YIGTsIwb45W4tr26PqIYzEi%2FnVGENfBQWEORprVS%2BKbO2jcdBvH8fei9jVNNPGnm%2BYSYV7C00B0XjonF1%2F7h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ef0f375a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40680,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4bacbbb67b033576ee624af3e5fae3a0","sha1":"211b0932fb8a035b3e63bf062fae6478e2fa27bb","sha256":"49f6eb82336d7c5e9a0c4de656bf8ff031f4e6bdc282fcf88e193b0260d1faba","sha512":"3bbf47f15ae371aa2f040235982ed60b58c74f0d6f4d2b27c96022237aee1ac59e50c1e8353666dd6f51c8dc512152c595339041dae15de696c284254227401c","ssdeep":"768:hUbS7O/MppjhroEma6sOMjYcUUq3u4pFGYltZRPMXwX9MUUcPxoDB:yblKpjeu6hMrUhe4pFHsEMxcZoDB","tlshash":"8903e10c3506dc00da88b5f49dffd2a1875b5d895aa4a0bfbcfd49912fe16dcae0c41a","first_seen":"2026-01-31T21:14:50.720295Z","last_seen":"2026-02-13T20:55:00.807027Z","times_seen":36,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/second-design/ranks/gold4.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:35.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /second-design/ranks/gold4.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966854385%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6710\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:28 GMT\r\netag: W/\"1a36-1930f2427c0\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iAlVzqJzzRV%2B8Fk63T2z4xdcmtUsbnc6QQRM994GIz%2BrA935KOMcl37Ln2J7CWRWaBs0XaufmR8DZJ%2B8wJDh1wpQdU3%2F%2B%2FqdgMJp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c73290f59a25a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6710,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c2a5cae0fb3457f0270cd09d2a82f15b","sha1":"0e8bf25db65c9e926285a31c0cd7b87071089bc1","sha256":"9f86c936adba05f024d3e53f20d414af27e4ad6fdf81880ae3a143bea76c87c6","sha512":"ae41e145c7fd60642d5cafc816049b6f58fe384ddedae6971c7363f137c6cfcc7d79b3db3c1806410699d7f0208fb53cbb7c2e712d6bc360d410e3924ce307d1","ssdeep":"192:gfz5ulqV3qwIS4cEAyaaV4rIsBvtnKNCiG:gfzqqZIS4cEX9+rVK5G","tlshash":"e9d1af90ce24bf8eae444d796562d828a09422dc22fdab05d5fc17494ef029bd05683d","first_seen":"2026-01-11T01:55:53.547219Z","last_seen":"2026-02-02T22:33:10.111723Z","times_seen":40,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/reviews?_rsc=888x4","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /reviews?_rsc=888x4 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-a18f0c34603a4435-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966848742%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/reviews\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/reviews?_rsc=888x4\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AlLgag0TAvRbJhcsOZ29ymqoyJQui1d523GQMsbC6geWWHg%2ByOaL844mxKnesqZHRHQBMgP8iIA5%2Bl2wgwOk9jMLl%2BZv4fRmoppz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328e68bd45a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2457,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (948)","md5":"636b26f53e3ef856aac8cae6c4631825","sha1":"251d2eed2b48c44c4a8567e2ef9275bef6932f72","sha256":"965262295c6d6b7f181b5b8c9a91740ea0197e0f9e552ed79ca31c9dfcb87841","sha512":"68148c4e745b1d1d14452a0728246727725b1aef1b734119c1cc8fdb0e560fd2ed9d2173832c78506cdcc9f197c0dd5b383e832e780f4a068a183eca14313e3d","ssdeep":"","tlshash":"2951a00dc849adb498c9d59d61d5d7016588bf37f1b88cace04bdc64128f03d0beab87","first_seen":"2026-01-31T21:15:22.024709Z","last_seen":"2026-02-01T17:28:00.829732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/?type=lobby\u0026_rsc=888x4","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /?type=lobby\u0026_rsc=888x4 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-9dc792e9ab4e6587-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design\r\nx-nextjs-rewritten-query: type=lobby\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design?type=lobby\u0026_rsc=888x4\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sVsXu7jkDGZDwagBazbCmgURUa5VD9G8LbEi5lffCrRvH8yjdeKdJd9Py%2FLZ5evsHp%2F1122upokkmo6u2mlTXidJu9I6Qfegbn9w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328eafa935a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2331,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (822)","md5":"2c76222b1daabfbaf253b461b006d2df","sha1":"403da709b7cb0e452bd6531643de4c6ebb716fb5","sha256":"7996e99be0afd3a17bec81f7aad2dcd66e1b21cd7e16a5def674d3a3f3d51e74","sha512":"dfbb8eda09c124a38b635797a8b5cec7f099328c7ccaf9e04b1015e0f37eb0412741ad1182a09ae4a51c184c0000fe52c06af09e2618baf58c77105a9ebe021b","ssdeep":"","tlshash":"db41800dc949adb498c9d59961d9d70165887f37f1b88dace04bdca4428b03d0beab87","first_seen":"2026-01-31T21:15:21.887485Z","last_seen":"2026-02-01T17:28:00.832456Z","times_seen":2,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/privacy?_rsc=73n4j","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /privacy?_rsc=73n4j HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/privacy\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-b85daa6817fa1094-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/privacy\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/privacy?_rsc=73n4j\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RmzZE5uuR%2Bjatykuseddt7FoczVpCmTyeJGCxqcTZajoo0jnz0IeB5BFrZvIyV9bdg9PM%2BQHqFu99ugFGsIqyj8oTJTtVlkHbLIT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328edfc195a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"857a2864c3686f888291165016bd2018","sha1":"beb130245c6d9ce627714ca17ba3c25bb50a3077","sha256":"6c6f663b1a957ac786ac52eafb1c48d30aaf4bce253dc6fdea165826a56e7edb","sha512":"390753f8ed92fc876451b2311990d40d39dc8f9eee5a7d3985f5a29857ad00c2c827e4457bc0e7bd29a8403a95453b95e2330afca600957ed3e098dd8d71b8cc","ssdeep":"","tlshash":"37f027b3d50efd252d2dcc4c0e5e6323859c58779ab51af4a2dccd9c47d113a4b8a1c0","first_seen":"2026-01-31T21:08:57.193561Z","last_seen":"2026-02-01T19:38:23.401871Z","times_seen":36,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-santa-s-wonderland.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:31.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-santa-s-wonderland.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38766\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:59 GMT\r\netag: W/\"976e-19baced6a18\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cicXSroJ0HTCT3Ruwt%2F4lA46NEVb5jdYNvMGqJHMhu8U%2F0R9IItVD%2B9kwV5FIwcbc459nHALjRxE9FELu1lQXDDHkrpWOQFyKjzt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f7081a5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38766,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7a6e43ab0d9fcc6e2b098fa0ba0b1e2d","sha1":"fe79086749ded61049c9c74cf68b86a8dcfc1d8e","sha256":"f42d7e80cee3cbec3e1d313cf6d9bcc32e7cbebd2562ab2abf2327a82226ef49","sha512":"37ac47237acb2c8d9ae5c671f373ee58f24e9288d72d8a8b0b66e5fd9a9ea0c3f932997082ff6c5859b0c73cb505cd5ee76016a044f78d9a519c37818dba2c38","ssdeep":"768:D3xbxqSOslsk2mT70OT+n3o+ObDSmhfTb4Y0cqVG7LCt4T2:zxbxLls6TAJn3o+ObDN5qEi4T2","tlshash":"f603e13639625c40e845efb68ae5761222ab6fd1cc84c40ebcde45579fd70e58e82c47","first_seen":"2026-02-01T17:28:00.836724Z","last_seen":"2026-02-02T07:06:32.740671Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-ice-mints.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:40.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-ice-mints.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966854385%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26558\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:53 GMT\r\netag: W/\"67be-19baced52a8\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HVMCBRsEI%2BobKNS3QMbowzmP2LSJ5eNoSb0HX2cjE3SBZLZt2VEIqMoUPMI6FbkMTq%2FN1ImXwf%2BpBk95k5no2rPuKyDZ7Ul4qQ9F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7329313c0c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26558,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0039f679c9e14b31e9fc16b3e89039ef","sha1":"f7ecc3776c16934bb8e31d51a724dd84fd4cf16a","sha256":"cc6796e768b37da685449127aaa27a520eec44c1194a9a1a672f701d631681fb","sha512":"8c3bf4f38052ac13ab931c35a4e8bcb0c625809ddd3e180a78fcbddd930915cb582f9daf2ce3f644c9796e79526b40325e6800c20d600ecc8ed297818993e4f5","ssdeep":"768:jFX1J8KSgI7HiIOEv0NDyegeRCEoJgoefQhq:BlqK9a0xDgeRCEorE","tlshash":"d5c2e1ce6dad03bceac9e106c2e254c4639e958fc55fddc898a8c701ce95acf059145e","first_seen":"2026-02-01T17:28:00.839196Z","last_seen":"2026-02-01T17:28:00.839196Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/media/Inter_Regular-s.p.b62ab84d.ttf","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/media/Inter_Regular-s.p.b62ab84d.ttf HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"63610-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=63cDlGDZmKanGN%2F4gWWcLbKs6Lm%2BFzEBlixrs5JyAbPg8wpZZ8DC2FXwW41T7SpAUwOr5RtfezrfMxF0vCE8fRI1u2ilMaCfZqbE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbbf505a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407056,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 35 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInterRegular4.000;git-a52131595;RSMS;Inter-RegularInter ","md5":"fdb50e0d48cdcf775fa1ac0dc3c33bd4","sha1":"5c95e5d66572aeca303512ba41a8dde0cea92c80","sha256":"64f8be6e55c37e32ef03da99714bf3aa58b8f2099bfe4f759a7578e3b8291123","sha512":"20ce8100c96058d4e64a12d0817b7ce638cec9f5d03651320eb6b9c3f47ee289ccc695bd3b5b6bf8e0867cdab0ebb6e8cae77df054e185828a6a13f3733ede53","ssdeep":"6144:sSnv4lXwF22mZ8JWPziKSQUmeKGVOOxAdgwH9evDFDynor51EOO2UAGbzxSr1w7b:sSvJ22mZzPziKwLOOkvH9IQoUf7P08","tlshash":"30845a17e70ad70ede452e308af987c133b9bca1785a924bb59e3a58dd971f409cb0d0","first_seen":"2024-07-29T21:54:32Z","last_seen":"2026-05-02T23:37:49.098607Z","times_seen":348,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/eff55acea53ec0ed.css","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/eff55acea53ec0ed.css HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"53-19c15989c68\"\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FxXfrCi5SQIXW7f4fla3RmhyZb%2FZDENB%2Fo2aNOlKSpEYnq1Vx6RH5FnDXgtp09IvSscVB3waqNxkPZJOsWHGHdD79yUjrvnlLwMN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c7328dbbf675a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"765bf9d3ef8ff10be0cad5b6d4e3daaa","sha1":"aa1b4bc7fcf48c46eae19700dd7509519aa0ba85","sha256":"f403a5500f2dcd2ecf20ed8f0d77487d89495c3d3789182da4975fe7db6e6559","sha512":"8da6091440e8422a6931d64239ad83324f260ae3fceb164b1f20954db67764ad5425cc19d1ec48870932e42f9e70c21349f9ea3179ae77bf8d8c1ac547289915","ssdeep":"","tlshash":"cea012804541f754e5d148f3d0ce2110888c4718019485e421541de0980742c1372f4c","first_seen":"2025-12-31T07:43:06.46324Z","last_seen":"2026-04-17T17:22:40.725573Z","times_seen":109,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/699d240ba76ab6e7.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/699d240ba76ab6e7.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"9feb-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n6Sdq8AHNIcCQq%2FQGFbsmxLOyjKHqYlKf6VJmOqyn3kqdeuakbjtSsJonFWve19sAZL4Dxy7IkaD7gSSSfd09yWgBsBF%2B01%2Bgswm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbdfd45a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40939,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (40582)","md5":"fb3634cf9dbe461ce7b21964ef674642","sha1":"5be5159bc385567dce6e3ac8a821c4628079c72b","sha256":"4ef0b88dfe9e08a67e8361b199e7c5c0267fb4b0ec83ade00c6ca9d55f131d58","sha512":"a512adef8a10ff7d93d6fee4920da94225ddc9f03872b0b2d991ba8ed14cb6b136ebc6382dd9924f7a1c84f8b6a98ecba6dea9e484f774878da9fd576d27336d","ssdeep":"384:CeEJQfhNlOuEi1z9J9TvpiIuy7A7QKGwpRCSNBcAoU8bs541hAblbH36AxVeNyYi:CSN6y8QKGwamoUh541U9XarEqM3","tlshash":"8a03e9c5b320606243d651a384b50203f329a999540a455cbb7ceeffa97cec971f6f72","first_seen":"2026-01-11T01:55:53.435896Z","last_seen":"2026-02-19T17:02:28.60695Z","times_seen":73,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/438b3221d8ed98ae.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/438b3221d8ed98ae.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"176b-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HX18xfdkTmiprAYrJ474lXKdjnbN3E4RHT1q6dOXwayq1JcqTuD3aRLs1bASgbyeUWxNajAAgVMTq6yNCSA1l1X6HEDWT4SbptPo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbe82a5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5995,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5638)","md5":"776e994809ee498e36929c1369e977ae","sha1":"bb87b2a8cad358a2b6b54008384ada9992d775f6","sha256":"d7ed199cabbda4d46f786e339ce99c16a7127aefad702bfc2e779527413fd749","sha512":"505e54da0c580cb4f6d9b2143e1d83e793f10296d84465dcba72442c15ba4bb2fef4385bf203f10566f6f2c935c91faf721172b36cec84945fdfd717b3ed9df1","ssdeep":"96:fWKeBCnhISV+FdytrbbUp+nOliRqCWj8HpQd4roafQBoabmj88p+qjFfww2R+Rg:fW03V+Fdwbi+OMLWjwdlpli9R+Rg","tlshash":"07c166e7b7c433a1904d437052237112b2be39bf33cfd9a58aac85c4595d84ca62fd8a","first_seen":"2026-01-31T21:08:57.243873Z","last_seen":"2026-02-19T17:02:28.633034Z","times_seen":71,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/c9f15bcd9a791bc0.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/c9f15bcd9a791bc0.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"2e8c8-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EWlvvjKkVWQXV11bpmT9elQUTs6mRJXU4FhB9grvVQ7u9jtMiDbIi3aOQ6FDa%2Bp6vgMxK6vZHNQO536zkzDqfhy2rcmp3FcgkfSb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dc08a25a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":190664,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4de9978e77d00d8cd28e36ff13131e3e","sha1":"d3ba7372f49985df035daa52f1370b259ce034b3","sha256":"007118ad820ebb4087eda4f3427a2889e8a3fb728f84788df294b446305a9d2b","sha512":"ec0baf6adc87fb54978a75f0ac7a8be5451e8dbb6a031a8093f2f50f33d4e39711bf68487f1339120291ceb9ad6c9ae517dfa08b8162f10422dea4a1396dc717","ssdeep":"1536:WaJXdN0DtUF5R9lLviT242a/AHmPWbIsbXN3VQTWA6qp56+e7XlUMOneXKRZ54hx:j0DCdB4t4HgYbPKRT3CPT","tlshash":"4814c6b5a0616ffdfa6f04a5b02ec40cb21d1fe8c74f89a6f6bc3c6116440846ba67d5","first_seen":"2026-01-31T21:08:57.173027Z","last_seen":"2026-02-02T22:33:10.125714Z","times_seen":67,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/0fb6e476b35fdb91.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/0fb6e476b35fdb91.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"194a-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rxEz6CtAOHcsZg3E9ODTVRzECbAs5DSQNZ1clmCJh%2FpG%2BuHiMPtZzwBVk4KnySlmxKfwntoLyRJuG6PZT%2BSdN3j7R7MywimD%2B3LO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dc08b85a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6474,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6117)","md5":"7554b29439c8f6c37345f5192cd3871c","sha1":"bad5b7974f486e1debe58b943058dcad206e9221","sha256":"ae0a6792e3ffba66ba1135d0bd193e8aab8347dc08da8bf813493dfd4c44b72a","sha512":"96c92e55b11be41234180b57ea457a71dabab8989577957af040ef79589916d3a7a7354f859b5aaf83fcb425ef10d040af7a581109b76fd0546ba1da7d54e6c7","ssdeep":"192:geZektmofqE26khTOJsn+aJ8c4Vpc/n1dWd:geZektmofhhkhTOJsn+s8c4Dcf1Ed","tlshash":"63d1e145e6581361b88802305667f01391ee367f30cf94a8875a86e4e7d699cee238ff","first_seen":"2026-01-31T21:08:57.315419Z","last_seen":"2026-02-19T17:02:28.614782Z","times_seen":94,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/terms?_rsc=888x4","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /terms?_rsc=888x4 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-b865cfef93df5316-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966848742%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/terms\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/terms?_rsc=888x4\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FU92lCYqr8mxLyUKorjw7cqdAUe3Po2E2HDn%2FOMSCffaYygx8wpuYIq%2BU9OOTe01OkeJ8o3CC9UScVCO5hmMM6COJReX%2FmmiYHJR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328e68bde5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2453,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (944)","md5":"23de988f62b6d962018183f4439194a6","sha1":"2fa848a8e8ac6e32ac70e4e4c82567c5cc8c5947","sha256":"aad671c5f89bd80ef1fc83a2c5043722ce07e2aafe9075aa59b6e930d46a5434","sha512":"d92bcbaea430e1d88aae786b42c917fa49b21d36a2a65c94c4bb2f93690d7cd71979cc658964c03c2bc521232b1771b9ca6b67a6880b6da3118e30bb01c8f508","ssdeep":"","tlshash":"0c51a00dc949adb498c9d59d61d5d7016688bf37f1b88cace04bdc64128f03d0beab87","first_seen":"2026-01-31T21:15:21.995458Z","last_seen":"2026-02-01T17:28:00.848611Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-gates-of-olympus-super-scatter.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-gates-of-olympus-super-scatter.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40514\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:07 GMT\r\netag: W/\"9e42-19baced8958\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2B%2FtUOAcTVlV09XTb4Y7gf5DDIM8hYQ2eNoWtRYs5DyIndLiuqPaWIjMSrDkhGghOf7ZZLrpmojBz%2BD8U9PXYDSz2HPGJbdoGzfx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ef0f245a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40514,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0b43b5e579f3e550fc5e1b6e26b8a884","sha1":"c167689686d69594c9b8b12e5eafe1ffaa92b40d","sha256":"5dd7c5837e3465d2d80509ce95ef1e61cde7c771a575b2a2ed0c94049f36187e","sha512":"9d83f8acd0e03a5f3375447cae5f4aa37fb572719563c7c7d29961d0677ef0a9127d27cdfcca7708e7ffc2647524dbd28b95576c22190fba6f8d8fe2c9f417bb","ssdeep":"768:+NBZtqFwdY4mYjl/kwH52t7fkDiwsLKkJn3W/xLeiW95A6d2c:+NB369kl8wZ2t7fkGlJnQ1WH6c","tlshash":"4703f1ab4e5ac98dff526cba905b9f963f381d010425703bef593566db00495c213ee4","first_seen":"2026-01-31T21:14:50.701373Z","last_seen":"2026-02-13T20:55:00.810312Z","times_seen":35,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/media/DMSans_SemiBold-s.p.432e74d4.ttf","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/media/DMSans_SemiBold-s.p.432e74d4.ttf HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"dc14-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VBwgY0DXeuUbnUnAgEsBj6yLnxhIVF%2Bj6IfWHQgixTaNP4TAEFDZqUSMf2Up9phChbOO3MBtnFfhlQ6BX2eUEF7whecUKdq%2FNwxb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbaf3d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56340,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 44 names, Microsoft, language 0x409","md5":"41de6d553ba4b1825e9cf023e97e2ee4","sha1":"c2c26e18339912a10d796aee9a19ce1aff5177e4","sha256":"cd4f7b027bc8e71a19360a426cd694eb195f6fad4142437047f33b312a8c4e94","sha512":"e6b614a65c7441b5a6967df47b1bac808f8966ed8b43446fe91056235b6797653999b9160172b77bc92c2db35e411a1112e97071dc1ca8ee17a7b288357c6fd4","ssdeep":"768:8sVAWXhIU7ifzsuFE55E5bBvQvbKtdE68fjBzPrloGWJ0j32v6w51:8CXV7eQWbTn8VyGWKyv6wX","tlshash":"a9434ba9b316960dd356babc946373b483b0bd3caef3c35b54b1673aed4d0a14c11289","first_seen":"2023-10-31T22:57:11Z","last_seen":"2026-05-03T04:31:42.307511Z","times_seen":258,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/19b0da46175198e4.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/19b0da46175198e4.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"75b3-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IVFvcreyEOhPJ5tKqdw4RADqETfDVo2BAoEw2Ba6KOyhQAIeQQIAlxgPK0JQrAzdbyPAyrsS8dkOE2E5dLyiqB0d%2BZuZfaPg7mY7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbdfd95a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30131,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (29774)","md5":"2007ebf0b401ba67c261030cfee8e756","sha1":"e38591bbe7d137269496a20c91da35ea00581c71","sha256":"e49adb5040e39e1241fb0ec7756630b4a0bbca6dc3cb4a82abb2c15772c1b528","sha512":"7768dae710c0e0a546c9502c8b1f5e49cde8ecd56541cf9dc726ffb8f694d4f5ed2ef5e5a27e26da06936686bb3f571f39fd2c81d85589f00808cf11c3353109","ssdeep":"384:lDxQbCQlLQVt1VmIudAorv8ii9gGTHR42VqzR6l+mgebWgrw1gC:lDxQbCQlYHmIuq9zrRUElHbWgrugC","tlshash":"a5d2d690d121b8b8ac6b89eef57d801d721d1b24c71d0b25b1bb6efc13446c87e53b9a","first_seen":"2026-01-31T21:08:57.374651Z","last_seen":"2026-02-02T22:33:10.172899Z","times_seen":67,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/5b4c38a1263b182c.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/5b4c38a1263b182c.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"14f0-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6d14bhXjysBMq3Ti2E3UaTTI1vPZ7dLNOx8Ro5YdhwTJoRn6wJrbRc5uylOvGS6wP%2F8k9y%2FHlR57qwhjX5Qg7Ax%2F5GAzYS8jP6i%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dc08915a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5360,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5003)","md5":"f8e9ec1997bd5d30fc21d00e4ead8870","sha1":"204eb1cf4545e0065728e78078f652c93127da73","sha256":"f2ad2659ebf3d8c610e1d765790329fb17c236fc2cce6bd92041802c1f8446fd","sha512":"37dba0ba6cb75187896c36a05d8ba09efc92dbcf9be03b47a1a4840378161d97b3a9fd1928ee668c4794dbda8d37a7dd72e66ded40f9180d5af18d433f199748","ssdeep":"96:GDj0znt1HChTQV4+NBBBKrTukNYx5bLOPtFffaFAbkqiWFTTGD/TMAI:aoz7HCcBQc2VFffaebkqDQw","tlshash":"98b134d4911c42bc985523a8522ad843635d10ff35bb5ea4d9afce60a2c74cce2a74db","first_seen":"2026-01-11T01:55:53.429255Z","last_seen":"2026-02-19T17:02:28.608647Z","times_seen":73,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-crown-of-fire.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-crown-of-fire.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40798\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:47 GMT\r\netag: W/\"9f5e-19baced3b38\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BnpAkBKiXutXDU8BONl6K6Gxmq12E4f09zkl%2BSYTgicj35kb%2BfY29tqWFWcHD6HOJODqBxYLe5BF4UzSzXWbIF6uoE5Yh2Kz9r8x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ef1f4d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40798,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2d7a636be25df596d66a2bf69809bcf6","sha1":"62178363381012637bc6ed438062b6702faa39fe","sha256":"52bc588035fb3d6529a40c0d783b1b3e9a59456e19c02ce19224a03c759e537b","sha512":"30c587da4dd69aaff9cc4a0ccbc4705a91ac5c625aaaed2778544e3fb59b2a88fa3fc81b30a7f35bf12994a3a5376432d5dcf4fe4dd5022012b125982dd8f5bf","ssdeep":"768:NqAH3m8p8xkBQOIzqbI4B32kEVCDVWXKIUtRrPpIVj8he7J:Nq8m8pj12qsVOWXqRe+eV","tlshash":"4503f16d9c1091f8e4e8bbf28874f9e7cc7d9f50d2e81a15512a085fe26d0633aa5cd2","first_seen":"2026-01-31T21:14:50.662188Z","last_seen":"2026-02-13T20:55:00.811945Z","times_seen":35,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/second-design/home/promo1.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /second-design/home/promo1.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8944\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 21:01:32 GMT\r\netag: W/\"22f0-19b7b5d9fe0\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ExssW6d%2FK4zYdaUhBxLBt2Yn%2FyFnxXrq7BJrtN4K7kopIO5bOW4IUlWTf3mZqOQFHIds7eu0hZzXC3C6jwWrrHg%2FJMgeGiMfsw%2BJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f12da95a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8944,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2b8130a91fb4c5a77bab53ac79c0d1a4","sha1":"69d9ffa75456675f8ea57bd2e63c92c28cb9e418","sha256":"d55c522b42c801b1d691f66a300b86f5d63453f56ec6cc13eff9a4e59c680fe6","sha512":"948adc9e24f539d7318b094c262e885d65a38ea348ee8cd533c40c646be5c12adf899efb4495060dfd289687f9ce2d818474a8bcd1f055e080088348eda78575","ssdeep":"192:igWb2C6F5XTxWaehYqbPay5DmmHKMaYU2UWzqTGWAF:igWKC6HX10NbP55BRJU2UWkRW","tlshash":"c102af4fd4a89b154924b2bccae79746e00dbeb85a251f683c6cf4eef625102901cfd5","first_seen":"2026-01-11T01:55:53.489214Z","last_seen":"2026-02-19T17:02:28.760725Z","times_seen":73,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/blog?_rsc=8k5eu","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /blog?_rsc=8k5eu HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/blog\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-80923520580198fc-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/blog\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/blog?_rsc=8k5eu\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aX5R2W9%2FjYytYxr%2FQwykcI1CO2D0Daf1rFr0Vd9C%2BJ3hKEhl9SnNtZKHGfTVsoHbI%2BlYh%2FpVi8sLFjNNXDwnZp%2BzxDI9omHQQvUC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f16e845a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"857a2864c3686f888291165016bd2018","sha1":"beb130245c6d9ce627714ca17ba3c25bb50a3077","sha256":"6c6f663b1a957ac786ac52eafb1c48d30aaf4bce253dc6fdea165826a56e7edb","sha512":"390753f8ed92fc876451b2311990d40d39dc8f9eee5a7d3985f5a29857ad00c2c827e4457bc0e7bd29a8403a95453b95e2330afca600957ed3e098dd8d71b8cc","ssdeep":"","tlshash":"37f027b3d50efd252d2dcc4c0e5e6323859c58779ab51af4a2dccd9c47d113a4b8a1c0","first_seen":"2026-01-31T21:08:57.193561Z","last_seen":"2026-02-01T19:38:23.401871Z","times_seen":36,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/944ac4923c54ffbd.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:31.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/944ac4923c54ffbd.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"1121-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t1rQWyLZew%2FP93nQ6PTS%2BwUhY9iCjp6QSNttUSvCsYbbVrMd9gERChy%2BnhgQ5TXxnWwYIbfzCLZx0HSbuNNR%2FzWHdCpwyjpd8Y8t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f2bab25a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4385,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4028)","md5":"e0a3c6529b52f3ca76fac8b4824ee9af","sha1":"38b98c5b73f6c046e438618cb9085e16dfa344cb","sha256":"28f068c9ca2b7701f59bf1e653a54c3000dc2191a0800c26c1693ef283148541","sha512":"bd0a312fe3106a32e07f3c53a52c6ec5f4d434a2b485995731710da7d9c69c8f1aae5536cdb8469914ff8f2228875d802ab55d30af07eb0183e371249fa8b94a","ssdeep":"96:ESEwSEWAR3IWcvh4KyqcnnToxHYypVENVIctVwdj6BKGyFpEKo:H1KW/nExH/pVsIctC6A9sd","tlshash":"ac915494a990efdcb45e01a8a03dc00db16d6e6dce1eca39f1ac34b129550d53b6b7c6","first_seen":"2026-01-11T01:55:53.465489Z","last_seen":"2026-02-19T17:02:28.643228Z","times_seen":73,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/ad138cba44450f34.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/ad138cba44450f34.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"75e0-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DqPRBTPhM5ULtni6rjscFMiVSj2TReEAMZ0kvdZWOhugsuALiY0BsiAyxE%2FVLOoYd7%2FsmQ%2BPryKvoRq%2BJGAipMZvVTfLcbrJ1cCc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbcfc75a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30176,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (29819)","md5":"11ffb96341f3b620a5370514b73e3db9","sha1":"2451d15feffadad588466305f4a236f382f45e70","sha256":"a9efa5c83a5c5075fa40ef7ba4f7d964399f82426d6417889b7c84428f1b96ac","sha512":"8bdf52566b8af67e5482d9927f81970943cfe7386c5f27f4108d7d52c356bff8e9c971ce4dd132d8b5ec63c456b3465abf1bae4cb6a236f9a759ab39c94a734b","ssdeep":"384:wVm7PRyzVJe6cgrziQ+rI0TJOMLr1299HlDitlKQ96Wjzr:wVm7AxcgvSrTJhtcMLr","tlshash":"01d2b97071a096fc6ad344e6b43e400cb1386aa4c96d5561f3ba7cb8ca119c97e77f83","first_seen":"2026-01-31T21:08:57.360627Z","last_seen":"2026-02-19T17:02:28.728752Z","times_seen":71,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/def7cbf195df9f5a.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/def7cbf195df9f5a.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"81f6-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=svpzV5mkdPH2CxGSofGa4nndy3X%2BKjTutcJ4kySXuorX8JGf0tZ35b6ZumdxBqc2x5L5OCum9O9uv4PT8UCGBDQh1PjCkx7nWOBL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbdfd75a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33270,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32913)","md5":"971912a88b8fc321b1e02c9bfdb119c8","sha1":"13a51b0bd9f9f2c32118f3d9316f40f973a5323a","sha256":"7514ca2d94bdf7565bf10f198d551a4a1b715765d20f7587aeb1591b808686c9","sha512":"bc0517c20439d8656f1c01310675031fcbc20e9b2d1ded2ab2462d47e47342d72502c75d35953d2b1079a3519a71e73ff18197b7b367a85769c427b44198fa63","ssdeep":"768:a4HG0/x/V2i4d9Im/22FljzYvX9ia9Qsm9:7mox/V2zdWm/22P3YvX9ia9Qsm9","tlshash":"8ee2d8997241b2677ae28196d83f0116f2242926140d803c76a9bcf77863dcff57be36","first_seen":"2026-01-31T21:08:57.211453Z","last_seen":"2026-02-19T17:02:28.670347Z","times_seen":71,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/c99dd6f2193578ac.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/c99dd6f2193578ac.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"5e51-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oRFzjyh2aVSgkqUBZX3rvnAFj2z6H8h9t%2BiWavK99Auda%2FvLy6ffE8rZJRDN73l44eCgOx1%2FpDDafZbEp1krz22jLQwowCprJZF1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbe80b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24145,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (23788)","md5":"5eabe5602d90013fa15f85a6fc6f890a","sha1":"2312e373488bdcd197a5189f2d76f272fb825fb8","sha256":"815a58522bb2f49c1bce5d54f1aec6e5c9c4fc41979d178e73397fdf65be846b","sha512":"e6d61874e6296af415a21d9c062c2657b051412569585b0aef4f2179d2d603fe640df9d8fe39b66a404d803fca621bf673ff3fe9d7ddd6cfb92a5f50852a4f6c","ssdeep":"384:N3+WOa/L3dxIv57SwaJAHTMYGeDFp3TXLvA3oLgxINGug/LecP+nZYr+gbYchU9R:IeOTMYGe5hjvN3IecGnernGmQFUM","tlshash":"92b2e9d9b361b06b53ab61da403f0405e2fea974251d096ce754d4c3b8b8ea990f7f38","first_seen":"2026-01-11T01:55:53.456823Z","last_seen":"2026-02-19T17:02:28.729415Z","times_seen":73,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/33f100802e817e42.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/33f100802e817e42.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"21e6d-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SNXGg8RCGjwUS96CB9%2BKSZdicZcCZu0NyY90dav83h6zkO58L5sGcUvf0xGZdqW9PGAhhH3GSTcRjISRD%2Fte%2B71Br568ZGYENGsx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dc08ba5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138861,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62859)","md5":"debbeb6cdb7b1be6de8c93e038673ebc","sha1":"1f4885dc43cae313308c1cb103cc4c5f5cc1097c","sha256":"df401cb98f64505017cb9cc89ee34782afc0db5febb7f4102c2be08286280b3d","sha512":"5e25627b862997c1bbd192e9c1716099bb6486aa555eac7d5e37c756e2473825a8a670cfb751b9c5a5542b01b98eb6bbd3b9ba9ef9c4bcf786cec5267bc60832","ssdeep":"1536:UAnRBc9eym0bpa/Bh9QpfBuhCVKewjFSqE4eRlUxwugwoL5CLOrObU5W/Ndh9w2y:nnzc9eym0NN4CK7FEObU5W/N6yDQXD","tlshash":"e6d33ca53300b83599ef83ffe05645a9f72c2709c1099024f97e5dee232caa57157b3a","first_seen":"2026-01-31T21:08:57.287659Z","last_seen":"2026-02-02T22:33:10.157366Z","times_seen":67,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-ultra-hold-and-spin.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-ultra-hold-and-spin.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38884\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:06 GMT\r\netag: W/\"97e4-19baced8570\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WZhRlXaCnljRhuXM5B3Jc7y%2FzE9W1QCDBzpsmc1Pq7sGjV1c3iWicVlGE352b3FiqPse1jnBcvGKGxCO7siTLu8iDhqFTJy50yS%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ef3fc75a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38884,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"746599cc014fac1e5ee3cbecf32028de","sha1":"285694c3b94f0a1983ee2b88928e3308ecce8c4e","sha256":"c410bfead0f4175eb67c6292afa41b824aa041b116a51e114fcbe4dc9478b590","sha512":"a86e6d9a692df41fdced11409e01f8c3505d61b8e75b114c3ec95e679faca084e23086b5a00279761c86c63fb4bf81e7bb29f6e991d3117e8a4a03580d449de8","ssdeep":"768:BMslVgiAJaWD1uX8CRyKr2gxyWhFPK/jyf+hJaNv1hebdigKlxKu1xL:BJzBAaLXZR7rhZK/+Gh0NkdUX","tlshash":"7203e1897c57a3b6d8b3a209c035e2c15122515cbe36cf3c980e63d11c7aead1234b53","first_seen":"2026-01-31T21:14:50.721148Z","last_seen":"2026-02-13T20:55:00.835045Z","times_seen":36,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/api/bets/lastWinsNew?filter=luckyWins\u0026limit=10","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /api/bets/lastWinsNew?filter=luckyWins\u0026limit=10 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-a4814524226352f9-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"3d9-m0u6ILEpkDx9AEIYx7/YZQFb0Nk\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ErR4FYweNMopeGSQOZ4ooeYTpDl1xNG4excz00xpf8JpH70O8%2Bbn0hTq1oIN5CXpf6U%2Flg1HjHQTxZdgOZvwV%2FUt5g1qda0z7ZWM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c7328efc9715a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":985,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5bf1f105cb5684b38dc5c49926dac0d3","sha1":"9b4bba20b129903c7d004218c7bfd865015bd0d9","sha256":"3807009680ec3ea3603ac5b4c27fab57177f42b68f9f69a598eecfec4dd84f78","sha512":"6a59b68e26231702c515d1709a1e65e3531a622f4da536f4193546552ace900325399a57ab93bacc7ec366fff0d4836eb3d5dca3af4dca1185a10c580fc961e8","ssdeep":"","tlshash":"ae11903a64f95d98a00d1ac6b1c33516a8ec65171cc4cee0466dcf3c62e8d49f816ef3","first_seen":"2026-02-01T17:28:00.867213Z","last_seen":"2026-02-01T17:28:00.867213Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/providers?_rsc=1bz2x","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:31.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /providers?_rsc=1bz2x HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/providers/__PAGE__\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-aacb387c99d33790-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/providers\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/providers?_rsc=1bz2x\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FxhCJGcJ32pIVjjTslSZBOWKAsSOykUiiI0JpkxtslO%2FnvYPtgdS%2F2sl1k6xnnldzSfxRxZ80cNJcGqRE9JRZqETmAhEa%2FK6QOhO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f42f0d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5005,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1670)","md5":"8959abcb9d9f97f5681d545dfca8c80c","sha1":"5c337d890bd8117d30161bb2890afd42f285deea","sha256":"75d9bb6e282d04aaefe525ce72e4fdbfeef59161be91a9f4b1f71642d56bf16b","sha512":"3d5724bb4993cf848f6a463b63fbdbc3fd7e8e2ec9bee0e2cbfd74a74bf772af5f01992d786664cf0211c4f0d0449d0d4da446648591e53b72650bd00855d6f2","ssdeep":"96:3rnkJZVqqegCrnkJZVqqeo3eRKRemkvVKZ/L5QXqIvTM6p:bnkJZV9JqnkJZV9BeKRex9ssTM6p","tlshash":"84a1cf6bd90eed985c26cc0c2c1f5377928ac873dd344da8ebaeddac05490125f8a1d0","first_seen":"2026-01-31T21:08:57.367485Z","last_seen":"2026-02-01T19:38:23.492933Z","times_seen":33,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/api/socket.io/?EIO=4\u0026transport=polling\u0026t=0k9anzn0\u0026sid=VXZtvyaQAqPb-Z5uAAb1","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /api/socket.io/?EIO=4\u0026transport=polling\u0026t=0k9anzn0\u0026sid=VXZtvyaQAqPb-Z5uAAb1 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: undefined\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-be475be1aeeeeb55-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966848742%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X5ZIXPiraSLSzhGjulhrddA6ouRBhC3BwRHwaWH9YIlEXS5EFOM6CIck22wn5c7W13gSeG6Jj7c5MJdJ6g4hxzXxIIPrdb9b%2BRML\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c7328e69bfe5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"dc4630acfa52177085b85f044a29ff86","sha1":"36a6425c5a9554313d8e1bb662c8573a30e1880f","sha256":"c86403518e7d583ad254982198c395f484fda98e02e570b095969890d1686bd8","sha512":"baab0dadd7c5f472540d2cd78b27d14390d5eaac544c794b78544d06863ff2c7393ab15e7d1365e69a8aa0633f960ac0537d57d05764c5a45b29902cb596b651","ssdeep":"","tlshash":"d58000003200b03bac0802a2e82080a0c0c08828f220030a038a08003282323ba82808","first_seen":"2026-02-01T17:28:00.870693Z","last_seen":"2026-02-01T17:28:00.870693Z","times_seen":1,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/about-us?_rsc=888x4","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /about-us?_rsc=888x4 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-aa5644f5ddec06ad-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/about-us\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/about-us?_rsc=888x4\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OYOtxbGoRtngBhL4r8wbNzdyCmrOjJWr7RFmc7Uo3Glfgeo7n%2BRjDGg6X1G6h4aqz8KZxxslEC%2FMeI2V4ksPPcM4TxNEfvhSC3s5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328e818a55a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2459,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (950)","md5":"8ea9571e11f6862efaf0d4c0366b26c3","sha1":"03f02f7b5b17c902b735a61885663e715293594a","sha256":"f5ea86e3b6f51b68c740cb755be22755be72d72f7aa45e911581c400960441ab","sha512":"68e250ee4c55345d9d53005d96320e4c85c97ff9112558f5cef1796fa5edc3bd7e7186f06a65e07dc7e8a8adb42a90593c0efda1bd9b8774f882552ce5101a4b","ssdeep":"","tlshash":"eb519e0dc849adb498c9d59961d5d7016588af37f1b88ca8e44bdc64128f03d0beab87","first_seen":"2026-01-31T21:15:21.997517Z","last_seen":"2026-02-01T17:28:00.872796Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/media/Roboto_Bold-s.p.1734e663.ttf","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/media/Roboto_Bold-s.p.1734e663.ttf HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"28da8-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=edZuL1zNHEPOX36jmhsKylJff6HK0Tk06cMPNn0hntsQal4ntEvLEZpJNsH%2FpWqEN1jE3Kxzo3a098ezrMvkTZTuPl1IrJ%2FRK2FU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbbf575a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167336,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo","md5":"b8e42971dec8d49207a8c8e2b919a6ac","sha1":"62442a18a9fe9457c1afeabf683d263a691b7798","sha256":"ec685a46105296fe46c8744da4a11cf8118ba6c11271941766f7a546df6aa7c7","sha512":"3bd40ac788d44626fd640ec67ef04ab0364816b5e8c831f2077bff8805cfe6890ca29274b476f933f6e96ddaa16f4e2f3f66c616dff7cd88cdcaff7dae8ca5e5","ssdeep":"3072:VBa9dX3CyiSB1/R7O0aXjC1YHeA9bOuPUPT9mYZK9K4N09PJ4X4HXYXXXXXXLnqT:uX6XiuMPT/eK9cnfST80/","tlshash":"29f3f501d2479629cac6b2787c3cd3be1970e429bc6ba11735e4af3149c8945ec69bfc","first_seen":"2023-04-11T21:48:33Z","last_seen":"2026-05-03T12:57:44.402934Z","times_seen":5654,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/fc3bd7c39247c848.css","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/fc3bd7c39247c848.css HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"53027-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a6nE4Fxjxf%2B5Cw3%2F3nDGlBCj49O2G7YaN7pSsQJyGc%2BHS3Buu0u4MUqLp6TtYS53hGWLGswORGtIEaN7RarjKonsIGwNvFEbNRFY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbbf6f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":340007,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"57b3a1fc42725b3767655e2c5e1e3686","sha1":"a5f033187d6d8942dabbeb5c7bb6f7e01abc19a5","sha256":"7220b9aafafef2c5593b891b67bd48a5bafd4f4b4729eb23d098f09255d4cfc5","sha512":"e0be6e1bf967112ca7db7ace4fe5d08e7038ccdb10f0b80fe07906ced9f3458b28e8eb46f3eb9b9f8a4ca42258c0dd9091181b121122f6d0ef23c066f41c6790","ssdeep":"6144:ssaDL+pazxc/6x3jchVC8cxIwBolW+CER1NGdROr1WJWVgSBL/SZG51Ro5kJfb1L:rvRl95T","tlshash":"2974a391b119d1bb7e2ba4fda38cf8dcc108f082de764ba9f955922423d37f36961604","first_seen":"2026-01-31T21:08:57.268767Z","last_seen":"2026-02-02T23:30:02.779633Z","times_seen":75,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/5664bd740cac6a96.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/5664bd740cac6a96.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"12cd-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7tbfhmwJDrdns6SGWgiSG%2F8VD0iH4C%2B43CQKWKsPD8An333aGDCf5CoXni9Fp%2FImhZTBlWYijDMkt1vdnhFQnYXkJXcxV%2BlC0O9q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbcfbe5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4813,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4456)","md5":"838e5b67c708c3caa4ccae2ab6eccfcd","sha1":"b2666226e6fb839315d216fb69074265386b6b8a","sha256":"3afd0a23cf42518fdca2dfc42bffe1b2c611189b89799ecbae2386434adc8e3f","sha512":"845acf9755edd329f45184ad9bccde9249a2018ea514934ae462a84992c69b4db39d636b842de7d5c71b9187c3e2fedab2b41095dadbbfeb40a683b3f9d8c76a","ssdeep":"96:p7ctuv2BtSDxfARZ0kqJFv2H43uuqoE91YTkqdYqiEAXjv2YM:oBtDRCkqJFezuwgYjlXK/","tlshash":"d0a1b6b231a0f490d16b4294c03b441eb27a2d3e609d71b493bd8cfd67e544de6a2f97","first_seen":"2026-01-31T21:08:57.248038Z","last_seen":"2026-04-28T01:10:54.184543Z","times_seen":182,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/c581bdd7dbf758a8.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/c581bdd7dbf758a8.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"9f6-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g8Hh2Lw2IBLIJ7IOSh0m6lBZXLVHIF%2F9Op830PehUNTQb2XP8XyQgc9bW5hZDRIBFH7YtMwcGQobC7WPLePrwAEg%2BmtLMeHV2o9T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dc18d85a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2550,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2193)","md5":"9ba2df7dfa4c1e2e0ca7d8cc1e50c03a","sha1":"2f3772527d36b0f944eb7cfa65be65550d061adb","sha256":"9100e90e66e36e7fe0b6f0729980db3e04d2aba354215302085d03cf81903a89","sha512":"c5363fa9dd717d7d4031f0a7fe9c223bb416331d80bf45e573c28c3ef32f6b30e64427b3fd8b6031d039ba27503cda28c231b5e75d42283ac3c033c699d02c43","ssdeep":"","tlshash":"e95176543054776a25361675f02f0119b36e8a75031c6a62e5ac34fd35218e8db5bfcb","first_seen":"2026-01-31T21:08:57.231593Z","last_seen":"2026-02-19T17:02:28.722851Z","times_seen":71,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/39b6de55b9371bf3.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/39b6de55b9371bf3.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"8533-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wXUcU7%2FI4GOu0CYR7JXeiUZkVrgU8sDOu2kCDYzD9QruTzMkVYgYdurnZmDQchNwx5m5BmxCHqVkLGI2Z7m%2BA8qpR45Rigph3zSS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dc18f95a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34099,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (33742)","md5":"7e2dc4e87b73f4b6aab56debbfebf935","sha1":"a834e2263922aaa560d0191e13557ca7aa738bcd","sha256":"03e189bd9bbb896bc2e6bd24457db1a19881a3461921f362e3e17d024d198962","sha512":"0455ea832815815a7ab41cbb6855a12536e6eb18c9da16f650c4c005792c5b309e448f26a77ba6caf7e45b57a4e3fdd9d03cd84417abc8db3bff57970801bbc1","ssdeep":"768:dM5CSKw6XkoNCarvCYbvp1xEuiLJVgQinHTiv:dy+q4vp1xUis","tlshash":"22e2a2259550aafca93b04b5f57dd04c302dbedcce5a8b68b27abc664a514c03e42f87","first_seen":"2026-01-31T21:08:57.232883Z","last_seen":"2026-02-19T17:02:28.837927Z","times_seen":71,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-triple-pot-gold.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-triple-pot-gold.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 72680\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:43 GMT\r\netag: W/\"11be8-19baced2b98\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dlmTtFykwRHyliaCVBHxTaJ2FqvomsyoXUR1fdIkHkM3%2FFnrYEt8bVR9rsIId0ssOdzghKgIBOUxh%2BHuz%2FksL4qQtEWja%2BJSV%2BcA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ef3fce5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72680,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c95d876096556df9e7631e45ebeea811","sha1":"27387071917715223fdbf76339781edc8c327c56","sha256":"9a4de042a23703ffcb5b882ce63e47ec6a87e9da712cfcf2925b9c58537e2029","sha512":"6d84d22cb9c73ee9ae2ba2deaba5a4b2c44a3212914c1722c840cc726bb570589c0ca2198f561eded4682ae8ee33c484a6284361128bc4f314c482ea39b2610b","ssdeep":"1536:+X/mcutlkDu9XmkhNSubgfC7A0fxx69im0PjsSfy4n:+X/6lkDu/guUcp5x6kjs2","tlshash":"ca63026cea3471bedd4de2adf9ec1b9c1dc7343f2ca45a967172721a46c6409b1f8014","first_seen":"2026-01-31T21:14:50.623971Z","last_seen":"2026-02-13T20:55:00.747557Z","times_seen":35,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/?_rsc=qa66u","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /?_rsc=qa66u HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-8dc6f7ec9ac12189-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design?_rsc=qa66u\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r8871caVVDDydw9Wwaw0ODFfOLOVN%2B3J4rG6BKd3WcGMMzGlGHM8UVr8AQWgPcJar%2BRvNWyCHIh3Zt%2ByiwLmnoOpc5fM2kLGj5qg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ec8f445a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52774,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4865)","md5":"7ce6c85987c21d857db66e930b37f842","sha1":"bbcbd5dab23f1da0b42f2ee38e7805794ce39da0","sha256":"ce92504789284fa94166fabc7522833176666df8eb490bfbedb3a649823b80aa","sha512":"77c1d61ad0f35c8c84c8279e7fa2b673723b796e5a24f9eb97aa3188025f3ba6cdd366245adfbc8696a5beb1ce5bbc6bb5eb83cf0329c1b6d8eb3f68128a3a8b","ssdeep":"1536:GEbG4yk68ygc5+4FNn6JxlOQpKLnlxkN0a3BFug:GEb7y/8xc5DFolXd","tlshash":"9733d665a71aedbcfc1aacac140f8335ba890db7de22ccb9d3ed9d4403490245f592d6","first_seen":"2026-02-01T17:28:00.881427Z","last_seen":"2026-02-01T17:28:00.881427Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/84514c7510b6b9ca.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/84514c7510b6b9ca.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"3d94-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GGn%2FOlD4FAkTjRvGaOP3shkL4Y1y7x63LRUoB1Kt7bmEZaB%2FOLYU24icxmyZTzTbQ0MCOuw6QaZu4p3sBf1peUWR23GvsGamtMlG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbbf8a5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15764,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (15407)","md5":"d51af061e259b2aac980c62c2a581cfa","sha1":"25dc5232dd34515d64d445c772aa386d15a843bc","sha256":"a058a237f6dbe04d72f900d5ac0cd02aa6c68aad91ecdfe74aeb81a7c23b3e3d","sha512":"b9977395310e5f15dcb8b94e1034cff5d09ec28908599e6d68a3fdb453b3d9c805e3eacfd9b42d7a1e156027d445600a5c38c8d5f350f92a79494aef77e1bc30","ssdeep":"384:RqybOz+GjHeaCgyP340BAg9p/cZNRAUL0YvK6dD:Rqyaz+mlCgao0BHl4RAULBC6J","tlshash":"ab62f9e972e6fda383a74194843b0007f6280d76145ea4e4f7e8dcea356094e91f2f99","first_seen":"2026-01-31T21:08:57.197191Z","last_seen":"2026-04-28T01:10:54.101669Z","times_seen":182,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/1b665a0afce73dad.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/1b665a0afce73dad.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"e473-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IAgLF4hdGPRYwWanLXqbF3qsEO3ZjpLtQklE1QQ1y3asr85yrG6QVmyFdwGLxhkiH1dR664YO1HS%2F8UlVo%2Fd7H1pkRgi44SMOiCZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbcfa45a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58483,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32244)","md5":"c2e0d2938c329e8e4e3bb947c411965e","sha1":"eb9ab849c9e0f4a8dbd455cecc450bbee2988bf1","sha256":"fa375e72bdd6a25673f1deb2341903ddb31dde73ac45085ff8146e1a750e7150","sha512":"5af91b03962f20bc171e220cc361e202255e5eaf4777430d72f2dc8780f4da664b1df6d7e8d2c8363720491dfd1b81a022437d4a1359c5f91d76b5d090e60be1","ssdeep":"1536:M7JIDwUDps7xdBmFLkjBnx01mId5iYthtVo:GIbDpsBCLkRx","tlshash":"4243d8d97392743117aa1225907e4107f7b999d0114b8028fa6dcdde3aa449ab2f3f3e","first_seen":"2026-01-31T21:08:57.240408Z","last_seen":"2026-04-28T01:10:54.143261Z","times_seen":182,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/4b73fe5a475716f9.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/4b73fe5a475716f9.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"83ae-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pQP1KvXnVmLtxrPvE6KQ%2B7fI0%2Bt0Gj5rhKE5Qm7%2B06dKsDPXew%2BsZZDO25VvtxIrqPDy3jjc%2BFWLkoORwOPXjFlRPYqqZzMIFJ6N\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbdfcf5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33710,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (33353)","md5":"d36b24fc99ee384e0689eef065597a6c","sha1":"8ef86b2640497083b9d8305d48babc41bec3284b","sha256":"c36e1856c14ed3099197c8082b210ea9ddc07a2a7ab4663c8b3e65d5e12dc125","sha512":"5513fdad3b32216d6a72ffef92b37ac87e5ae6ae430c25b3d1b926723eb66fd719678cb5bc560f1f17db468b1ecaa676b908676ab2e2dac079dbbacc7243c59e","ssdeep":"768:7ndxrGZTCyFcQvmOwaCHHZgKIGrBvnKgApILOHz2syklZ0:7ndxrGZTCyFcQvKaC9rgALOT2Xkli","tlshash":"f1e2fa947520ac75de2f4afd7089c412a7fc2120c9186861f2fe5cbe13d9ac97362b8d","first_seen":"2026-01-11T01:55:53.449721Z","last_seen":"2026-02-19T17:02:28.864329Z","times_seen":73,"resource_available":true,"data":null}},"time_used":1104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/mines.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/mines.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1734\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:17 GMT\r\netag: W/\"6c6-19b7abf0268\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HiG9Cw0YlYdbAGrPge%2B6HSCZmL0i4sClhRaLeDBVr8vts3V%2B8Bu%2Fwvqi2bO%2B5yf6EmKfrUlyiHnRry6yWdmEZ7LXYrzIVzyT3sjJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328eeff015a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1734,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 208x257, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7fdb901c172b335aa0c59289d0ca1d53","sha1":"164b3ba4e8ef8a7f10d158a69f9f664e63085c6f","sha256":"a54b22a7226f14e4f83d960f2e8ae53dda7ba0ebe49587b1209ff36898e26bff","sha512":"633554002826f300bb24d88d9de30388a612c4f9afff50dc6aade8996a8dce578e4c7d0a98ae474dc83d1bf2ca0bb86a11db9c916f3c9d515b7a11ae414f7c4d","ssdeep":"","tlshash":"bf310b3e015b206166e29b6f633d17a48dd505c98eb3ceb4244fcea2ac14fd1d560f11","first_seen":"2026-01-11T01:55:53.426802Z","last_seen":"2026-02-19T17:02:28.799021Z","times_seen":73,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/api/bets/lastWinsNew?filter=all\u0026limit=10","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /api/bets/lastWinsNew?filter=all\u0026limit=10 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-91ea34a59b1f49bc-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"99e-RcZuDJtNtMb15x9qYThufFYIBkU\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GixlEJXcEki30jYmn%2BVfZZcd9%2FmTSTd0XoCsBYWc26qfCceXPGmTS0qzTrRYak6o7jePzFVyAGPkuV1Wi7qQu%2F9cKVHrkUqyHNpz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c7328efc9575a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2462,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5344015be34cc7362212115df1373047","sha1":"45c66e0c9b4db4c6f5e71f6a61386e7c56080645","sha256":"6b4233644021614fa99c9725810216bb05b11ac5521824b9e8b3815346f7aa50","sha512":"db73adab7653b83eb77087a80c4a91da629081aabbab2b2fe52657db1c0fe5e483942cfe1966211446aa5c5c549f8ca2499b6db311c1f8f6c6bb80c85f5deac7","ssdeep":"","tlshash":"91519d3a24bd1ca4e01d09c771c23526a4de651328c8dea18a6dcf3da3f4c5ae8079f7","first_seen":"2026-02-01T17:28:00.887866Z","last_seen":"2026-02-01T17:28:00.887866Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/api/bets/lastWinsNew?filter=highWins\u0026limit=10","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /api/bets/lastWinsNew?filter=highWins\u0026limit=10 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-9a5d5efce880edbd-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"97c-U0/c0J3WwO2oyWY3fSx0tHMksDM\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WjBVASqXZQVpuR7Ico36sXQPGqt5MkMM3SeZqvgk%2F8SXAz6h0Cq9g5qFgRDKg%2BxO56shB0RpNxOQpyKOeH6EDzszAeznNMPPc%2BNF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c7328efc96d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2428,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f46f419b4233f73327032ccc01cb54ef","sha1":"534fdcd09dd6c0eda8c966377d2c74b47324b033","sha256":"426746b6b2b613986db8871a61042212f9b3307134bbda1ad8ee88a36e99eee9","sha512":"ef3aa32ddcd48082d8bdb4f653d39f4027fbd2983083d457e28a4d2c12be3b3a48243a458f28c4cb64a1fd2d2320d4442292ecc2b76485d181a97ad9cfcede8e","ssdeep":"","tlshash":"ad41be3a20f91ca8d0191dc6b1c23516b4ed751728c4cea08a6ccf3de2f955aed06af7","first_seen":"2026-02-01T17:28:00.890414Z","last_seen":"2026-02-01T17:28:00.890414Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-888-gold.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-888-gold.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33914\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:03 GMT\r\netag: W/\"847a-19baced79b8\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G2%2FWYCZVTl153EjQ5dkYVnRI5tGGpH8vjckeToOvydO4%2BRpOM9OHCI94h7ye4pp8PIqEs5J1z4%2F6vGPYQ12sLSWJY0GhqxFo909y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f14df15a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33914,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"67269173360d787743fc7408eac09b8a","sha1":"b81d7879445b24567da9b760bb0fa7026498ae94","sha256":"1b43541811103e958b617364563faf592634456dcf389fd6ef2fb5c5ac7b13dd","sha512":"957ba412a4861c86be0ccb8df185b99f19d654e099e5a252bc8a255c71dbff70fecd651614f838064b3f8aa3988951dc57e6bd00d321981076c30ea69332382f","ssdeep":"768:vx8q7LumnsFdT2bfGIpC/YJO2fkTB00rrIdU0aJyvo:t7LutFdqo/yOWkTB00o8Jyvo","tlshash":"3de2e1e08658fb9994e2b199eeb34ec706fa41f3dc5828b781ccbd5a54f192815c3309","first_seen":"2026-01-31T21:14:50.703297Z","last_seen":"2026-02-13T20:55:00.8129Z","times_seen":35,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/?_rsc=bnag7","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /?_rsc=bnag7 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-9aebab9ee9fe8492-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design?_rsc=bnag7\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3avGXR7zYhZyHt8UILTB5Ki05mbFgRTp%2BLsuIJXNxKO7e6BHOGXKJRSCoByusdcb1lGXw3CEsuHrZK4S0rpSoMi1MGV5P9o4gfQG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328eb6bc35a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1961,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1440)","md5":"37b0ffd9cb2d27e7a6a2c212d8bf3083","sha1":"24aca75d5e1c0753e588ce675c45ab982223c306","sha256":"30ba036a2dc940c8de5323e2f487f1c5e80fff031adadcbb5e71d758fec4160b","sha512":"bf3d200415ed7b9ee61a88a94de3f2c15340c0209c07cf9d85ff5c5889fc612b705315ceeb91cd573c0d6162814031d3b1feafce34130c59ad724ef805d17f42","ssdeep":"","tlshash":"2041237a890ced4d5a67c95d086fe31a550d1673c6701e6aebaccd0e1ac503e4f60e90","first_seen":"2026-01-31T21:15:21.902571Z","last_seen":"2026-02-01T17:28:00.893286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/f2c075ff8674f48a.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/f2c075ff8674f48a.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"a16-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q7qSP1pg1dtYirknmx4UsrYsh2HDViUAak2PLNujizxvsFvolTGG6mhm%2BO3GHl8V1WkbfhnPTEQyOExQZrwNVGdJbVcegFhygeTD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dc08965a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2582,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2225)","md5":"3e91325fdd36d18a20855a2c09856311","sha1":"caaf5398f37f8edb868296e2a35966e9fcaf2261","sha256":"b85d8f984c98d529d06bfbb6a1d848d9d7f07a28e6205538a10b8f6bd41d850c","sha512":"29c916de66c4f6b31a883bb274035c052566890e60b5d3c0e2414787fa0b80ff98041a3942f19505466c2b4349bd406c3237a322f583ade569cbb6fa988118b6","ssdeep":"","tlshash":"005164e32b4832fc28ca10681e6b6113969c753f31cf90a49a4cc5f4a6cad88f26345b","first_seen":"2026-01-31T21:08:57.26314Z","last_seen":"2026-02-19T17:02:28.785235Z","times_seen":71,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/media/Inter_Regular-s.p.b62ab84d.ttf","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:28.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/media/Inter_Regular-s.p.b62ab84d.ttf HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/_next/static/chunks/a85c5f2112ae0905.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:28 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"63610-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 1\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AennnmNab4FJ3c0fHmcwe799nqOMpWNuz0EsZ7xwikjrD2hov6C6p7CxFULEdgw4WXsZRVrO6vO%2FC0bZ96XZzvX7Otqmerh4L%2Fba\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328e348f35a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407056,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 35 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInterRegular4.000;git-a52131595;RSMS;Inter-RegularInter ","md5":"fdb50e0d48cdcf775fa1ac0dc3c33bd4","sha1":"5c95e5d66572aeca303512ba41a8dde0cea92c80","sha256":"64f8be6e55c37e32ef03da99714bf3aa58b8f2099bfe4f759a7578e3b8291123","sha512":"20ce8100c96058d4e64a12d0817b7ce638cec9f5d03651320eb6b9c3f47ee289ccc695bd3b5b6bf8e0867cdab0ebb6e8cae77df054e185828a6a13f3733ede53","ssdeep":"6144:sSnv4lXwF22mZ8JWPziKSQUmeKGVOOxAdgwH9evDFDynor51EOO2UAGbzxSr1w7b:sSvJ22mZzPziKwLOOkvH9IQoUf7P08","tlshash":"30845a17e70ad70ede452e308af987c133b9bca1785a924bb59e3a58dd971f409cb0d0","first_seen":"2024-07-29T21:54:32Z","last_seen":"2026-05-02T23:37:49.098607Z","times_seen":348,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/second-design/home/promo3.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /second-design/home/promo3.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7782\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 21:01:33 GMT\r\netag: W/\"1e66-19b7b5da3c8\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iX4gJ%2B2t0m8miurzgJBrA%2BmOkGxQL6tNT3Ni%2FF4NXdIjZmXVbc9Td%2B1xNY82QBkSUhYdqSijBVo1x%2B9MDXI9kaipsOUJ8rwsqkw%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f13db45a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7782,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ede4c081b4631f67918ea29b84df3ebb","sha1":"419615db1061840c37e5bc5bf4081947bd5148bd","sha256":"33b256735e64989f6fcd5d28bf295e6e6d47ece66be5b9a43a96074166d74a78","sha512":"8b15972f0e61d08d22fe0dd6be6ac61b42f39d96a6f620ab8c85df5040f636f738bc9313c8614387020be54106d78fd715410ffe63db26f748b68ed3edf80e2c","ssdeep":"192:jRgHZlmBzag9JWBreRAFQZBSRyU3LZvjE:jRBzagqdyPSEU3FE","tlshash":"43f1ae7c0696320e81a9c82159f0b0fd0a993607cb42435cddecbacf2e99f4851c1216","first_seen":"2026-01-11T01:55:53.533126Z","last_seen":"2026-02-19T17:02:28.691621Z","times_seen":73,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-master-joker.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-master-joker.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29036\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:47 GMT\r\netag: W/\"716c-19baced3b38\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ki8uuN1K4IuT7yGUfeQPV%2Bo8LQt4KLLPqC207H%2BAaSPWky3fy8M0f3uBqdolE3l8gFZYJG55cHww7URw3w47aKYhCWMokniWfAj0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f15e2f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29036,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3094e21d59f5cac448bbc2f0cab09182","sha1":"1050e322162a7e7ce0545382e1606a56618b397f","sha256":"d93f2ac7f9a08d05e70310a2cc0d88bfe80c253870b0633d2b04dc167bc67d56","sha512":"cd5404737f5b1530f0b6414075c9a666fd5baabdb3f789ecd09c7a61d6f7c4c5f87e009da9cc64a0d7b5886962ff2cd9d81a031c3d548d513e633acb791f4c62","ssdeep":"768:PmSbnTLBKAIUvv7t5YD7+J5qqhA1hkykbcwn/X1lL/N:bTLBKsvzUPM5Dh/cIlJN","tlshash":"07d2f1be2e6c1b50d348510480a92bbfd6fff994930c74a28187d8bb4b87e44b491b1f","first_seen":"2026-01-31T21:14:50.658918Z","last_seen":"2026-02-13T20:55:00.781805Z","times_seen":36,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/about-us?_rsc=16btk","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:31.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /about-us?_rsc=16btk HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/about-us/__PAGE__\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-98e68395902fd39a-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/about-us\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/about-us?_rsc=16btk\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Di7GCdy3zSKx1uR7CflKBdFU30mpHoBWb0JXV9QaT6FoDbjZJpU13i0T7IoRXxAXIe42JUP1mok2SbjTG0%2BocC0zuuQEtxBgavoR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f2cae95a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19488,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (4166)","md5":"2d6f4dae534050ef8946151152ccc8df","sha1":"d3954dc68fa8855392b80cf738a2506c93e58f38","sha256":"64e53a5bdb20d05c70caa6d8547aa13b9af324d647843a3bed04fc714f7ddd71","sha512":"e5a7a695764aafbbaabd39e0374c8115c480196281459a734c0a38569d83d70d64607dafb53f713f66165bfb140a4bb6e8f3fc51c95cf046d7f237bf0793836b","ssdeep":"384:yquERXqJNpfMFEBgcXBqi8K7Aw4A6R80d:PqJNpfMFEBgcXBqi8K7oA6R80d","tlshash":"be9203399706aeecaa7b4065142ec32ea31d8a77d796cf75e2fc9e6003460742d573c8","first_seen":"2026-01-31T21:15:21.948155Z","last_seen":"2026-02-01T17:28:00.898494Z","times_seen":2,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/b56bfb8753f2111d.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:32.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/b56bfb8753f2111d.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"7175-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9dvZ6xxcihsR%2BwF7Rx3JNZXlxKGCozz6MJHAAK4i%2FDYAk7254JFkW2ceRVOzsmHCbI0cJBemoTX75PURvjEQ3u6EnAY4hExb4aqJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328faac555a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29045,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (28688)","md5":"5e68a13c76892f30a85efabb13d82ca1","sha1":"966afd56bd2dd10ac30443a969c57de7820276eb","sha256":"143ac296f86033ddcd6f04439e75754aef4136412b75872a710be987fd05f423","sha512":"7efb5a92b6fb9e7cf28fe24b78c7cd93aaa393bbf28dad89e0445c7790de25405e6caf21dbba8602c134dc70d37361234d9425cb1487dee4b6e331616451ac12","ssdeep":"384:u2HyPM3ojR4oAQgGTH1BS8UEHMupcS3hHgrhiiGE6oSmLSpfz7SG2n6:u2Hy4lCHdMup3hHOiiGN54Spfz126","tlshash":"b2d2c7e33112f4728adfe2efa0a70466a33d26189409453c7d7a9d8d326d6447297f3b","first_seen":"2026-01-11T01:55:53.570094Z","last_seen":"2026-02-19T17:02:28.73521Z","times_seen":73,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/media/Roboto_Medium-s.p.caaade52.ttf","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/media/Roboto_Medium-s.p.caaade52.ttf HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"292c4-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4m91zjDNVm1By8RAXLmIeUy0ciLz5PNB04mUisVIeEHHdZ4B2XD9eMtJhNCcCFQ1X4xzPM4B1xzTZEE2UI4u0vVM1dnAqYaqQy9u\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbbf5f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168644,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.137; 2017Roboto-Med","md5":"68ea4734cf86bd544650aee05137d7bb","sha1":"3c6a09fcc6a454924c81af7dff94fc6d399ed79b","sha256":"9d0d55a303bfd13b79a87721f65185e93f235e2d77fe398b2dca67ac519915f5","sha512":"5d55a41b845f3a3ae9b08cee5258348dfd83dac5f0a0e48159cd85c141c614a02f8f474fa683d2bfbc451d49dd3b749820662d403b2e3fd3f16a242eaca64115","ssdeep":"3072:wqmtn5wkex8r6Qym7KCkygAKuXylCC9ptSUXl8j/6afWRCgqdhASD/80/:n25wklN7T3QtSUXz7XfST80/","tlshash":"73f3d701d241bf25cac6b6787c7c93be4cb5e41abc4aa52730d9ab3159c8805ec58bfd","first_seen":"2023-04-05T23:29:00Z","last_seen":"2026-05-03T12:11:31.41595Z","times_seen":1644,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/a85c5f2112ae0905.css","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/a85c5f2112ae0905.css HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"ce7-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YxfivrzOOAXO%2BMH3TRryppuA7RbXY3vHcGUgocQlZdlJybvOAetE%2FFvroLkqdwD11uUryt76NV%2FKj%2BvipfXRCdnj5p1FheSXf3gj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbbf775a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3303,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1085)","md5":"e0eae693638a4faffd4c9f557a7438b1","sha1":"6bfb8474afb2f4ba719f35fe3dc2aef001107552","sha256":"5d3675b31c9a19c7c528d457f5543f31e62ec5d85f076f8de0ca5ecc8bb47367","sha512":"3843c89db03ab7a8f9e518bd9e9590c414ecfcdf24e6eb6ae8ef9da51dbf37c9bebc3c1e08072f7cf75ed6b5610766e024574425042890a0d93396e2ba46ddfa","ssdeep":"","tlshash":"e8617510011e923ad8b59d97778e3fa13ca8bc90a5795d23e5290d2d8ad7c7b13f0f29","first_seen":"2025-11-23T22:59:50.498332Z","last_seen":"2026-05-02T23:37:49.129675Z","times_seen":191,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/c9d86bbb7c4acdee.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/c9d86bbb7c4acdee.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"6599e-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lUqNCAuhbGD6vHpg2miNOWM40TR%2Fm0jGmKdBBIJSlwvbWY1KTXCK3A1d896BvE48zKrBd96%2BttUSn%2BTQCqbsdAgcVOwrBJtvn8xR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbdfee5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":416158,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"375038ec8cec6aada72e25b152bbeef5","sha1":"c78b20a01aa625bdb0e1ab2358db14698586a570","sha256":"606e1f12073f6762a118cf232414bf2899bf3ffd6f7fd06ae61dd2363cd682aa","sha512":"97d64ef9834f0b04009a43f212061a31b40a484389b2959a10b49264597a5c6a9a2af0e7b45d248e3bbce3d70e036cee4a77bf53eaca3c7f7a670ab7d43b1c5e","ssdeep":"3072:ueuxDvbX1azHazaNQNYBr5XtP9hO9R3+VQVhUGHTbGpLsev6ns4xlPfetAvJQXEM:ueuxb7jV2ECNvms+lPnjz6x","tlshash":"2c940888b760b022835666e0052f944fe27ef92d6c4a44bcf654e8f57cbd889653bf34","first_seen":"2026-01-11T01:55:53.513192Z","last_seen":"2026-02-02T22:33:10.118728Z","times_seen":69,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/b699731cda0020b4.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/b699731cda0020b4.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"3bc9-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bf5oTgIMdtwIqRbVzl7rVwF5A2oigbNLssLivENJQdPlhI3mCSovJ0QyMrCbsdBHpuFnyWyl1bu7MeZyGnArUaFjfHGgfrKnyx4t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dc08a85a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15305,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14948)","md5":"40440d0a26afb7694208aaa1124c32ae","sha1":"92e8a42be6d633c2e1600636ad212c413efc6dad","sha256":"5e5beddff18019122661132c259f1c8997d53a8136edaf8eff390948b963c9fb","sha512":"81a7ea351def4c29eebe87171688734b80801a7e40786a86a551687cd6bf81530a7f543c9fbc1fb6f4b42a857fa970238926bbcc24ada2c6b2b2d7389d2b0e08","ssdeep":"192:OqB5qeZR31Jm74v1o0n+K8jvZnSGQpXeXcBorSncmMcRD1o26Ss1RviE8VSTtrSF:Ooq8RhKnjvhm/p467EIa3XDoOar","tlshash":"ba62f7e576d2f071a3ba1ae6d03f0056f2691db4240d1010f369e4f9397489a86e7f7a","first_seen":"2026-01-11T01:55:53.572093Z","last_seen":"2026-02-19T17:02:28.75444Z","times_seen":73,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/ph/flags/?v=2\u0026config=true\u0026ip=0\u0026_=1769966848707\u0026ver=1.318.1\u0026compression=base64","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:28.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"POST /ph/flags/?v=2\u0026config=true\u0026ip=0\u0026_=1769966848707\u0026ver=1.318.1\u0026compression=base64 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\ncontent-type: application/x-www-form-urlencoded\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-b3eb2b1e974c0f87-0\r\nContent-Length: 277\r\nOrigin: https://mycasin.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":277,"data":"data=eyJ0b2tlbiI6InBoY19UcEhBQW9jS3ZlRUlIVTJZZVd4S2Z5Z0RvRVY3TEMyYkNxNG1FYUQ3bHVOIiwiZGlzdGluY3RfaWQiOiIwMTljMWEzZS1jYWJmLTczNjktYTgxYy1lYzc4MTIyZGIzMWMiLCJncm91cHMiOnt9LCJwZXJzb25fcHJvcGVydGllcyI6e30sIiRkZXZpY2VfaWQiOiIwMTljMWEzZS1jYWJmLTczNjktYTgxYy1lYzc4MTIyZGIzMWMifQ%3D%3D"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:28 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=as4a5CHa3CX7Im14dTKfhWHx%2F8STS6dFr12bgMAVx16zjz2txhNS2%2F1yOfpK0ygoDRwL%2FhkcO84zE7OjPUf1K%2BOL3sAAwOsHOxDP\"}]}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\ncache-control: no-cache\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%7D\r\ndnt: 1\r\norigin: https://mycasin.icu\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreferer: https://mycasin.icu/\r\nsec-fetch-dest: empty\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-b3eb2b1e974c0f87-0\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 172.64.209.75\r\nx-forwarded-host: mycasin.icu\r\nx-forwarded-port: 3000\r\nx-middleware-rewrite: https://eu.i.posthog.com/flags/?v=2\u0026config=true\u0026ip=0\u0026_=1769966848707\u0026ver=1.318.1\u0026compression=base64\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://mycasin.icu\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 80\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c7328e47ccc5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1662,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1743d2be2543e0fc947595795e15140b","sha1":"716d0bdb363b82f9d5b0a59fd1317e0c1d36b9be","sha256":"0f0910e5a48d566ba7de0e200b974e6e4d38407b7bfacea1de4f1114f28fa307","sha512":"c559db549139f22ba6ad2ef4e13c54d60d03b0ae1a48d5ed2fd9ba4c7dbaa29b54d80bc4c90f57c1ff435510c0add012cbde522bdece5a30cb6f084154c8ddd3","ssdeep":"","tlshash":"5331f139bd20683b944ec3509ce8be464fbe133715205c109c494a3823e72f97a6bc27","first_seen":"2026-02-01T17:28:00.906131Z","last_seen":"2026-02-01T17:28:00.906131Z","times_seen":1,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/?type=originals\u0026_rsc=888x4","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /?type=originals\u0026_rsc=888x4 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-8086e443b8d77563-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design\r\nx-nextjs-rewritten-query: type=originals\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design?type=originals\u0026_rsc=888x4\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WR8PQGMfhynsUt%2B%2FuTVYNq%2FZutj4XpqPRMHZ7xr6yqauONm%2Fggvm%2BfzkI1Rm3W8JhzN6E%2F2aNHWCqof36Ll2dDzy2lIpZrQYuGrQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328eac9c95a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2331,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (822)","md5":"2c76222b1daabfbaf253b461b006d2df","sha1":"403da709b7cb0e452bd6531643de4c6ebb716fb5","sha256":"7996e99be0afd3a17bec81f7aad2dcd66e1b21cd7e16a5def674d3a3f3d51e74","sha512":"dfbb8eda09c124a38b635797a8b5cec7f099328c7ccaf9e04b1015e0f37eb0412741ad1182a09ae4a51c184c0000fe52c06af09e2618baf58c77105a9ebe021b","ssdeep":"","tlshash":"db41800dc949adb498c9d59961d9d70165887f37f1b88dace04bdca4428b03d0beab87","first_seen":"2026-01-31T21:15:21.887485Z","last_seen":"2026-02-01T17:28:00.832456Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/dice.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/dice.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2390\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:14 GMT\r\netag: W/\"956-19b7abef6b0\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=36G24SlrY48%2BDIf8fc1%2B5k%2FNJ1BA2yLSV10oS1zwWpsoUU8HjMwC%2F0mZI%2FGAtzwQrykR2eR9EHcXb2aAuIeF%2F3WggaWKnfvwDzMN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328eefeef5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2390,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 208x257, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4321a3197f1ab9457ef1edc8cb638de2","sha1":"b1eccd479b3023229103fe120e8527ddc765bb7d","sha256":"26b05e23fbd6963544e3f01f738a630cb4deb0aa7bf94462805c3d95a22d95d2","sha512":"fbf76854f7d7af55aff499175825cb1cecefcbacea89da3e7dd6556e850dd7a9486a006857293641db3eeeabe5ee5102e98130fe3f16a9f62484e4c3d90e0cf1","ssdeep":"","tlshash":"53416d04d1a1d7a450eab19c4229de634ec7d491f54463403f8fbebcc92154210eeede","first_seen":"2026-01-11T01:55:53.45306Z","last_seen":"2026-02-19T17:02:28.672387Z","times_seen":73,"resource_available":false,"data":null}},"time_used":1105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-gates-of-olympus-1000.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-gates-of-olympus-1000.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39160\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:42 GMT\r\netag: W/\"98f8-19baced27b0\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0czwxmu23wbADwhrIsz8PX97zrje0WtIn%2Fg5eoO4BPK48Swvp5PbCO0OmXfyl0w1m%2FnMLM5nZy3fvKBJaR7h1CZU34LzsaBW2aiU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ef3fc05a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39160,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9ae88cbd6f924f3d0366dd7c24a5e3ec","sha1":"447ea415b780517d29038ba887324f05e57a9d01","sha256":"894b3de1be641f49f9ec6c54d09ef8c02ae747b40faf0f2f0919a3904e46f925","sha512":"6cf4b1d257b988fe55a0b8a0d1468962bb5da9c97b02e2ec3f4b54451314e8b6ed360dc32e3b9554250b8a19609f208ff9f74ee51f8b7d4a51b9a3b02a19b441","ssdeep":"768:iGqzoM1cgOuMNxOWxma/EPgDmGB/z1PsStoxjeRwFqd3dCh6IMZsY0:h+pO7dwaNDmQ5Pno9YwFEQjY0","tlshash":"ba03010327c692588353cbba0d5e28f4d042af423b905db776882375c27b69eafd1c2d","first_seen":"2026-01-31T21:14:50.710691Z","last_seen":"2026-02-13T20:55:00.768986Z","times_seen":35,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T17:27:26.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-powered-by: Next.js\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WHqQotzRxHTu%2BpOz5sHefR2qdH%2FzZ9RxVBi2lQ5dmsnchsUiEJVzPc%2BoHTJIYX1b2fmLKpXt6tQYUovYo%2BO4Jeum1LlnloFcTw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c7328d80af70b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187472,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (41847)","md5":"3fde7e3c6e1138b6b3262cbfb419178c","sha1":"b47ca93415970abbf043400f340933562f4bab7e","sha256":"3c8dc6dd37a25ba5ab7b13042edf267f37f640feb9899b98ba50464bc51d95c4","sha512":"48094b49a24efdb3cf89af0045d0df644bf61557cb138e11b008bf4777008d09148a0ac8bf77bca931e800e78479d278880b2edeb9fc959a8dc0116aadb0327c","ssdeep":"1536:BO6gs3LWDi0X7AVPYSsk10aXs76M/2yT+VvzrAGJU4B/i2f38pMZcUMmFA:o6gM23D6M/2yT+VvzrhJUo/i2/8Gtxm","tlshash":"4504716ee80ae958ec56ed9e113f5f3aa4c9c8778631c92ce3ddcd58015243a4be9dc0","first_seen":"2026-02-01T17:28:00.910121Z","last_seen":"2026-02-01T17:28:00.910121Z","times_seen":1,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":104,"dns":91,"connect":1,"send":0,"wait":356,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/providers?_rsc=888x4","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /providers?_rsc=888x4 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-a44c55ccf4cb6b69-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/providers\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/providers?_rsc=888x4\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sxViIgjGIrt2qMzSd%2BbVumsCeACmHnhydeaYl7KO5wiGd6MgwNbDjRepFmoL2LMiE1oFFYtxgsW33JTa5Cr0oyoG81ipNIgJlWwf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328e91c435a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2461,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (952)","md5":"a61af6eb75ba5cd8565cdb20305f1f8b","sha1":"3c98b71abdd5adcb5647d6278f86be3c08c09764","sha256":"6720abe86609cf3954f5d15e1b82805548715e800d73341b8134bf2061a4d9ee","sha512":"c77c294d40533246f5e25db101b02bc1c7b7ba4a83c21590ef5845646dc91c8f1c87f714517cec5544ded3393a22cf565b8bc594ab1ed68e64974691d66dc0ce","ssdeep":"","tlshash":"6a519e0dc849adb498c9d59d61d5d7016588af37f1b89ca8e04bdc64528f03d0beab87","first_seen":"2026-01-31T21:15:22.102159Z","last_seen":"2026-02-01T17:28:00.911942Z","times_seen":2,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/terms?_rsc=bnag7","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /terms?_rsc=bnag7 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-b698c11efdd72a5c-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/terms\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/terms?_rsc=bnag7\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0FVH%2BLwG7tF%2BX%2B%2FSWRpsu%2FUcEMAzwM7%2BtvRqK7aGbMSdUiwhw2CksLXrE9aXj1t9xacygInReiHYfGArB9yeEGyRaHTGljtQ3lgk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ee6d525a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1961,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1440)","md5":"37b0ffd9cb2d27e7a6a2c212d8bf3083","sha1":"24aca75d5e1c0753e588ce675c45ab982223c306","sha256":"30ba036a2dc940c8de5323e2f487f1c5e80fff031adadcbb5e71d758fec4160b","sha512":"bf3d200415ed7b9ee61a88a94de3f2c15340c0209c07cf9d85ff5c5889fc612b705315ceeb91cd573c0d6162814031d3b1feafce34130c59ad724ef805d17f42","ssdeep":"","tlshash":"2041237a890ced4d5a67c95d086fe31a550d1673c6701e6aebaccd0e1ac503e4f60e90","first_seen":"2026-01-31T21:15:21.902571Z","last_seen":"2026-02-01T17:28:00.893286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-jokers-jewels.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-jokers-jewels.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39740\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:58 GMT\r\netag: W/\"9b3c-19baced6630\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=26G8oc5sbkyH2A95ocdj2rArTFDpWKoh6cZdcQd1f8Oy8i1V2dUJyJz1xSA0OYpUE8PYb9RQaMQvnHqtR2K%2FjN4hl9gE7WeNOLrs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f14de45a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39740,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fa8221d47a06918953027c03798dd4c5","sha1":"f03981956da1966888442cd82caa655416fcbd4c","sha256":"a0ca12be48301704dd2533f19a42b0c022a1c6b5011d5d2ca9082b0a79d2c36e","sha512":"43f6b8de00df387dcc91d197e82d7b144c856ec4b8bed6eb01f5dd84593682432d44065c1104249cab48c61d932ebd65319b2068a008b80444f8e837ca2e663c","ssdeep":"768:a0oIikBnCcYdYdLEkmz8SXWaG4UZPJ9dGNRaRbyUVd7tbS6PyEbKo:av6HYYRpxtPZPDdkRXWd7ZS6qcP","tlshash":"8903f1b3b3d2c01714be855f9843b63500f6cb94a5d4eb4ce2e6f16a60779db0837a26","first_seen":"2026-01-31T21:14:50.620987Z","last_seen":"2026-02-13T20:55:00.755374Z","times_seen":36,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/account?_rsc=888x4","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /account?_rsc=888x4 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-8a9ff7d206df9810-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 Temporary Redirect\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlocation: /?action=register\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z9G%2Bxil9YHj4V3egkLsrHQO0puB9DKjU7SFrIX4Cxf9EsBcQ4XJUoBaTZoOfYmRqff0kZP3dUciOhkniC8tH9N4RZ7zm5Uf5QE8O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f16e7f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2331,"size_decoded":0,"mime_type":"text/x-component","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T13:30:47.290276Z","times_seen":14582701,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-fishin-reels.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-fishin-reels.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19858\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:09 GMT\r\netag: W/\"4d92-19baced9128\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yi%2B%2B%2BpdlUiLC5rrc6oA2hWEBMgsqbj6aa1FLMv8XQmIudCERNygkpZtzTXh49OI95f2MYMPxOv%2BCmKdrCVeSYQHVko8EBmCHtIsu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f2aa715a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19858,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"235f8983d01c01604ca2abc2cbe4600a","sha1":"b90a05c9c54505ce852c43582a359da4a5d2c02a","sha256":"b88b3c50772bde1dd76dc1022cc503b4c59f64fa06e3c99d06bba06de971048c","sha512":"6b0927adb972be38c895c0eb0a8a711dba7a2eebc51de47ccc014755191de604fe4ea18a4d444dfeee1c493264975be440192ccc17b7cc500829f4fcc3f56a16","ssdeep":"384:CL+iOQk6nW+75+gA6ZOKLi/GiRipREKKfRT0j6H9:cNIgZ7ATKuwqf6j6H9","tlshash":"0492e0a1ff01d726c207c9f8565b0e4a99cb94484e3e73c5719c4b5e1693b887b4e943","first_seen":"2026-02-01T17:28:00.91667Z","last_seen":"2026-02-01T17:28:00.91667Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/group/slots?_rsc=1bz3h","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:31.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /group/slots?_rsc=1bz3h HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/group/$d$group\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-b855f31396666c8d-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/group/slots\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/group/slots?_rsc=1bz3h\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ZUL95FpQVMg62lRRYGI4n%2BSumufw5oLFfDPgiZm7vWzTvxevWrqAIEvszUusuZBKDQYD3ftCiG3oNd7Z4305kpCZmBBQSrbHaMZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f4c9145a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"857a2864c3686f888291165016bd2018","sha1":"beb130245c6d9ce627714ca17ba3c25bb50a3077","sha256":"6c6f663b1a957ac786ac52eafb1c48d30aaf4bce253dc6fdea165826a56e7edb","sha512":"390753f8ed92fc876451b2311990d40d39dc8f9eee5a7d3985f5a29857ad00c2c827e4457bc0e7bd29a8403a95453b95e2330afca600957ed3e098dd8d71b8cc","ssdeep":"","tlshash":"37f027b3d50efd252d2dcc4c0e5e6323859c58779ab51af4a2dccd9c47d113a4b8a1c0","first_seen":"2026-01-31T21:08:57.193561Z","last_seen":"2026-02-01T19:38:23.401871Z","times_seen":36,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/blog?_rsc=888x4","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /blog?_rsc=888x4 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-bd51574598e7d035-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966848742%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/blog\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/blog?_rsc=888x4\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cIbpKi0LAmO1MnLbae1SB3j1uwiUs4DTyamnsY20UISvRna81AmS5YW2%2Fd0BJtjwZ2HIw9L19DZE9CZhHhCrNEeCdSGffwFRQSUG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328e69be35a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2451,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (942)","md5":"7519823647ad94870df831a5ebbbfbad","sha1":"ccc7b3e42f9bc0660228cacb2e924217a41c16d5","sha256":"bee3b2bf9d10315e519fe4022a5187e1642c425e4bd3b8e982b6899c69cd2d67","sha512":"81b1291f5e516bf4a12df6e2ba97a496aa86265c8ba553ff1107501aa6afa8f988e66b5304dbdb2ebc5150cfb1db7334b947abc1b903ee58cd816ac26b575288","ssdeep":"","tlshash":"d6519f0dc849adb498c9d59d61d5d7016598bf37f1b88cace04bdc64128f03d0beab87","first_seen":"2026-01-31T21:15:21.922281Z","last_seen":"2026-02-01T17:28:00.919058Z","times_seen":2,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/blog?_rsc=bnag7","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /blog?_rsc=bnag7 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-a772fba93df9a61a-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/blog\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/blog?_rsc=bnag7\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cNV6%2BgjPJMa2XlCd63ivFBUX4OIV2QOQrnMU2GwWDSY%2F5%2FiBT7cK9P30NT7VpIlFWy0ZrxEiZjs9A%2FScDyJ%2B3Gy3G3v1xBwfRj8Q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328eece5c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1961,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1440)","md5":"37b0ffd9cb2d27e7a6a2c212d8bf3083","sha1":"24aca75d5e1c0753e588ce675c45ab982223c306","sha256":"30ba036a2dc940c8de5323e2f487f1c5e80fff031adadcbb5e71d758fec4160b","sha512":"bf3d200415ed7b9ee61a88a94de3f2c15340c0209c07cf9d85ff5c5889fc612b705315ceeb91cd573c0d6162814031d3b1feafce34130c59ad724ef805d17f42","ssdeep":"","tlshash":"2041237a890ced4d5a67c95d086fe31a550d1673c6701e6aebaccd0e1ac503e4f60e90","first_seen":"2026-01-31T21:15:21.902571Z","last_seen":"2026-02-01T17:28:00.893286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-big-bass-splash.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-big-bass-splash.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37262\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:48 GMT\r\netag: W/\"918e-19baced3f20\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5pXHTbu%2FrrND205KR%2F6VKE%2FKHPhkAEjDvgZA%2B9m9a1c5zAzEWPyo0nA%2B%2B2UxlCEHI2x4hdbA2JWQ7GpYNX2XSRmMtwR2bu87rIm3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ef2f855a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37262,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"79476b3c7ebcad28d8fdc0d5f85ad000","sha1":"8b2f1fb1ad056a0632d84f1837605a4a3e832728","sha256":"4473a8b5575d915cf44d61597db43f5d62ee7d0752124038b9e9429e470df175","sha512":"f33f2b7a81473c146ba450d2145dfa2ffee0ad7f55140f0ceaa456c82d80dce09502a0c2c9e5bf84a5d0f2b369087f1966d9194b165201c1b6e86b42c2e479d8","ssdeep":"768:q3OeVCYodyobMFV5oMjwArwfdR700bNO3z9apqzyCURBY:sg1MYMEArSlv0oq+1+","tlshash":"c3f2d0662a14ec00da0c97b054f8d5949bd307ccdba167acbdbd0e5e1fd65b4ed84142","first_seen":"2026-01-31T21:14:50.737237Z","last_seen":"2026-02-13T20:55:00.847487Z","times_seen":35,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/media/Inter_SemiBold-s.p.b21f16b2.ttf","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/media/Inter_SemiBold-s.p.b21f16b2.ttf HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"65118-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bi54CzCf69AdHt6MjRLl10Or3d85OkIw9FCapzRN6zDs08kfckreO2DbzQmZ5X3tcYqsUtBz8CfbxuZtUmzqK5xWN3%2B8hGQJkJEd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbbf525a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":413976,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter SemiBoldRegular4.000;git-a52131595;RSMS;Inter-Semi","md5":"4d24f378e7f8656a5bccb128265a6c3d","sha1":"d48310d2f04c57af1bce0851e053be7b58b25dca","sha256":"0dc98e8aa59585394880f25ab89e6d915ad5134522e961b046ca51fad3a18255","sha512":"38b18d9786046633e4992308c88f11ca5ced325f805eb29b3000533459e85dfb6cd87655f1e285af8da22ac04722ab354dbda24667297b56cca824ef227373f1","ssdeep":"12288:SMPc0C2wQtzPziKFfAi2bNru42U5CB1c8:5hiK9AiENr/2UYc8","tlshash":"f9946b17e705d71ecd1a2d348af58bd033b9bc90b91ee24bb05a3a09dd971f00a9b5e1","first_seen":"2024-06-16T04:57:18Z","last_seen":"2026-05-02T23:37:49.103964Z","times_seen":220,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/e149492fd2b771c9.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/e149492fd2b771c9.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"1f57-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yl9iOuxydvXRbhzM7f2plaobDa6olpmshzz7lOi1K520gA9Gtfw1CY6VinWQLjwHtdtGgYxqZkbykn9UblL%2FWBTyRVX6EEGQM8Ea\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbe81f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8023,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7666)","md5":"5a12d44809162192ba73b80f8c5d0fd3","sha1":"e293050209f77b727fffe4ee9d1e7371ae845b70","sha256":"ef08e4d8e1f121873218f8b632fdb4314da0c291d34f5d2772c01dec8a24bd09","sha512":"3bb9845b4093a49bc074853bdea0a895746e2451f8d236f40f0c96c103fdfd929e79525719bcea7bb997c7fd3ffbf1c3a2875fe3bfcf6b7f37a60eaffc92de55","ssdeep":"192:/vmIwuHfoWLfIaN6igj74xSkZiHV/ZoOR:/rHfbLfF0j7tICZb","tlshash":"20f1a5c613a4528cd4c64658ef739850731fa47f7aeed5d08a8ecba4b58b8c4f603859","first_seen":"2026-01-31T21:08:57.304794Z","last_seen":"2026-02-19T17:02:28.859329Z","times_seen":71,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/ce91559d705a6f80.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/ce91559d705a6f80.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"c28-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l8Dl2Lm3N%2FQcSsXycwcJKow4C2JBQQdtMNsnmY6EpJ7iOEsg1VcdEalbFdLFAAnY4q1JzMhXhP86hvuj8mQd7twgKyituLzv6xJv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbf86c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3112,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2755)","md5":"ffca57ca28216716952658164becacfb","sha1":"558ae2e920765a2076592b4b168b3d4ddf339d5a","sha256":"bb1d593df6a0ee012c5e177fbff4f96e75910044292eb6e9d451a35eb38c2c2e","sha512":"c7bfd7c23d31e691b37e6158532f112b8c8a7cd587476f7330b4d41c6aa9e8113d2cfc819c8a4fe883caff42d186b029ed92e0f03ab20c04ca3024852228bc1b","ssdeep":"","tlshash":"2051acc21a4803bda9c691747215751393ae21bf75dfb4e4cb2d14b8c293888eb734db","first_seen":"2026-01-11T01:55:53.524258Z","last_seen":"2026-02-19T17:02:28.647973Z","times_seen":73,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/bc00dbd968053a62.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/bc00dbd968053a62.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"107fb-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FLZHYS%2B4lKlt0kIrh6KQNNkqdh7QMdkrmjBqTQPkMWIMthic9%2FX4fTttmenOKnl%2Bux2kuB6oHqq7OX0SRhtCU27sfr4Slxq7XWAc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbf87a5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67579,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"54063eb7b6a4e8845b7b5621d59393f2","sha1":"1dd66c0341da2e2046839b93e596e940817f6422","sha256":"c1bf519ba156ca7fb4bfed64075ee0b668cc32cce0f8a00f4ce720371dee3bc7","sha512":"07eb929ac5488c8b066a963b55d92a1d4146f1f6ebfc87e977e602a7faa1c8943511f3c785b04d6e0aad2e89d14d567e6d641a9cd476de66590be4d7d2248a49","ssdeep":"768:e6OHRgDFZ92YskdtAO/rx4soJY0W07sXlAa7Kht+DLN1AbgnnqD+hH:HOHRgDFZc4tAsv0h62gL39nqa1","tlshash":"bc632ae63351b462d3db5196c4ae8501a27a59e4240c083c75fdddeb3822c8962fbf7e","first_seen":"2026-01-11T01:55:53.442527Z","last_seen":"2026-02-19T17:02:28.647339Z","times_seen":73,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/api/socket.io/?EIO=4\u0026transport=polling\u0026t=0k9h4lmv\u0026sid=VXZtvyaQAqPb-Z5uAAb1","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /api/socket.io/?EIO=4\u0026transport=polling\u0026t=0k9h4lmv\u0026sid=VXZtvyaQAqPb-Z5uAAb1 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: undefined\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-85d68feee22de64c-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cxSgxzPTGkby%2FcgdyvaJoQByRQaoF7inYjRNfhkZxxoFew1m54SlWZNCu6%2FIfkIzX15Xf9tiQnjNfHqySiuzW6%2F3FvFvj6jX9rct\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c7328e7f8685a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"very short file (no magic)","md5":"1679091c5a880faf6fb5e6087eb1b2dc","sha1":"c1dfd96eea8cc2b62785275bca38ac261256e278","sha256":"e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683","sha512":"3c9ad55147a7144f6067327c3b82ea70e7c5426add9ceea4d07dc2902239bf9e049b88625eb65d014a7718f79354608cab0921782c643f0208983fffa3582e40","ssdeep":"","tlshash":"c700000000030000c00000300000000000000000000c00000000000000000000000000","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-05-03T07:11:15.010065Z","times_seen":11152,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-sugar-rush-1000.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-sugar-rush-1000.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31916\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:47 GMT\r\netag: W/\"7cac-19baced3b38\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tNFcm9cH7Cx1%2F8hUiaToKYLIAllEj7VqdMR4sLuBEe9xKVFJrez%2B420GT%2FVkjHcn7MCXWBjSSsuBwO3El3naf6A3G7cxlebsUyg6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ef2f9a5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31916,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2bc91e87078c0300da2951b9fb6d3922","sha1":"be64458699d3724723f09c247fb5144bd0775219","sha256":"cf97185302d9bd237a494b97bbd8f77f16f545d342e96bee60c7d01c61e67c30","sha512":"d3121142198ee81d809f9916a7a6fd52f5da384802beaebde2c9e525d05855fe223692d573e11d23c45e30ee3694ac2a56069477fc92a5fa4c71c4a73ea37389","ssdeep":"768:SMsmgRyzmCJIrJMKiJ8YIAvxh7XiDISmNB6QkxfI05E:SMsmgS0mKiJRIAH7Xi0SUjYA05E","tlshash":"78e2e19d33aca0e8a377a461cec072a25eb29cb95327ab5c319d5f17f1587b03b0d640","first_seen":"2026-01-31T21:14:50.635658Z","last_seen":"2026-02-13T20:55:00.739006Z","times_seen":36,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/second-design/ranks/gold5.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /second-design/ranks/gold5.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8444\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:33 GMT\r\netag: W/\"20fc-1930f243b48\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pBpqPyJJyQx9QXsKHAxwb8eGWkB2gyn1ZDi6W5eoCphYQO2uHb%2B1F8RFd7d9tGqLIF3dc9rmXKS3hUveljjo0vXUlaG4RoqUos%2Fk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f2aa865a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8444,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d30c6fd87e440142df0c0035f4739e9e","sha1":"255e3515bc26087ec983e5ac9be8d91fd44d680e","sha256":"ffca79506c507801d9679a4909800054fc2a58c4b39faf4e2d44d7a6b392b5cd","sha512":"c958510dd903039275c56b635f189bc601fbdecb10746a14f267a6a92d6fc1902e3fb813222a6eca9c24696e5335086d0519446b61b405bf61583c86a5e7c2d6","ssdeep":"192:ZfAHItC3jtXcxVX+0xwpcd6BxKJF2b9l38gCVqjT:G4JTTxqM67KYMnVS","tlshash":"2c02ae7a3468fc136eb624fb757ab35b7e17504e51a9518c30407e70a0289fef08e60b","first_seen":"2026-01-31T21:08:57.357724Z","last_seen":"2026-02-19T17:02:28.657164Z","times_seen":38,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/?action=register","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:31.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /?action=register HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-8a9ff7d206df9810-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nReferer: https://mycasin.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design?action=register\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j5ZfEe62T11%2BfF3nderrJpOy6POsDiomVfBC9R6zOzl%2BsEYK1q0gDQolyccyWVGAc17lwCEJwB%2FdfsCGEjb1iibYrXVcJxz8ogS2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f2cae15a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2331,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (822)","md5":"2c76222b1daabfbaf253b461b006d2df","sha1":"403da709b7cb0e452bd6531643de4c6ebb716fb5","sha256":"7996e99be0afd3a17bec81f7aad2dcd66e1b21cd7e16a5def674d3a3f3d51e74","sha512":"dfbb8eda09c124a38b635797a8b5cec7f099328c7ccaf9e04b1015e0f37eb0412741ad1182a09ae4a51c184c0000fe52c06af09e2618baf58c77105a9ebe021b","ssdeep":"","tlshash":"db41800dc949adb498c9d59961d9d70165887f37f1b88dace04bdca4428b03d0beab87","first_seen":"2026-01-31T21:15:21.887485Z","last_seen":"2026-02-01T17:28:00.832456Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/terms?_rsc=7qcb2","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /terms?_rsc=7qcb2 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/terms\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-9aceb0ded79c97cc-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/terms\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/terms?_rsc=7qcb2\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wK%2Fjjoe7Orw7CVKgwe5p5pvRpNnvIaiMkAGo4me77mdJH1VJRhxZu03xPpUe1dd6Pt2V3B%2Fjb4KCBgJkOaGL6hAgXrOIDDzOLeNw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ee7d8f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"857a2864c3686f888291165016bd2018","sha1":"beb130245c6d9ce627714ca17ba3c25bb50a3077","sha256":"6c6f663b1a957ac786ac52eafb1c48d30aaf4bce253dc6fdea165826a56e7edb","sha512":"390753f8ed92fc876451b2311990d40d39dc8f9eee5a7d3985f5a29857ad00c2c827e4457bc0e7bd29a8403a95453b95e2330afca600957ed3e098dd8d71b8cc","ssdeep":"","tlshash":"37f027b3d50efd252d2dcc4c0e5e6323859c58779ab51af4a2dccd9c47d113a4b8a1c0","first_seen":"2026-01-31T21:08:57.193561Z","last_seen":"2026-02-01T19:38:23.401871Z","times_seen":36,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/terms?_rsc=19vau","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /terms?_rsc=19vau HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/terms/__PAGE__\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-be12387f3a9abace-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/terms\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/terms?_rsc=19vau\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OT0vixMUzAdCbm4oxDZX93ITf4lQ3uTuO4j0OSAcXv%2FjFboQkyPVdSUTD%2FWRVb5uPWHh%2BS9Yc6DZpfayxJ4zWgfInUUUOYs%2BP6U9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ee9dce5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61229,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4143)","md5":"abbee9f8aa23131baf464a03bf3c31b7","sha1":"3f0c9fa9d9767586d5061d84afcdc5ca80765741","sha256":"62c2409c01d1aee8b1763c03abb1b8c86d726bdedd552581416e779bbb195092","sha512":"317f8c998e82f38b601a51e6a04a9f9071c19f15d9be2d485a05cb3d9132238fc059dcb0af79e001542635fdd5fb2833c8147e1e956c6f390fbad37996e63245","ssdeep":"1536:Kf8F5d+nLeYJh9L/ZniIZdAhLgteZ4IkblxpvgWLp6yv0DWm1kOKKNLT5AiLCV22:C8F5dieYJh9L/ZniIZdAhLieZ4IMlxNz","tlshash":"7b53525ea70957b9cab70071340ed1ebf31d0638eb67c97faaa95b250347838492b3c5","first_seen":"2026-01-31T21:15:21.911915Z","last_seen":"2026-02-01T17:28:00.928236Z","times_seen":2,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-shining-hot-100.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-shining-hot-100.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34292\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:00 GMT\r\netag: W/\"85f4-19baced6e00\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XAltscCE92qreMPRJDYv2ljBKNZnjB4Lb%2FMumTinuCUxnhiFZzwLPl2foi68PYKfKQs%2Ffft68nfhvY5qcfu9hs8MJ4I0a2TUMiaY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f14df75a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34292,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d24d18816edc6afd94ab4bd412e481a0","sha1":"8c9cac1969ca7d0c0cfb619cfc7154632eccf75d","sha256":"ad82d16e04457cf9961b5d58e6a714a468c6c5621747bf5f91f44960976eaa64","sha512":"346a5dc477a6c28876b8e0ae496e960be42f9d3c1a12fe59c2d6f3441a980716f44b8b4ab03e45d27c37496dd9b6c982ebcd808818dbdc7d0b27adef578f7b01","ssdeep":"768:TcsntuNsHMk4Pjw9uCMc9m7oUARe3KURqY:bntUsy0zMc9m+RIZL","tlshash":"82f2e0246a26d894c24b3ff80cfdd9a5c7673fd2bd84625bbe1c45652bc232a8d8914c","first_seen":"2026-01-31T21:14:50.694993Z","last_seen":"2026-02-13T20:55:00.835585Z","times_seen":35,"resource_available":false,"data":null}},"time_used":1125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1118,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/second-design/ranks/iron1.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /second-design/ranks/iron1.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5178\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:03 GMT\r\netag: W/\"143a-1930f23c618\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZxHJZPlgfvoS%2BzrSGOEzYc13pxlcTpZHXbaDJu2%2BrP040vntpvO0LXygWFjpnei2Z7Isk3d0DLxFAh76M4y91a55KYb59xHD2IbT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f28a045a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5178,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aeac0c9d6985d75770d9fc9678c216da","sha1":"f230f4b921a9b3f50c559ebfa807b9af758a9bd7","sha256":"eed273a22b1add3b4677e4fe47438f2f610db2bc75e1a7f06ac6298505b6ffef","sha512":"5babbf40391a6fc6a700c9bf92d1b3cbece6d746f2e058416f8f9b27ba13e68300bef643c0b6e3b40e9770e455b7b50195f1f04835b83a1ae837920ee7aa895b","ssdeep":"96:Aen8uSxTbgZHeCGL2DMl93qnRV4Meo3TIUzzq7tCR+h/RkCS582Yqr:Ae8uS+5et2DMl938t7TF2T/RkCu80r","tlshash":"fcb16ced94d4626b77f21868b1758b1156fc30e3d938140bd0d0a4bf8e183b6c563364","first_seen":"2026-01-11T01:55:53.464722Z","last_seen":"2026-02-19T17:02:28.871721Z","times_seen":34,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-5-lions-dance.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-5-lions-dance.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32428\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:04 GMT\r\netag: W/\"7eac-19baced7da0\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gzlj%2FGVviDbW8uxcFuWzm%2FMqCd8TRtgD4dLP%2Ft6AqXZJQy7gcHE58ky69s8jg6eL9RQ5%2FfTeeaflFdXvSBc%2Bb5w%2Bv470az9zwfkz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f28a0b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32428,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"91f8f249564ae095dd65ee57169ee071","sha1":"fe89442231101c7f6aa91b026c000ff6a40bec19","sha256":"09010554a5143fc01469d9791558226a03c52833c6dc6b3aeaafa19bf830108c","sha512":"f5ec524d287ebe0f24ebad53e65a8d13ad73b79c37c9c9c3d9cd0652500b3be4a2a63e7fe5de4bd67c83417ad4fd21ea4c668feba006700115c1583ca2a4c71f","ssdeep":"768:miT5EV2fE52796V32Jr2ttQOUtGieOKJnvmtr8:EV2fE52Y3rhUYiOOt4","tlshash":"b8e2f16df7b2f2009157d0f2d7da20679e39a34f04081627a085a3e758f747bf4681b2","first_seen":"2026-02-01T17:28:00.932331Z","last_seen":"2026-02-02T04:25:23.408752Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/hacksaw-limbo.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/hacksaw-limbo.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16466\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:07 GMT\r\netag: W/\"4052-19baced8958\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lwDpPzxUd%2B0WpGzhHq3dy%2BA9A2e%2FodfOniKyxPMnUTGA2qXHe6BVFovECmpm5o6eBCLmf3eJzl5yIpOs600Jau%2FjB247hv8sO0O2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f29a3b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16466,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"76c168b4c15cf2b8109605d0dc850b60","sha1":"fdea88ac44f9f05c21be758098fa931c6fa6a04f","sha256":"963d9f6799dcc701e6bfd3d5da8b96b978dabc4cd6b2d58722628d45fa73ec2e","sha512":"e3c3021e1a49f91f44d53f630773f824663399250b82a919ae38e3e4e076adb8f2bac600f4e6c88bbb527d9ab98b205923f443a5c6c8c597e38de8804e23ea90","ssdeep":"384:gSWrJWIIsmajd49se6FYPssmXlFf4UkFqZTbiynBlYexbT6r2x8voLO/:nWNysJB49g+vAkmPdrYixIB","tlshash":"4772c0571b55940ada0867819ebd606842648bdfe4f2f8f82d7c5c6d27fbc14412cc7d","first_seen":"2026-02-01T17:28:00.933969Z","last_seen":"2026-02-01T17:28:00.933969Z","times_seen":1,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/second-design/ranks/bronze5.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /second-design/ranks/bronze5.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8686\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:00 GMT\r\netag: W/\"21ee-1930f23ba60\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fxTUiLHYXcD%2FLcdUVXmU5%2B8flpWO1rM7id1LnAHK3A4%2BOExFyDu19LtjLeDU9VVsKZeJl9%2FMdjRMGXmlSpPH8c93MCyzCyw%2FYYkQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f29a3d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8686,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8bb7c24e714a2343bd7376bcececc28c","sha1":"dd8e3e1bac6549f1c2c07301161445a8e204c576","sha256":"e6e730671b9e28a68c484ad224ba082be47b63d6f50d35058be5c8749d149994","sha512":"a0406c763f49f304b3283e093246d2684babc785b22caba33919ce2a0458673506bd49ea27d0c532c4dcf0a728425082cea0032085800b7ada2e705a253b33c3","ssdeep":"192:mFYCuhhN8kts7Y9iA8xIp/9LTY/EF/n6FBZdVL1a0wgH1qz3dZPBB6:mFYAks7PA3k/EF/naBZdV5ahS1O3ba","tlshash":"d802bf64c24c5b930cd8b832057ad21b3bba1a0d6ab4ccdf44652537cfdcf8296bda44","first_seen":"2026-01-31T21:22:35.122467Z","last_seen":"2026-02-19T17:02:28.646712Z","times_seen":31,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/about-us?_rsc=r455h","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:31.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /about-us?_rsc=r455h HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/about-us\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-8c5f1f74515e80b7-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/about-us\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/about-us?_rsc=r455h\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T9sFjEzeHbPBX6X%2BXdn6h0ATwWHPWDtxbPkX2GULkus3w8QqhpeSNmVZHScAxp7H%2B%2FHrZrjMUhhBOcOa%2B90Odtb%2FPDFwgPV02WoO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f2cadb5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"857a2864c3686f888291165016bd2018","sha1":"beb130245c6d9ce627714ca17ba3c25bb50a3077","sha256":"6c6f663b1a957ac786ac52eafb1c48d30aaf4bce253dc6fdea165826a56e7edb","sha512":"390753f8ed92fc876451b2311990d40d39dc8f9eee5a7d3985f5a29857ad00c2c827e4457bc0e7bd29a8403a95453b95e2330afca600957ed3e098dd8d71b8cc","ssdeep":"","tlshash":"37f027b3d50efd252d2dcc4c0e5e6323859c58779ab51af4a2dccd9c47d113a4b8a1c0","first_seen":"2026-01-31T21:08:57.193561Z","last_seen":"2026-02-01T19:38:23.401871Z","times_seen":36,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/turbopack-8b7cbc757f5a124b.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-8b7cbc757f5a124b.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"29b8-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XJx7QHmWTVgfcBbHD8%2BZQiu%2FuNLanCFxInqeCCtAa7ZnlcaeaeWSwWXZ6ZAbbk7uJr0KoWfMETLq1ZczDYDXi%2BXeRikpzr5YhP5f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbcfb05a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10680,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6484)","md5":"bcd0b1d5248ea7beca980ad82efa6807","sha1":"ff3d78d01c42f6bcb8afa64500820e3b31dd94dc","sha256":"10f69d74fdef4854f791540887c3c947f1f50bcee1a89db478554eb66e9ced61","sha512":"84019404a81099de2ee1ba054b0603f518f19e56e97bd2d5b208acaf96af0f271d4f5a4a7f1efb9f2d63af2c42a81720283872f3a17486466c0b735848a34dd4","ssdeep":"192:3spVl08YEsUnUj5E4dn2Npl/daXMh6lW9xocxkUk1MsOR:3spVv40bl/A1UroQp","tlshash":"6322b4da33a6f073436fa1e6807f0044f17944b9145d582893aca8fa28394ae49e7f67","first_seen":"2026-01-31T21:08:57.353463Z","last_seen":"2026-02-01T19:38:23.504412Z","times_seen":40,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/83f137a05a633d06.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/83f137a05a633d06.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"54b-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rKOcz0%2Fv0tAexF3sqEa8FPcZrxoqfFCNr8S2CLtuu%2Fmp4E201yM9TTtOFELtM8iJabFVLi3jelEVEVTQ7oAGmyeyEds1mHpA9WmB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dc18df5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1355,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (998)","md5":"d71a9dfc74f1b0837eaf1c0c2ecfc840","sha1":"934dd225917e22545e4aa04118d7aeb28a86ccbf","sha256":"cfa807758de5d91ecc7139cebc4af03b69ec8a02410589222ec6bacea664be39","sha512":"a7170c749edbb15a4d2413673dc3ac0ca9a8daa21720a10db769fbb5189ede64f0d080f60e44f9d2bcdcff4d60ce046afc472aa64b9e722c6c2b11216b3f0d09","ssdeep":"","tlshash":"db2186980310a5c4b1be11d9ec3e410b702514b79b4d95baf0fc2c3a2b140c5a9d0fea","first_seen":"2026-01-31T21:08:57.199938Z","last_seen":"2026-02-19T17:02:28.759612Z","times_seen":71,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/eb768583117478cb.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/eb768583117478cb.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"1344-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eYKVgEVff0zBRLDM%2BD0Sl3Pk87ku0fHccofVAdrzxpkA6IToq1nCAfewtriw2RIQK%2BUPJTOofTNaSzhH8dGaX%2FPn7KO7kjhU9vww\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dc18eb5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4932,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4575)","md5":"cf2f085e4fbbf416372c204f062fda78","sha1":"e25ffad06ca3245489a474478f05d78d69203b5a","sha256":"95ac79e9e04a35bdc74d23248267dc235930c14e20b59c6536065072ce08696c","sha512":"1d6369070024d1452fbf563facc2e95332b477bb830bb3c1786e92137ce15d17dd0c81729eb5ea3eedb94d8195ad0de39f05b835b1a0f702f838f586a0dbddc5","ssdeep":"96:RgjKIjI4v5ksYquBKZ/L5QXqInDfwxbz4o:a+RRBs8Dfwxr","tlshash":"cea1ecb9031ca6ec7887446c23229423636fa1bf75de53b04d6fc9b458d74c8e7634aa","first_seen":"2026-01-31T21:08:57.370006Z","last_seen":"2026-02-19T17:02:28.648678Z","times_seen":71,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/favicon_2.ico","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:28.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /favicon_2.ico HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:28 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 08 Jan 2025 16:18:38 GMT\r\netag: W/\"423e-19446b5f730\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NmMuT9LbYQ3Mk2UkV5pXHmmUC%2BCNMzkvk5jft9BUKDb%2FlWVStUX97l96DBVdG8%2BxSuL7DpbidprHN%2B7n0aboh2%2BXrhWDnduthplY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328e04ea75a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"862625c18a78d2a3bebb3990ed8423b9","sha1":"8aee24aec86045963d43ece03ea0c14bf84db605","sha256":"52d8c3814a66882aeb937eaf0bffd819d7eacd69c955f34627a2753a645f4d76","sha512":"0ed2e082fbe2427cd903021e90a59106984919b00075bc99e49ab738a87204277b5353c14299c920755365083b2ede65436c0382f84a5acaa59495c9f36f0373","ssdeep":"192:oTEdnrvnSuNIa6yxthZ5Howi4lpoIhaOSvE+11:oMn7v6afyEW","tlshash":"5872dfedb1c30f87cdb57af0e12686414b620c7007587422617fb2abe267596ba0f94f","first_seen":"2025-03-15T18:38:34.505366Z","last_seen":"2026-04-19T14:33:49.933547Z","times_seen":85,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"mycasin.icu/api/socket.io/?EIO=4\u0026transport=websocket\u0026sid=VXZtvyaQAqPb-Z5uAAb1","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /api/socket.io/?EIO=4\u0026transport=websocket\u0026sid=VXZtvyaQAqPb-Z5uAAb1 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://mycasin.icu\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: LK06D9gBrJ79gjFPI2/Ufw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966848742%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 01 Feb 2026 17:27:29 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: v9rAfodHOqvB1+Jz0uVuEv/jYaE=\r\nAccess-Control-Allow-Origin: https://mycasin.icu\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JstUVCsT3XI4C9a%2FEVhzPWxADF71zYPCIMHr9g5PFJLRuoZmt26oqnGJD8osUINJ6hHqfFe76AJ8WvmDzwd6Xi4pzUbxedTcL8F%2BJ7Zo8JP%2FXr%2B5ntzXWNMLKZci%2FQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9c7328e6f9c0b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=543\u0026min_rtt=475\u0026rtt_var=210\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3115\u0026recv_bytes=1630\u0026delivery_rate=6016620\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=721a254dae6ad467\u0026ts=176\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T13:30:47.290276Z","times_seen":14582701,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":0,"dns":22,"connect":22,"send":0,"wait":156,"receive":1,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/?_rsc=17smt","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /?_rsc=17smt HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-96140c60688671db-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design?_rsc=17smt\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kNs3etQJZxfWmYAaAxZzruBFCFtn%2F%2FOUfWzQs3MJp3inH8VeIIwEWYVcYMM85tkIQB3O9cfI6jhgAysnkuWIFqgruxYTCNKW4gyE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ec4e885a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3117,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2729)","md5":"5223d8685548155fdd630e6b058fc8e0","sha1":"497a177115a55ffa7a0fe48780b48c56d80388c0","sha256":"c5ef22e22070715f72d95e5775a76d8cbe0d4cd758301f92e7def6d7dc13cfd6","sha512":"1408561dcc538d93b4719ba1418deebc8ae146fa15263cc2e58ae8a0bfb2764e763c26837e959b01ba9abd99733105d7a36e91402b57f7112af5db2440260db5","ssdeep":"","tlshash":"6551307d120aff6c6b6b0548545dc32a676e4a3af7738e76e2fc4972134a0349b832c4","first_seen":"2026-01-31T21:08:57.212644Z","last_seen":"2026-02-01T19:38:23.427874Z","times_seen":36,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-big-bass-hold-and-spinner.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-big-bass-hold-and-spinner.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26032\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:09 GMT\r\netag: W/\"65b0-19baced9128\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yJ5qLUfajvkIxXb97k9WE%2BR3VCXALl9DAPKerSjkXAz25q4oKEirbhS8kM4GyJuX5lY8%2FYWmS6NIrY1uBXrL9kkhnSZtAYDOuSgC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ef2f9c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26032,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b404ced3704441a9d89bccff6e71cce7","sha1":"c46227a3e6ccbd55e65bd017a1e2c2cfcfd1896b","sha256":"63ed6c5717ddfb06722d403c141818e16f5f204e700d40d8e3668a9a873a0678","sha512":"8b7947ca509210d1415f43ce3ea02ec1c637ddd901aef6cf3a59ad8830a5dcdc44d8bbdc2abfb3cea58bb46de539491113e6f1441e422a737d9c6b6a5f248a52","ssdeep":"768:WcNwrDEfN5yAxmY1FHFdDqWKu2pnTuEkmHNEOGID:WJYNVXD/9KnkmJ","tlshash":"adc2f13c29a7aa78c5a77902f54b2e5e77e1fc80b10aed7f1d682741374183d026ed18","first_seen":"2026-01-31T21:14:50.674341Z","last_seen":"2026-02-13T20:55:00.802017Z","times_seen":35,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/second-design/home/promo2.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /second-design/home/promo2.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7574\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 21:01:33 GMT\r\netag: W/\"1d96-19b7b5da3c8\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tnE8UOmuN%2BOhxfASmhocK%2BWJYQXdFFZt%2Bh05TEQuzPhoZ78hiVL7TTrWY9sKVKrFPAOT6xRKUp5HcD5XzvjZ4IsIipF5a06VIENX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f13db15a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7574,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3539038ae01db5382d54a6c94823d21","sha1":"a9932b694e2b9a4111043fb5c72af4da83d71ac4","sha256":"db04cc3d02cdf2846d24379ba9dff05f55bd367222be7ba31e5708adf7eb8141","sha512":"189bda25bf1a096b42a402efc0cfa2d6d53caa3ee850fa2d9ac939bad17e2cd9cb1e9039011a5e66081fa5ce1c9e82318c2e22eebdac349e8c629fa3461678f7","ssdeep":"96:88NtxuyL0zqjkZRMK+UmtCPbSMRPHM0EWuQbaCvwZkLHFAP8jLeG5J3wLHH0:PN8ujSRQUASVCWuMvwCTFosZgo","tlshash":"f5f1c0720a6d0a7f7a0b4df142c9fe92d107788527a99d451d479fd081e55de07e042b","first_seen":"2026-01-11T01:55:53.552654Z","last_seen":"2026-02-19T17:02:28.854451Z","times_seen":73,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-jokers-jewels-wild.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-jokers-jewels-wild.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34862\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:52 GMT\r\netag: W/\"882e-19baced4ec0\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zU8FosQmWR%2FIwyCYa9%2BP1ND5Jeh1U96MsKaWIuXmR4QZZZZWQMSV3EMhmpwaCQlozBU72tZXFL8oWbqbiMg7W09UcOcMNOOjXrvv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f13dce5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34862,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"83ad3ceaa392939aaf9765f169159f71","sha1":"db0f48050ea1bdcba037f51d1c409778769056f2","sha256":"08fa1d817b759803c16ea88c856cbb7297cc81ed220a2e98de837b91f168d7ea","sha512":"ba6296f462978c2efbb4635243840d621370fd76aeaa738c3f5d856ab611d5745ac15f577d119694497c267deea07ed3515e6f65d3f899d2876f200db2235085","ssdeep":"768:Lr5u9WA0reJGvolOT6Z/faaSTBBwrtcbl5o5PcnAaChZ/rXCWNyZj/lF51qQ:H5u9WOJblOeZ/RGPwrtcbl+WnRaZ/zj0","tlshash":"76f2f10177161ce8f85f205a2ba9e6b4eaec127853da86e2c591537f405bc374e6fc0a","first_seen":"2026-01-31T21:14:50.702431Z","last_seen":"2026-02-13T20:55:00.748069Z","times_seen":35,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/4dbb7151aa13c217.css","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/4dbb7151aa13c217.css HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"1ed-19c15989c68\"\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UcAD5PXVfxtk6b4iYufb3kNpqMNFnOgsJQ7FyHaixh4al0BVWAkPQlBVjLUuU7ihSnmJkQdBR9VEhS5%2B16eTZFCVvbrhCzTXQADN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c7328dbbf865a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":493,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (492)","md5":"2975df78ce897504c7865a17d86a02dd","sha1":"75622f0db777dac2055698abcb0eccaa45cd19ca","sha256":"20693b666c550b94e5c07cd379a3223daae26b6ae469848e707744ef33768fa9","sha512":"d06b67ecd2587ffc16184843f6dfefd72537fbc41ea2bcc8306cea2ba049d11d97700e0cf2a7a55df49058c1bed9ad9d44ef778a1eab7ec58ee5a00d7c57c156","ssdeep":"","tlshash":"4bf09059c032118930fb6a1a9ad4e76e1458c1c3718888fd76282ffa9a21f7d4369849","first_seen":"2026-01-31T21:08:57.22202Z","last_seen":"2026-02-19T17:02:28.736Z","times_seen":71,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-tree-of-riches.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-tree-of-riches.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 54446\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:52 GMT\r\netag: W/\"d4ae-19baced4ec0\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ERUgIoj%2FkHPOZGUxVgG7GSS2ISAJ91LrmJUEAMYBSfoZKKk6KcaEUjx6ZvqZhuXrHeqmZ%2BQBjUOfP5uJGGDf9DY790oV4uaO5OcM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f15e105a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54446,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"66e2de1059833c3edd8e9119090de427","sha1":"6ff6da8e21b103920706aec0287da92a6cfb6e6a","sha256":"a1319bb5574b6c2b03ba11aa5e8953ac9c86e399d5b407fd59add7c42b6d7ed8","sha512":"84b9037ce206e7fc1dea7c9ca1977d2069d7c20ac1bc1860cfdf5d5f1038fdfbf437c17ad4241cc875c64784de6150d438c5dec56aa754f8cb6f0fbc817cafcc","ssdeep":"1536:YTkpgc2kqywaCX3prya+kEdFKrQbptVC9DJi3:C+1XOX3Jya+kE3+QttE9DJq","tlshash":"363301268acb1fd01fef76a63c356d93b778c92d70566890837136ae700c261be9c835","first_seen":"2026-01-31T21:14:50.645361Z","last_seen":"2026-02-13T20:55:00.774562Z","times_seen":36,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":241,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/second-design/ranks/iron5.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /second-design/ranks/iron5.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7932\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:14 GMT\r\netag: W/\"1efc-1930f23f110\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lPAaTfCVyqLSH%2BW1mPN%2FHyWZg3Dje6Zb2%2FZic31HZNTkbqwKBAQtjmilrHyUjhVxxjf5RUlxOmsi6KEqvD%2F4xCTU7Z%2FNEdCjkPSN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f28a285a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7932,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e2f768edc2d52838aa729688048dc311","sha1":"dede5a3a73a8d48e0464f82a86ae6c21f37aa85d","sha256":"7ff5fc2f6b6a1fd5de04f09f029c878f4f0826d391315bff15b9ff5ae7f9020f","sha512":"88600ec3a4623512d30ee30f24448efbefdc010f7b38f53bdc31bf97666d27489826dedcfc72d6d2606b09c993c963ddec91b0757d478e32bf082cce79a9f686","ssdeep":"192:Wfyg7W7zGmLX8fXiTC87SfW74mwbqei8XDEI4d:XLsviTCaszbqeed","tlshash":"79f1b06182631bf55c548f65121f33410fc2a1e54cc4fe3076aa992e7b78d9f16ec8d6","first_seen":"2026-01-31T21:19:25.634919Z","last_seen":"2026-02-19T17:02:28.810589Z","times_seen":32,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-money-stacks.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-money-stacks.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 44352\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:05 GMT\r\netag: W/\"ad40-19baced8188\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wg%2B3%2F%2BzyssXd6OLzqYQFwDpcpQAuvZ%2B07ORKbJrYoxQAqmaq0uk4FaA1qI%2FaQ33tWjib%2BuRid7lFsALRaxLJDRe8Cw%2BZeK%2FngxkJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f29a585a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44352,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8b9106d1b6e7d534011e7f80d9b8cbb2","sha1":"07fface5aac995094594d80210910f45a1b2c2c1","sha256":"1a8db7222b101cc420c101205377566bd6a62bf3566352e8c6eab6687d447868","sha512":"37fc16948af905e8c073e93e029a4bcf010816a79c94e72928a8b1f0eea7deda9ab503f7d7fc6505373a8b6c2cb02a640dcc03d4b38ea302e950973bd6b58b23","ssdeep":"768:roz6QJdzHqzgqpQGB+cmKQ62USwqdtCTH2/yKRtBczBukUK9cupWA:sz6QJdzegqprB+5yqdtP/ymtkzcuEA","tlshash":"dd13015d97758c9b89ef000ac9c9d1484ff4e5f62b1f1ce6082b6ffe36b6948510a4c8","first_seen":"2026-02-01T17:28:00.950586Z","last_seen":"2026-02-02T09:41:14.663901Z","times_seen":2,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/4b5fc2a2cf150c41.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:31.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/4b5fc2a2cf150c41.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"734d-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TqrjqByro8P%2BeAGYEdwCCI9eCsCtEvZYHhcO1AHR%2FBx37SpcRmzJkIZXGof6pEWvoLe1zsM9sQLtMi3WMfj9t%2Bvx%2Fd%2FBuvW0YMBv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f4c9055a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29517,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (29160)","md5":"9a2db0f51ceee4b64dcf2f34b7cc5de1","sha1":"9d13515ac8e3613937c7e41e704ff52760ddf473","sha256":"3e316fdf81283e8d0d6e95f67225560ef3c1c3b33230192de20cd9a9516a75f0","sha512":"80ac75dc3f6084d84660a5bc6fed6ae94440a6018061ed1fd18289c226952ec56b4790a8d42dc197cb5277edb1596fe26baeea78de76d04cb07d3f621a6657ee","ssdeep":"768:PfCxyEdRqNnKG1+g3fA1SjjDrxEBK8mO2V:3GyEdR2KG1FP","tlshash":"78d2b66050457abcf56708a8ba6dc40cb11eae6cc70fcf18b57c7c253c5a9816d96f93","first_seen":"2026-01-31T21:08:57.196019Z","last_seen":"2026-02-19T17:02:28.856281Z","times_seen":71,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/group/slots?_rsc=el9dl","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:31.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /group/slots?_rsc=el9dl HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/group/$d$group/__PAGE__\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-be7f0e342f26821c-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/group/slots\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/group/slots?_rsc=el9dl\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i0OlzHtbQfw8eSplxL72dgV6R1x90L6p1aRBvJUJXt3GWffPm6lhYpQgNYAY2BNNzVV0qjcI82vF2%2BKJvysrSCzGilRQZBBgi28O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f4d9495a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2179,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1623)","md5":"c8ed3d697dd31fcdd1fbebabf74e0415","sha1":"3d09fe2606ba32a1a556e1566c2421da250f7f74","sha256":"9130482aa3c1cd58e47db08e5af2bb755f50554c5077e11368d13b565f811a88","sha512":"c186be602d15d80db5cec3f8db92d8d126b8af2b480c05d913be58e3c6bd7d7a27a61d0c8a03a593758a51b2c9002172c6e17d475f5455a16fa7f5c236970a31","ssdeep":"","tlshash":"8b4170abd80efc551c34cc5c2d6f6376958ac8338c344cacea9edcac05591235b990e0","first_seen":"2026-01-31T21:08:57.307525Z","last_seen":"2026-02-01T19:38:23.422471Z","times_seen":33,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/8a9983e0eefa6ffd.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:32.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/8a9983e0eefa6ffd.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"723b-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xE6B4rRHaU3KGDML7X%2B4PQumGRNfzgjvPxJTRDLL2hcGRj4FOmiKKQ50fM01pnxvLC4JEYaAsuFahTwBGXJMRyk7coQ6QJDWCaVF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328faac545a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29243,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28885)","md5":"1e2778cdf6269909553d3706405b77a3","sha1":"aa1028f797111fbd2ac1fe8befbc5fc3ced497dd","sha256":"e05ee3375ac81e36ce934885bd42fd26f7873892d52da992947b6ca7ca198772","sha512":"8343355873776a7f3aa490a93a9d79e43be7527396f977f53e07ec8552e29b4fefd257638ee0c3e1e4ca1f9df0080d4bae32bf866763876a99daa0d247e9804b","ssdeep":"384:fBNKeDneohgZlz7FSwiSCD7jVCdBLrS+X1Fv2bTNKcjGbvYekGLLoo+eqfQS5y:5Nurxh54fVCb++n2babYVoNqfP0","tlshash":"04d23f159165bbecf53b04b8ba6d806c721e9b54cb0f8939f5b83c311a410d47a67bce","first_seen":"2026-01-31T21:08:57.384918Z","last_seen":"2026-02-19T17:02:28.621203Z","times_seen":71,"resource_available":true,"data":null}},"time_used":1095,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1095,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/96f87de005b2d6ad.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/96f87de005b2d6ad.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"e13b-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PizBMjRJ%2FEM%2F%2FpuQa62W65gUG%2FuO0pasoqUY1eB8ZSzdTa7e3N8%2BOh261JE%2F47RU4GQ9MSjUSLM4e379xlyAunAajBT1k0kGYNTe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbe8185a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57659,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (57302)","md5":"17eee88a9831d2853d077fe62f93ae7c","sha1":"b04fa48c468a9688c66373657e1465eaa00e7a80","sha256":"8846cbd91af5225faad20ca5ed7991bb165ad456444ba4e344461fdcba871828","sha512":"755666295f002303e0f46c2628e8f68d3de5cede59b52ab09ac12fa7b8813e130e25d90e2bd07e8a23225bcbc995b428e5631e665dcf67dd84649e4f1d6fafa8","ssdeep":"768:bVoeIOqOdU7FKN/HtE228zbG0Muf8cAyHHyhXmlgXR9DmKcxEeZD:bVo3ObU5W/NEH0MJyHShXmlCDtLeZD","tlshash":"75431999b111b87685df92eea05b14ad733daa0cc10dc118b97f9cad232c5e4b153f2e","first_seen":"2026-01-31T21:08:57.382489Z","last_seen":"2026-02-19T17:02:28.740655Z","times_seen":71,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/4c6af75a4d489639.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/4c6af75a4d489639.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"d7a-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Li8ybVIxrP6%2FUpJn3pq5vESyIW0kXsJY2xfSN%2FZiD5zhbxpIboR7qZ%2FCJtFp4gDmwWWSJkPbGYVaPgj8%2F5XxvY9d2HAox4ubf8Iw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbe8395a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3450,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3093)","md5":"c1ffd2810057714d095867acc45f47ef","sha1":"6eceedd6553cf3063278c27de1aee25bb0667c36","sha256":"9604e0e5b4711c50c013e5c92da26573dfb72ae0ec3b83cb53ed75ea761a2d4c","sha512":"d913954244730850117b7c5363093e05714597040db3655885e941baf6cf66fde9ff661a6b0d1d0c9f8397e67197b0c0b7a725e1f85142d9d8e1ece11a25efcf","ssdeep":"","tlshash":"6a6101b6239433bab4c00fa442e6702611f53a6b30cf5174dbab4588fc55ceb907a55b","first_seen":"2026-01-11T01:55:53.535061Z","last_seen":"2026-02-02T22:33:10.184641Z","times_seen":69,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/75ff833e87438807.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/75ff833e87438807.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"25f4-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DTvrH5edwlBCOELf8s0s3RWkFMUHwN3aywPcbloPX1lN4C1V7jx0nJcUzkl9Mi2nT1CxdWtDcvMHJODi9s9n6WaEr%2FRSSEyNXUzB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbf84d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9716,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9359)","md5":"59109722d30768ce9fba15afdeeca226","sha1":"a26518ebc95101c364cc8a9ff07f5d0f9e6e2a38","sha256":"c08ded8f72c595eae08a2471266cc35e1e9a8a0ea67a8f7faa4a19a6af15d662","sha512":"f85734e896da6467182958b85d3520c89137ec0a619145f5463e8227e018038412bcee216ff1cda9b2600155a91aa26dd5c2a868e0d4ad9578d7e7c5c061329b","ssdeep":"192:Qw1Z0+ej0y+9HYgN7V98SLnm4tpQrWASL:QmZ0+ej0ymT/8STm+Gy","tlshash":"a7123124e2bc513d689502e495274023279e817f738b517ac99ecab0b68787cd793cea","first_seen":"2026-01-31T21:08:57.270105Z","last_seen":"2026-02-19T17:02:28.738687Z","times_seen":94,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/ph/array/phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN/config.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:28.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /ph/array/phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN/config.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 463\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\ncache-control: max-age=14400\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%7D\r\ndnt: 1\r\npragma: no-cache\r\nreferer: https://mycasin.icu/\r\nsec-fetch-dest: script\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 172.71.144.71\r\nx-forwarded-host: mycasin.icu\r\nx-forwarded-port: 3000\r\nx-middleware-rewrite: https://eu.i.posthog.com/array/phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN/config.js\r\nvary: Origin, Referer, Accept-Encoding\r\nallow: GET, HEAD, OPTIONS\r\nx-frame-options: SAMEORIGIN\r\nreporting-endpoints: posthog=\"https://us.i.posthog.com/report/?token=sTMFPsFhdP1Ssg\u0026sample_rate=0.1\u0026v=2\"\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://*.posthog.com https://fonts.googleapis.com; script-src 'self' 'nonce-1Dtnn6Aozz9qA4sd3g1DQF' https://*.posthog.com https://*.i.posthog.com; font-src 'self' https://*.posthog.com https://app-static.eu.posthog.com https://app-static-prod.posthog.com https://d1sdjtjk6xzm7.cloudfront.net https://fonts.gstatic.com https://cdn.jsdelivr.net https://assets.faircado.com https://use.typekit.net; worker-src 'self'; child-src 'none'; object-src 'none'; media-src https://res.cloudinary.com; img-src 'self' data: https://*.posthog.com https://posthog.com https://www.gravatar.com https://res.cloudinary.com https://platform.slack-edge.com https://raw.githubusercontent.com; frame-ancestors https://posthog.com https://preview.posthog.com https://vercel.com; connect-src 'self' https://status.posthog.com https://*.posthog.com  https://raw.githubusercontent.com https://api.github.com; frame-src https:; manifest-src 'self'; base-uri 'self'; report-uri https://us.i.posthog.com/report/?token=sTMFPsFhdP1Ssg\u0026sample_rate=0.1\u0026v=2; report-to posthog\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-encoding: gzip\r\nx-envoy-upstream-service-time: 10\r\naccept-ranges: bytes\r\nlast-modified: Sun, 01 Feb 2026 17:27:28 GMT\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vedBPxoeB%2BJveIgaBe%2F%2Bgg5vWSSoeBPK8pNTb3vIKInc69NqE3Cd3eOEv%2FMqsfOQW1myGFfRtbs%2FIJBhuURroY%2FllHOZJIP2zpcF\"}]}\r\ncf-ray: 9c7328e47cb75a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":860,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (661)","md5":"18c8e920a48d5bb95921e6187c07df2a","sha1":"fb3dd7bab6f2653b6f4a734c0624ef46ca779d78","sha256":"20333bfd82aee4085ca68fc8768b0b251267ca5b5c93d3fd464c690eeef54b0d","sha512":"0a10abcba25f402288531176bc4ca609daf16ad26b3d678b1de79e37dc449b3a647d29b4efc90e63d2153d273fc1d0cebeae2adc797fdd432ca5751f96cf9601","ssdeep":"","tlshash":"1d11ab1cf9a004ba00e6715c5fdbe1836fbb858792444c2cf5c40550f70ea2b9543fc0","first_seen":"2026-01-31T21:08:57.376306Z","last_seen":"2026-02-02T22:33:10.199626Z","times_seen":67,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/hacksaw-fruit-duel.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/hacksaw-fruit-duel.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24636\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:55 GMT\r\netag: W/\"603c-19baced5a78\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WvxvYcsqlvUylGnokraNWOJtrNuEK10LouP0cpP%2FQlWa7mendlWGXWVxBh8i1mT8AtlQGnycuiQpS3BpPPdXm2q76%2BYGoxXdbZl9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f279fc5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24636,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9512deb9927a9715eb78cc0f0e386c07","sha1":"bd48b5b3fcdf327a2771791ca57744df185759ca","sha256":"6fbb935e15a889279b4bf1c0cfc7e5981cf6d8a39ba0b6495097fd76ef5e45b4","sha512":"742bf120a6936416af7186ee1aba66aeb47a1b2c8c42ed57e9f45d2786dd9a10ec924a76e1d837667479ded48179ca113f001050ac05e84b7f504744afb163e3","ssdeep":"384:aymF2C5O3O6Pzy/gkhMcXhDrBQ3WRFOjZn1OHLCmK6/mIQAAS/IUG89lNWrsqU9g:aPwCeeSMKXWLygmItlJ9lQ499g","tlshash":"65b2e1f2c4de3a89d60572b911d393560f6c1b02c8835d75b1badd3b06a413758f99bc","first_seen":"2026-02-01T17:28:00.961775Z","last_seen":"2026-02-01T17:28:00.961775Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/vip?_rsc=2czbu","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:31.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /vip?_rsc=2czbu HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/vip/__PAGE__\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-83d92789935fd8b6-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:32 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/vip\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/vip?_rsc=2czbu\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lMOdsQ1ds4z6YZZTwilLwO6JZubN8RuSLqyAsp4DeI5XrpzO47Rdd11cjWwCyPRbGIh7HG4YWTL3KQsE%2F7PPEQs5ysk8K5M5vxiP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f39d7b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18099,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (5973)","md5":"1a5eab8cac145d92c9710b80da794fdf","sha1":"3324e669daae23b6cd736496dcc94afa0864ce54","sha256":"790c41183450ccd79b932dd1910548f8d004f4c3375d7fc7d3fa4e73ae1fce80","sha512":"7902eec2ad5d9378c9e9dc9bf9663fdb9501fa395f6f0cd105ab88293f59110f03019108a56603fa417caca426243698550c171682da4ab50041e4f6bc07ee6e","ssdeep":"192:dlnkJZV9vnkJZV9pnkJZV9FnkJZV9rKnkJZV9pnkJZV9+nkJZV99rEBdFnpYj6uL:s8KW/Kn9rEf2wKVCIJJ3Ief","tlshash":"b6820a6bd81afd640d72cd9c3c5f97b79685c8338c344cacea5edc9c02594275baa2e0","first_seen":"2026-01-31T21:15:22.081243Z","last_seen":"2026-02-01T17:28:00.964603Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1127,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/second-design/home/banner_blue.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /second-design/home/banner_blue.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 346328\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 28 Nov 2024 17:51:34 GMT\r\netag: W/\"548d8-19373e65070\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6mRVWXcTOQ4UiRsk%2BK7S%2Buz2Ipi71Icz1U8yA5s2PG2%2FkEb02iKY%2BVnqJG1bVvWQeHq35IaW2cZ%2BrycSLHop3kb02jt27A1EP3Sr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f08b9f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":346328,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"258caeef71fa47f5e6268b4b1a0a6b03","sha1":"7d37eb51c4d5da68acce58237e7433d88ac177a1","sha256":"7cfefd291528ea7af2958e9725c412133c8e6ce380715b5e879e36306a133057","sha512":"68aeb1ec8ab4a1dd9c203b97571f263c0610d4d27da4674a7b98b85103c7a2c717a26a69057352b40edab1cee07f433803774b52e20463e638f118233d4f33e4","ssdeep":"6144:1bWZvyoqJ0Jf5KFuuBiYo+ytRpJqIU+Q13ZVAjGbq4AfuFeVizTHRykmOYVfOE/1:1SvyTJ0LKHBiLtcIPQBZVAjGbTAfuFef","tlshash":"6a742337eff90923b01d93edec8a1f81181fe8a64f15166e5ad2d65c143cd912806b9f","first_seen":"2025-03-15T18:38:34.509263Z","last_seen":"2026-02-19T17:02:28.815656Z","times_seen":80,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/second-design/ranks/iron3.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /second-design/ranks/iron3.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5774\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:08 GMT\r\netag: W/\"168e-1930f23d9a0\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P28zwbseC7U8HHFWGh3Bjgb8gWqZjtOYtVHduz1QhgPkU3UXD09S0qBtTD4ucnLc%2FU4i0ozQ6wxI67O1STskI2u8IICmUaEWy1g8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f2aa665a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5774,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"955d2b7cae2f7491740579547434242a","sha1":"80c1b7282b04195f86c2784187f74e5b4bd6aeb0","sha256":"43a7361a8457eb511a4d802cd5adf58562b7c32540be6f82c181de383dddd104","sha512":"93c07b8cea44b602bed8c2187fed9101f5fa097c86b604053fc15b154dd8a85a420e636ec5f933aaec2f297cbf9c28f145e4e53809f03fd2dd79def36347cdd4","ssdeep":"96:tjeOf8aj8U0lC51ah89a++msiAFv5oZvW+7VJR/UijaHE4W1ArP40HxV3FRkX8py:rh8U09WD+48kvWuX9ahWQVVOs7Kz","tlshash":"e3c19f3d0a1562f009dd506f4df8692f48e8cc95fe15779655f20f696080e91532ccb1","first_seen":"2026-01-11T01:55:53.434029Z","last_seen":"2026-02-13T04:13:07.592614Z","times_seen":45,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/vip?_rsc=qt6qo","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:31.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /vip?_rsc=qt6qo HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/vip\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-a4f3ad7314d5c1ae-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/vip\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/vip?_rsc=qt6qo\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n8qH2yV1X92l85wHvsThXVo9FsRJfk%2FL8HccHRD%2FUy6bkxXHVZPNd70YTH%2F088HXm6ODXfOs%2Bzd9yCUbll%2FYxfSq%2FEad4hMRWgrb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f38d555a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"857a2864c3686f888291165016bd2018","sha1":"beb130245c6d9ce627714ca17ba3c25bb50a3077","sha256":"6c6f663b1a957ac786ac52eafb1c48d30aaf4bce253dc6fdea165826a56e7edb","sha512":"390753f8ed92fc876451b2311990d40d39dc8f9eee5a7d3985f5a29857ad00c2c827e4457bc0e7bd29a8403a95453b95e2330afca600957ed3e098dd8d71b8cc","ssdeep":"","tlshash":"37f027b3d50efd252d2dcc4c0e5e6323859c58779ab51af4a2dccd9c47d113a4b8a1c0","first_seen":"2026-01-31T21:08:57.193561Z","last_seen":"2026-02-01T19:38:23.401871Z","times_seen":36,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/providers?_rsc=p0npb","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:31.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /providers?_rsc=p0npb HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/providers\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-8ea1206d0e88c667-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/providers\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/providers?_rsc=p0npb\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ZB7CwWtIUtkhblw0Mzp5LvhxYv9ef93TGZBjxmTyTNpByCGkPe0Wenpqlt%2B4NServVt%2BaAULtExR8yNiTfpssPshhzXl%2BPFS2OL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f42f025a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"857a2864c3686f888291165016bd2018","sha1":"beb130245c6d9ce627714ca17ba3c25bb50a3077","sha256":"6c6f663b1a957ac786ac52eafb1c48d30aaf4bce253dc6fdea165826a56e7edb","sha512":"390753f8ed92fc876451b2311990d40d39dc8f9eee5a7d3985f5a29857ad00c2c827e4457bc0e7bd29a8403a95453b95e2330afca600957ed3e098dd8d71b8cc","ssdeep":"","tlshash":"37f027b3d50efd252d2dcc4c0e5e6323859c58779ab51af4a2dccd9c47d113a4b8a1c0","first_seen":"2026-01-31T21:08:57.193561Z","last_seen":"2026-02-01T19:38:23.401871Z","times_seen":36,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/fcdabb53594fa7cf.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/fcdabb53594fa7cf.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"26d97-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ee%2Fs5y46V1YoWEu56wJnGSaZ6zC9y6OTPWT%2BWvJpKuXyzfOR30zBeo1kM7PzdzFfjxhn%2FJh6d9ruyGEPkkl82wLWEfvwjQAAefsS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbcfb95a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159127,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (40218)","md5":"dc35eefdfb561070a6c3fd395b8b0e06","sha1":"0e99f80f3609455f7a1d0de1e932575bc2931551","sha256":"6df913cdbb4364f61f7eb112cf23d1b40438d47fe337266bbc9c0acefa387e26","sha512":"52c394db82cb28e8d4376c834989de504542e9d324d5df43688f5c03344a4388ec7328597a3396e7cdeeaf4e9384047a52d812771be24361972c3dac98d90cbf","ssdeep":"3072:3LSLiYawBqU4ebR8+K2k5tx9FpWgJlg4P:bSKU4ebR8p5txxdJlgW","tlshash":"18f33aaa33a725334be9829ea4b51200f3365658604e043cfb7c9dd7296888b71f7f75","first_seen":"2025-12-31T07:43:06.450662Z","last_seen":"2026-04-28T01:10:54.191549Z","times_seen":185,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/d2da9e44d9ba7ccd.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/d2da9e44d9ba7ccd.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"9f24-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5pWuO%2F6x5RtiCxAg3u8Njb9iUxadHJYd0FdCmk0McNdlReIKZzH3c0wWoMkpdetGB%2BJyhLjZ%2BYXopHTWJIsi%2F%2BIzDGXEyqSsE%2F%2F7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbe8365a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40740,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (40383)","md5":"25632652a91d344165f56eaa4b8abf64","sha1":"dca754237017683fddb1ab6d2d7cb3f6b432883b","sha256":"0266885bddc7f8cb4545a8ba58432193c0ea7d157f97c24806614a1e752a3eba","sha512":"c9d3a8b0252a7e1e710444e2ccf94bbf6e4f859549d9c650bd26ba8508e86e8a936cab7c5a6be2d3f39a5442a4abb60a8c71c64a5fd09f0b3794fbee4d2907fc","ssdeep":"768:8Aco3d/bYvcIF52OZSSQcn26fGSxqoyFtwYoF5cPpT96eOmK20:8edYU6fT2WqdtkcPph9K5","tlshash":"e303b669d35063bcadc543b056265070354e15af30ead37897aac4a0b6d30ecd2af8ef","first_seen":"2026-01-31T21:08:57.261687Z","last_seen":"2026-02-19T17:02:28.713748Z","times_seen":71,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/api/2/envelope/?sentry_version=7\u0026sentry_key=6d319d1014d598ea4a0365923853ee67\u0026sentry_client=sentry.javascript.nextjs%2F10.30.0","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"POST /api/2/envelope/?sentry_version=7\u0026sentry_key=6d319d1014d598ea4a0365923853ee67\u0026sentry_client=sentry.javascript.nextjs%2F10.30.0 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 454\r\nOrigin: https://mycasin.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":454,"data":"{\"sent_at\":\"2026-02-01T17:27:27.789Z\",\"sdk\":{\"name\":\"sentry.javascript.nextjs\",\"version\":\"10.30.0\"}}\n{\"type\":\"session\"}\n{\"sid\":\"d1556695d64d44418c3e837c74b1b2b8\",\"init\":true,\"started\":\"2026-02-01T17:27:27.789Z\",\"timestamp\":\"2026-02-01T17:27:27.789Z\",\"status\":\"ok\",\"errors\":0,\"attrs\":{\"release\":\"web@2.9.0\",\"environment\":\"production\",\"ip_address\":\"{{auto}}\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QD6zksx%2Bpcc0TCEH3eXvAokKN9rk4mQ91Vp5lCCY1UOFkDp7JHXErKtbugzXrGa130QAPq83rssbGScFU0dWgYRWEThKFDRLEKyP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c7328deba055a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-05-03T13:31:44.000514Z","times_seen":615934,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/ph/static/dead-clicks-autocapture.js?v=1.318.1","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /ph/static/dead-clicks-autocapture.js?v=1.318.1 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966848742%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\ncache-control: public, max-age=14400\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\ncf-cache-status: MISS\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966848742%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\ndnt: 1\r\npragma: no-cache\r\nreferer: https://mycasin.icu/\r\nsec-fetch-dest: script\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 162.158.94.72\r\nx-forwarded-host: mycasin.icu\r\nx-forwarded-port: 3000\r\nx-middleware-rewrite: https://eu-assets.i.posthog.com/static/dead-clicks-autocapture.js?v=1.318.1\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Sun, 01 Feb 2026 15:28:21 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nx-envoy-upstream-service-time: 3\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\netag: \"697f7115-3303\"\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2yYK4bsFgbfMpmbe2e38W%2FbDbqzTa1n5w6ci0fw7s09iPia%2BkVtB5U3uzlW%2By25Iu7aJ7bqqUvYoeVmawFj9Ln2dPhmNJmhw7t5n\"}]}\r\ncf-ray: 9c7328e6bc4b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":13059,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13006)","md5":"cc981e3687edce8a3d22380972ee45e3","sha1":"1955fa562b42c9f134b62e7ac0e9c11bbfa4da75","sha256":"a40d91c2014cca52defeb2481998498f02fc53526fd05302df0e0e490173814a","sha512":"2dc021b1b3ef375290f2d59d97ccc6bd6306aa4af2791c6cc29a129b50acc89a0566e5b27074037312082f55966c0bda2d77ab2ace32ad4a2154d08176e1c2c1","ssdeep":"384:sw+VM/tkSeCRi2WzHiAOjCQBgxjOJWgikn26FT:n+D9QeOMgM6FT","tlshash":"69420a88b7d0f3b12bd7145ac4bf1702f03525082556c824b159ecdab4adb1622bbe7f","first_seen":"2026-01-12T11:07:28.642714Z","last_seen":"2026-05-02T04:35:08.724281Z","times_seen":5160,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-jokers-jewels-cash.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-jokers-jewels-cash.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39008\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:53 GMT\r\netag: W/\"9860-19baced52a8\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZiJYQS7ut24pPN%2FNwP%2FWsCfKy1BmQeB02nkT6pb1%2BM1emr%2BXM3yPi%2Fo2DUVIYwW7nLnWm%2FxKjtujmSNuH0aU9YH40uKN%2BEjfTzJK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ef1f655a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39008,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bc651631da571445ec5e9569e3ed7a6f","sha1":"53c123515af196073e93d99c5815aef205d7be69","sha256":"74177a88360ae8648bfa66be932ee173c36f7c79fc2bbc83d9c63e9b37072a35","sha512":"284c2e80bea179a21d5a13760e81862caf95141ce320c096b4aa2dc395bb69da9d9104a59b8fc9323d7c4c51e3e2109be52a34c2207db0ae459d2d57ab91a8fc","ssdeep":"768:JKcA+XzmJTyVzpZCU0fMEj6f3XNt6WJBTDSfzHCKYg5iAct3jX8NP:JKv+aJ+pZCUZP36WPTOHCB3jQ","tlshash":"c703f1da60e32b47ead09139584f9d44bc4e1997804caabe48ee15d0cbc8827dbf4d5f","first_seen":"2026-01-31T21:14:50.727808Z","last_seen":"2026-02-13T20:55:00.812381Z","times_seen":35,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/second-design/ranks/platinum5.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /second-design/ranks/platinum5.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9316\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:47 GMT\r\netag: W/\"2464-1930f2471f8\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ZCtG6a%2BGYmC%2FB7dowIPw5SCTe5qrwWD7%2B1S8JRGsnsYYc%2FwibsSPWsnlZU7y7Td%2FpnRKvcG7xLrMcwfDIYhc7nZKFIq6hfvB4Sv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f29a4a5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9316,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e39a29122513d2ccb49632724b56de0e","sha1":"66e55190bac1ccecb9346477a4e39fa08fac7ed4","sha256":"56dc4713aaa433ec4d423ff8c5080fb1cae997e9140f4aa800ed95f906dbffd0","sha512":"2e7b525d7d726f5c7e9e65f1282befaddb63a3be59d94249068bcdd54ff2ef10b9ae287f127dc5139f82641bd99a1ae973d56eb7634fd976dc0809eccc4016e8","ssdeep":"192:oK4FPabxOsSw5Dek5/a1IMKonmtKaZXeUVgBY7v+xwDvjgN2LxN0:WFCFZK6MfmtKsXeChUsu","tlshash":"9e12afa86aac13c454e4faf53464951e0d8e23c6d7e626e4e29c8b6669f13d27b340d0","first_seen":"2026-01-11T01:55:53.468122Z","last_seen":"2026-02-19T17:02:28.811392Z","times_seen":41,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/second-design/ranks/iron2.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /second-design/ranks/iron2.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6118\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:06 GMT\r\netag: W/\"17e6-1930f23d1d0\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n5zZHQNEXZMdNfjVp9oSak98E2ga95YU8Vwd4XM21uzeaqU7pCLI36Vq34R2wtkFHo8D3LApcF8O8h4VQqx1kk92pN3sDwqk9Vdz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f29a5f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6118,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d28114b48ac18944215523860da3a5c7","sha1":"28362795f12361cc91e2f6e07105b8c9fc3edf09","sha256":"5dc83996a07a764a4857682d8787b8227d5459b226769596d67a29c678d16c99","sha512":"d66a50afbbab7f802d7ee838a865d1dc0e8499b3ea3c83f164677f43fb503d35c85dde4c8b254aad28b85c52bcab62624bc608f31e9d9e4c7d2b0bd89687432e","ssdeep":"96:WyAJFk2Vi06XAhJK5gi6XehC021eJoeDO5uCuKSBtQKdy6J3Dw/+Athr2GWho:YJBVsyRXcC02IdQuU6Ji+mrmo","tlshash":"9fc18ec362fcd24eee805cabfc32418ddc14ddd24e602bba5d8d9d006525e2e3a1984e","first_seen":"2026-01-11T01:55:53.50367Z","last_seen":"2026-02-13T04:13:07.677692Z","times_seen":46,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/7699dd9768b273c7.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/7699dd9768b273c7.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"8137e-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wNqjku2WMuHv3HNpqFwp0%2FJkpnFcFALdEGx1B9Jk6JfArcSezEeph7I%2BYDJa0MUx1Kr%2FVkVesNCHinZ1CuffyANQNG1vEHfjJmnL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbcf985a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":529278,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55790)","md5":"5dbd085ce6a6c185ebb193a0f6eecf9d","sha1":"73b8784d3a8c8320e3b2f06e0be20c96e8a7008a","sha256":"33022dc63e01d695407e491ba7831429b9d207742b86938a2ab14dee4720ba40","sha512":"a073e598ebea89dc13853921dac5ef3fd74c1de418739f4897067307614ed807a0e9349c365933698f45ada338197b841f55e255854e2be2c2404d9e4908fe25","ssdeep":"6144:Da4781+VuYZlk8X4QAZt7dIURZyHnE3Qer/Ut18OZzljzC4l:9PHAZBdIURZyk5iZzzl","tlshash":"16b44af93695b1735ba602a6407f1002b338196b240e4864f365edde74b884aa1f7f7e","first_seen":"2026-01-31T21:08:57.204993Z","last_seen":"2026-02-01T19:38:23.454705Z","times_seen":40,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-sleeping-dragon.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-sleeping-dragon.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36244\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:09 GMT\r\netag: W/\"8d94-19baced9128\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SNBRZfhi6M9BekMYqNITCm%2BVpWAmnVa45aBvNNN17iwaNjzIQpg1%2FRHtV38OPnfSqNL%2F07jxc7HPSgS2JdKjvv5%2BfLpMOk9Avxp%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f15e015a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36244,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0dc198cfd9e884c3d44f602b4fbea4d5","sha1":"e227d77c14ee60a7873cd81a402f94d0aeaace39","sha256":"f0d6dcb65aebbb3e5e752cc6b5be84a2187feba22a19a9931e9ef613bc15bb05","sha512":"685f134077de498819d15fa82df9669075671df06ccffcc521bfc10f6470336ea2b49240784a11539c344c08e7095e564b8f8c11c78b470de2e8b8ee25885a2b","ssdeep":"768:vYNg7tCufURlCXg3fkXWo6R6zLVNRWlasC1v5KywqQeD4V3MEW7XkNEMusT:gNg7DUig3fkXb6R6NNRyaZ1v5jwqQC4x","tlshash":"daf2e19798db13c7b004fffac51cb3906466f45715f646ae18ba0ef16831487a37daa0","first_seen":"2026-01-31T21:14:50.632007Z","last_seen":"2026-02-13T20:55:00.83181Z","times_seen":35,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/ph/static/dead-clicks-autocapture.js?v=1.318.1","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /ph/static/dead-clicks-autocapture.js?v=1.318.1 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966848742%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\ncache-control: public, max-age=14400\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\ncf-cache-status: HIT\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966848742%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\ndnt: 1\r\npragma: no-cache\r\nreferer: https://mycasin.icu/\r\nsec-fetch-dest: script\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 162.158.94.72\r\nx-forwarded-host: mycasin.icu\r\nx-forwarded-port: 3000\r\nx-middleware-rewrite: https://eu-assets.i.posthog.com/static/dead-clicks-autocapture.js?v=1.318.1\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Sun, 01 Feb 2026 15:28:21 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nx-envoy-upstream-service-time: 3\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\netag: \"697f7115-3303\"\r\nage: 0\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BQJe4r70pH4%2F%2BGqLUUb2dJTnMZ1K6UyItZ5zRXpvScF8%2BA9hXTs73AAreLN8BEUaFyQ%2FSj7oEurrgQ4Q0ibDmIVX5vgOU4rMShHP\"}]}\r\ncf-ray: 9c7328e6bc5d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13059,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13006)","md5":"cc981e3687edce8a3d22380972ee45e3","sha1":"1955fa562b42c9f134b62e7ac0e9c11bbfa4da75","sha256":"a40d91c2014cca52defeb2481998498f02fc53526fd05302df0e0e490173814a","sha512":"2dc021b1b3ef375290f2d59d97ccc6bd6306aa4af2791c6cc29a129b50acc89a0566e5b27074037312082f55966c0bda2d77ab2ace32ad4a2154d08176e1c2c1","ssdeep":"384:sw+VM/tkSeCRi2WzHiAOjCQBgxjOJWgikn26FT:n+D9QeOMgM6FT","tlshash":"69420a88b7d0f3b12bd7145ac4bf1702f03525082556c824b159ecdab4adb1622bbe7f","first_seen":"2026-01-12T11:07:28.642714Z","last_seen":"2026-05-02T04:35:08.724281Z","times_seen":5160,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/hacksaw-scratchy-mini.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/hacksaw-scratchy-mini.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22042\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:08 GMT\r\netag: W/\"561a-19baced8d40\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WoRBXNf%2BZcpEyWyM4uKwDisEK2O%2F3Qcd1R19Bc8KeHPj3cOTDYPcZ9VWvd3qwyiqa8V5nyAO%2FyR%2FHNewAtMBlvBquDtGdLXgi%2F0i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f28a205a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22042,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"81d306e991363ad3f5034d7f824b4a3a","sha1":"baee733a5eafb666f9e789145d568d40d125ce7c","sha256":"4af3d23733a0f9d3f7aafcef916ce248bd258fd9bbee03f125f72d41217710a5","sha512":"1c81c0b77c4aafdd1da66299e9cbd63078617fa1b0f5fb45c578ea1dedeca54e45830cd7c0d22557e96954b7a8e1b016b5e479ccf8d0feca24ff373aef7bbffa","ssdeep":"384:uwdvIYbbYoGjNdXck6xbKMV7LQcrgmA9fYwXuD/zq2VsFsm+:5eYb0tdXc3b7LQn2DJVsFsl","tlshash":"33a2d0c54be021cecbaf86b171251756abe27e5eaf25cd3746f78798e3517804137084","first_seen":"2026-02-01T17:28:00.980339Z","last_seen":"2026-02-01T17:28:00.980339Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/media/DMSans_Bold-s.p.8bea84e5.ttf","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/media/DMSans_Bold-s.p.8bea84e5.ttf HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"dbd0-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X6lO66jUeHCaHutE5pu3lZNXnw6%2Bwf9is6am63zc3i48bsPl05b3rSduTJHiJWoKFO9LISKT29FkFjEjGRsR7csP6Z63EwZ5qz10\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbaf345a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56272,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 42 names, Microsoft, language 0x409","md5":"337352e89c0a500c19e7c3a1cd83161c","sha1":"5987ba6a8b8c8cc7f755431eca614ea7f5de1b96","sha256":"7f5b8463e4c88e51ebc803105b9099def8163754f3a4453bb66f822878471499","sha512":"40d9cd93dffd18143dced57120735d2b31bb2added5cb801fdde509eb9f44db073aa69656befbb1eef6d957e3c4d77cb4c73e814ad72f64b46947c4a9e1d60ef","ssdeep":"768:PORWnLfP9U7ifzsufcbBUZPt7zrjrhPwUBUBv5pGUh08QtKFhj0akpAQ:POgzC7eQ+ckzHxw2MYq08QYrj0akpx","tlshash":"31436da6f721a30cd3676dbc985343b44b75be34be22475bd975273fee050a04c22a89","first_seen":"2023-11-01T17:45:54Z","last_seen":"2026-05-03T08:42:55.598149Z","times_seen":433,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/27b71be17762de0f.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/27b71be17762de0f.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"8205-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qopz%2FvBDBEkvaB4U69aRIjrHmnsLD9NNyNF2UuvjI3FCurF5cBkjIXdk%2BX%2FmX9qZ7dbXQfTFrNIZOuenA0GxXFGUUiQQqu%2BfDHrn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbcf915a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33285,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19160)","md5":"4096c4d4d5ac98daec5aa8644d190e15","sha1":"eda20aa13991a67cfa896c2cb095ff2cc3eeb066","sha256":"a4e704b26094e68db8a6c959285508c57e758610aa915c4c8c38bf9f71801e62","sha512":"20bc9534196dd3654f1e511b2f8762774d5621779a3f51c4251e567ac2c2cef57ba58e1c7e9d2ef5c54b9babb5199ee2c0a475d1908a5869ab905bbf98ec0a13","ssdeep":"384:ojpSDGGRkRSrTfIVZ/X+C90mkdG4+Z47aYSwTgqGFJp:2S/8Z/X+C90fMzZ47a8sF","tlshash":"dde2b6b572d4faa2129341f0c43f2017f2684c7521ad7470a7e4cc9b765888da6bafd9","first_seen":"2026-01-11T01:55:53.408677Z","last_seen":"2026-04-28T01:10:54.33573Z","times_seen":184,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/flags/US.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /flags/US.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966848742%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1728\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 20:56:37 GMT\r\netag: W/\"6c0-19b7b591f88\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BU8y9zBocJ7JZ%2FKa2puG6OL57vODhudffxjLskTfdLC7UHdAVgVpeVZmbFiie6jOXcXTQ50R20hwn7S8WM1G0oato0%2B7%2FrKMyW4%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328e69be85a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1728,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d5b2ad4da5657d21695de35554777081","sha1":"1cdc99c99f67962995af22fc9c811f94b72d53ac","sha256":"e3a1cbe55c01edaea1f1715a1593ff2a0685067bc0c5d77aeca7f27fe3a630b4","sha512":"c69e0989ba173bf00495affc2ee10a77cd8a5dd8a05426985c0db982ce8cdc22f376449fd57f97966526fbd4ca0332be02decdf91a0f8e4436cace537a20e39d","ssdeep":"","tlshash":"653128758f3056cae7dc0d60343094e0a3efeddc8b280e293088fe0364f1626785aa60","first_seen":"2026-01-11T01:55:53.490895Z","last_seen":"2026-04-19T14:33:49.989564Z","times_seen":75,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/inout-chicken-road-two.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/inout-chicken-road-two.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21086\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:21 GMT\r\netag: W/\"525e-19b7abf1208\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tx2jWq6Reypd2L7OGZ0oyJ7%2FuRJFAbzPtM%2FZR23WMO8fitLqKJA8xkZY7zKoVk42%2BPIq%2FEhFxZhAbQO2Buyv%2BN5BixppcBWF5yL9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ef0f135a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21086,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x533, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5c51819308d47956aae4f440b78a3738","sha1":"dfcf53c70c19bc4b092101b2747347e03914810c","sha256":"d24c9029163fcdab092d967bf9ca0e92c0765f65751d17857c65c66384d575f9","sha512":"8b5eddfbac12e44eed0c84d72bdb1236f8b012f2e8cef45e59c6c64fe63e0f165f60f774b1f7bfa532ad9c68edcd0a9b358bad2ff02ccd014c1db2a9e8e422ac","ssdeep":"384:ovnk0XgBvzmDivCF0nWW3N5p9nuW9JsnvagAHUeVbCKwnO4KtkP2N0D:oc0XgBvq0nWKYKGnvQt9C4te2N+","tlshash":"c892e144f1c681192f7622dcbb9edb86d5c085922048496ebb7e1943c7b2ed583a478d","first_seen":"2026-01-31T21:08:57.30618Z","last_seen":"2026-02-19T17:02:28.739386Z","times_seen":71,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-wild-wild-riches.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-wild-wild-riches.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28626\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:46 GMT\r\netag: W/\"6fd2-19baced3750\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8sOZ1cCiZsph5xDEkddXWrYhXvYZ2P8xUZbehGNXjZqhp8mmSTOIopMU3QtAyT3fA82zuLkkmu5fNCQrHtmUMM5POgqZCUV%2F19is\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f14dfe5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28626,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"41b175d332e2d248c879b133878541ce","sha1":"f7d2320a8cebaa7901f08bc7142b6027c942e0bb","sha256":"a3997b4ba92bfd35ebffcd0ea0d78a362e125558b02d920209e5ea07a073e50b","sha512":"84d2d229d9cfb7902fa3b425d74938a397f4c2ed7aceaa51a84e0cbfa88e6d4fdc8eed3c78fbfd364f1b143ab4170620c56b6da626db16b1f56766e76d6faeb0","ssdeep":"768:HYVLqT7LmTKFfU6jkEKrLicFXE97QRabMO6Kzlc:HYMPtfwEKaAZaPbS","tlshash":"13d2d1d14f31c2b0e26f64bc31adae7a39b839aa6e7c85d045b12c4e75805c358bd7c8","first_seen":"2026-01-31T21:14:50.7445Z","last_seen":"2026-02-13T20:55:00.75998Z","times_seen":35,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/vip?_rsc=bnag7","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:31.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /vip?_rsc=bnag7 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-a8b26daf8541930f-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/vip\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/vip?_rsc=bnag7\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v3PeasskCL2%2FHyiNYTIeibnw9r8q3jSvJ9ZyzzXe7PhPgZq2cedy%2B9GhKyt7wko8XWz%2F0R49NkKSF6gpxI%2BtEMRJKDAU41PJTwAh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f37d2e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1961,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1440)","md5":"37b0ffd9cb2d27e7a6a2c212d8bf3083","sha1":"24aca75d5e1c0753e588ce675c45ab982223c306","sha256":"30ba036a2dc940c8de5323e2f487f1c5e80fff031adadcbb5e71d758fec4160b","sha512":"bf3d200415ed7b9ee61a88a94de3f2c15340c0209c07cf9d85ff5c5889fc612b705315ceeb91cd573c0d6162814031d3b1feafce34130c59ad724ef805d17f42","ssdeep":"","tlshash":"2041237a890ced4d5a67c95d086fe31a550d1673c6701e6aebaccd0e1ac503e4f60e90","first_seen":"2026-01-31T21:15:21.902571Z","last_seen":"2026-02-01T17:28:00.893286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/providers?_rsc=bnag7","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:31.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /providers?_rsc=bnag7 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-8c9177f699040634-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/providers\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/providers?_rsc=bnag7\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fAEwm3m9fKeOvbsflO44FwNllTC9bzwhM%2BQSyqCOmxgWVVsehzjTXcrCDYqPkB0cyp6mEjrHY4mOK0hSiZhzlOOH91%2B22sUG3x7%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f39d845a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1961,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1440)","md5":"37b0ffd9cb2d27e7a6a2c212d8bf3083","sha1":"24aca75d5e1c0753e588ce675c45ab982223c306","sha256":"30ba036a2dc940c8de5323e2f487f1c5e80fff031adadcbb5e71d758fec4160b","sha512":"bf3d200415ed7b9ee61a88a94de3f2c15340c0209c07cf9d85ff5c5889fc612b705315ceeb91cd573c0d6162814031d3b1feafce34130c59ad724ef805d17f42","ssdeep":"","tlshash":"2041237a890ced4d5a67c95d086fe31a550d1673c6701e6aebaccd0e1ac503e4f60e90","first_seen":"2026-01-31T21:15:21.902571Z","last_seen":"2026-02-01T17:28:00.893286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/HotSafari.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:35.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/HotSafari.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966854385%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 46992\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:17 GMT\r\netag: W/\"b790-19b7abf0268\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AVONc3eqgtqtChtf6PLmnxf62xnCOYIOMJjXE7Wj3dkfwa80nYuJF5Ktlhs0lnaPgdJSsYDWpfTaDxHyqAV0IsBDzelR%2Bu38KaZq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c73290f39365a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46992,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 816x1092, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"034958b7bf9d7b5686f13413c5ad8319","sha1":"0d1064a7288af165bd1ef31467c747cff90bbd33","sha256":"9e2b3893fa86d04dc9d5b9397eb7544d9048c7de553c42f00766ea79d284164a","sha512":"a226cc72d3cae06c02cad1010f37023ec3534f4a50372897577092f92dffc17dad370a3f856338bc0c6e8f5f16ba0c56b74283d4937d4fa8228f7f897af9412e","ssdeep":"768:PcX4I+sVQiiauo4WI6Bw6Qlzix8lP/IzYkM6fk8DggROfhElJ31ZAiOIy5lq:PO4mVQpablBw68zBlPwzJpk8snfSJntt","tlshash":"fa2302c648174f10d12978fea2e83f4d0f2cf991caff6a8540592d59a891ceac0be1dc","first_seen":"2026-02-01T17:28:00.989314Z","last_seen":"2026-02-01T17:28:00.989314Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/d46c8391d5bdfe55.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/d46c8391d5bdfe55.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"77ec-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8RKMBBVPaU5wMMFhlorhDV3PGZBIk6TRsDaAXek%2Bfvm5%2FSN%2FLanL9Eonn9da8IhRcYOctPB4CwSbdw2PF%2FbXgBBzgdfeGZ7X0sEV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbcfbb5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30700,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30341)","md5":"faa78fe4fb496d7d7e8e0291756cc1f3","sha1":"6bcdf2e14f91b5fee8d295edb9851320adfa4a5b","sha256":"ed4ffbc69e75f48ff9d13860973a024f747da39bfc52be9986bf425f80ee53be","sha512":"71425d412f0ab946f12fad31d78cc15dc986bebb3087ef3c8c99a5c4b63dfeb2518c28c878c89596f5f384ec5c4a094c97a3d5214610651a882d45a4d9f1c3a3","ssdeep":"384:Df58F5SF5BqXE0msKkymRd0cJ3ED79Fg/aW8qWtOPSNAatwMs:DB25SHBd0PwMIxCatwMs","tlshash":"9dd2c8b17395f9b352db86d9d03a0015f2290d3530ae28b0b394dcef368dd8991b9fa5","first_seen":"2025-12-31T07:43:06.411892Z","last_seen":"2026-04-28T01:10:54.127528Z","times_seen":185,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/media/DMSans_Medium-s.p.4f631073.ttf","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/media/DMSans_Medium-s.p.4f631073.ttf HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"dc3c-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L2abmbc85RqPfp0O8pchEvgRPaveEsvZaHM3hPK3Uq90whoHbvdj8WIV7gwhgPug8puqyMzN8YU%2BugWn9kSSB9ZMGcM3NvDzVRRf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbaf375a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56380,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 44 names, Microsoft, language 0x409","md5":"6244219cea1110e6ec49e950f070acf8","sha1":"00ea5b83c109e751b844413d32e21b7689bf786d","sha256":"32c8fe1874433bd34674ef1b58037fdb7d1b245d5844076c76c6f3a2c69d6840","sha512":"151abea1c586541b2ee6fdbffea8dc7046027b37599092acba6a6a89873501ac3cd2f459a58df5be30b677bc252b4031fc4c9b4e9b5649a30786682c28243bbe","ssdeep":"768:ejiwYeGvU7ifzsu/ma5tBMPxmMu4mjtpg9IfypSe59QQZayKRgJDE/T+:ejD7eQ8dGZm14/m059QQo1RgJDEy","tlshash":"bf435d42f7158a0dd2836ebc846383f4b777fc34fea2839b5179ab2aed490a14c11384","first_seen":"2023-11-01T17:45:54Z","last_seen":"2026-05-03T04:31:42.346675Z","times_seen":396,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/09bcf53934cf48b9.css","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/09bcf53934cf48b9.css HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"93-19c15989c68\"\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2RLv2QVObNV4YxrrO%2Fhv4BB4BlKGpRvG2O6QHaeQR%2FCF00YOsGdL%2FFEQEteMWcP%2FAl6N3b20Hw5sEFsNhR8%2F8qagwjkT91u5Jb3w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c7328dbbf7e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"4f335c221d5e283df96fc6b4a2e8775c","sha1":"44169cf280b27a325f85cb86c9c79f26ea4807cc","sha256":"75151e853588fa94ddadf82b7e4442554a7cfb03eb34dd45896004ffc7ea5c9f","sha512":"7683594dc8582aeb0af1fc6105d9c25c31638dce4a62cc3ef14f140bf1e4ffad6ee7b0aab3b4c613f05a575d384acf404af28b75679a66a5dcb41773640dd3cd","ssdeep":"","tlshash":"e2c002cc938927120487a6d23aa0e5e1c13ef1c1bab984cd21a9754ac3466550186646","first_seen":"2025-11-23T22:59:50.462528Z","last_seen":"2026-02-19T17:02:28.669617Z","times_seen":75,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/08c39a0012534f66.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/08c39a0012534f66.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"1b32a-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EUF0NkiEfQ1jP4yB22gSlyGxA8cJF8AmMRU6IzmeqkEn4I4KvPdq7%2BFGU88TxNaVx5Kc%2Fyc88UICx4yL32CAf99HdzA5FzNH2mQX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbcfaf5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111402,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ff39d75e72b017105228a3e3937e7591","sha1":"f2d18c32727ea5c8c3025c3dd6062cc64a0205bf","sha256":"bde5066619da447ebe65deb46930149c780552d9aeaea4827915013d287be571","sha512":"cc6a711c714a6309780c59e28fe35a28e70d35720b3c4f0eb25986f230329c1a1e047514909fc053fdf56233194352b7595f57e4de1271c715d0fbbc315a5cb4","ssdeep":"1536:0N29IxBQi6ha/rqj4gUnFZSul2PmOot685j:05P6M2jDRuPn6e","tlshash":"73b3f7f935d5f48207ab40a6c03f0006f32c5d37189e68a0a3e5ddda756499de1b3faa","first_seen":"2026-01-31T21:08:57.335286Z","last_seen":"2026-02-19T17:02:28.643844Z","times_seen":94,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/e3d00364d13321ed.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/e3d00364d13321ed.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"4753-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9e6pbzZbx50nxZnjrBPTwMKIe%2B81DpeG48WLxr0p8Kv%2BltEbCLJE%2F9n%2Fzu9QnTdRI1xB%2BBPSnZsW513kzy9av2cFlR%2F%2B5SGIA7h%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbcfcc5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18259,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9993)","md5":"2486934aebd0b00e55e68b6dfbe9d0fe","sha1":"848dbefe394be98e044928f1374fb59929c92f93","sha256":"11380db3ba8aec5597b4cde9773951510aa89424968a8c7435db112f37901b0d","sha512":"807a83e35db9c4bc646787d3a154bf2e80e386daafb9fd97ea6059fbde48bbc924847a8108bf120b524c4edccc89acd8e5139ae522a1a2655a29dc720a4df54c","ssdeep":"192:uF1HgFrAHRNiN/Rv3cGggerToWWeoedmPWo21UCS+94eNSIOEPZJJb1I+7mTH47C:YHgcRNiN/ojfoWpHmt21u+9vdmTHS5W","tlshash":"1382b6ea7282f0b197bb10a2c07f400bf2793565245d4054e7a6c8ef74f056e86a7f7a","first_seen":"2026-01-11T01:55:53.455045Z","last_seen":"2026-02-19T17:02:28.7957Z","times_seen":73,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/ce44054dec8673d8.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/ce44054dec8673d8.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"2a759-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XjMAdPSiF9bgaSmKq4bKaBLpKABdFVnLwDwjDDZr4LIw0EIhWw8L4sVx6Yb6bV6X52pn%2FTCnYg2VU5K8gXLUFAvxIQJ9zlo2yD54\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbe8245a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173913,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"55bde39edae3431bfd62768b8daea510","sha1":"9db768e745799c7b53bffbdb618c2263ab3557ca","sha256":"00a87cb86b607e19e592958bce89d185c75348ab44a92c12981c1b643ec1f5f3","sha512":"2da1e992c32123c7bf657c5e5a8e22f89aae2ad011483788ab2a009ffacc9a5709284f624c13cde721c732cbb1fe2337e0c40541499b51687862ff2e896ef008","ssdeep":"1536:BSUFcXpf43D/mr5hTIEdjDjJTob3UoYq06KgVH3TgTUcvJsgqzgx2/xWCSqlX3mX:BvWXpfsTzj91E2/DSqlX3ta","tlshash":"da040bdbb779d02249ed90e5d0360103e33a3b4e5548842cf25eadce359d94aa27bf36","first_seen":"2026-01-31T21:08:57.252675Z","last_seen":"2026-02-07T15:13:58.776301Z","times_seen":77,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/op1.js?v=1.1.3","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /op1.js?v=1.1.3 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 13 Jan 2026 19:35:43 GMT\r\netag: W/\"1712-19bb8db5f00\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EhsJxaBdb3r4iCpGSNfodO%2FCV9YXFTkfSl3boQ5flIXmhpQWURHZ0ovomBQpILzqRUBdfvlPvN7h1fQShO2PvnSEGGoZ022W1uno\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dc18fb5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5906,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5905)","md5":"8bcfe273763be53ba87613b21d4bd80b","sha1":"0784b9ce9f450c2bb33a9b08a5f2de2633e0a481","sha256":"d79474635d2a5fddfea4f74fbcd168be27fa6a40545ef2d801cf146121cd41c1","sha512":"f5de8b0a6c09c0502c0d247d566d69ee8deb3e67b463d7a31de7a5e0adcebd353ea513f084a6eb4504f602999bba6806015b75930f464a7aa6b7d7ba0290961e","ssdeep":"96:aTF5H5HQTNy2o4j471V0HjDkAMEmLmwwrHGNsuNS3DWmoLxu:e5Z52DjM1VYjwAMlkrmNseS3gu","tlshash":"7bc196e332ea25f246ee74a9d6213252a73817b4340e501cb76caddb1484d06b3e5fb4","first_seen":"2025-12-19T01:02:07.6499Z","last_seen":"2026-05-02T23:37:49.107997Z","times_seen":208,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/api/socket.io/?EIO=4\u0026transport=polling\u0026t=0k9ahhic\u0026sid=VXZtvyaQAqPb-Z5uAAb1","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"POST /api/socket.io/?EIO=4\u0026transport=polling\u0026t=0k9ahhic\u0026sid=VXZtvyaQAqPb-Z5uAAb1 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: undefined\r\nContent-type: text/plain;charset=UTF-8\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-ba92eac2da7774d6-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nContent-Length: 2\r\nOrigin: https://mycasin.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966848742%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"40"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://mycasin.icu\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KIorD2P7LrnK1VAFGaqL3gCuJir1hZ92yDeBt716kshDeyyprNegv%2Fwrb8j1YtJlbQcYwlxPIX4Um%2BHCorPEzeq9q4EH41S2KUHr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c7328e69bed5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-05-03T13:31:43.873667Z","times_seen":404916,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/media/DMSans_Regular-s.p.e7e0f28b.ttf","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/media/DMSans_Regular-s.p.e7e0f28b.ttf HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"dc20-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8029qdGWDilLvARf9TQqaS1cqbYWl%2BfZLRoJFouym7tcMy4nVJhxjlnlFaa5WimFkK1T9IdU%2Fd48wcZ5drjNQfqoHVQWRwmEysEi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbaf395a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56352,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 42 names, Microsoft, language 0x409","md5":"0305ad7453af42d8f036dd29294ae5c3","sha1":"ac9a042a40e49e8cdbfe0e64e84d9b1c5724e98d","sha256":"7a73e6aa8107e0046eae5dd713bf4752d93e689f57d51c45b1545acddfd71be3","sha512":"d5a1bc2041edc0debccd45637460ac89ac3234859029b8507072d6232bf0f0e9229864ce51ea3b43eacfdbb029228242bfdca046ef86db05a1ab278ddeca209b","ssdeep":"768:VJRyPX2U7ifzsuaBqydjkUP057fhrrXtk1ay8zENP4EgzwtCE:DRyf57eQFdjkS0HC1aSAbwtR","tlshash":"60434b16f716871ee2936eb9c673d3a4e7b5bd30be23434b64755b2ade0b0e44c21284","first_seen":"2023-11-01T17:45:54Z","last_seen":"2026-05-03T11:54:57.080033Z","times_seen":681,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/media/Inter_Bold-s.p.fbbe7604.ttf","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/media/Inter_Bold-s.p.fbbe7604.ttf HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"65560-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pv1ES0sXCtW9p%2F6bVIEBHj3BWTWrddRK0gEZYB2A%2F6%2Fbi6B06W7xdLTqu2vPbKX7t9fBHVu9lEFyqz4pqPX0bBu%2FmHwGgMevz%2Fwm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbaf405a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":415072,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 35 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInterBold4.000;git-a52131595;RSMS;Inter-BoldInter BoldVe","md5":"8f2869a84ad71f156a17bb66611ebe22","sha1":"0325b9b3992fa2fdc9c715730a33135696c68a39","sha256":"0cb1bc1335372d9e3a0cf6f5311c7cce87af90d2a777fdeec18be605a2a70bc1","sha512":"3d4315d591dcf7609c15b3e32bcc234659fcdbe4be24aef5dba4ad248ad42fd9ab082250244f99dc801ec21575b7400aace50a1e8834d5c33404e76a0caac834","ssdeep":"12288:k9zC2w597PziK+bSvkK3sgUN8HkC48AeIVMhQ/8:e4iK+6I/8","tlshash":"ff946a1bf701e70eca562c388af59bd033b9bc91791ee24b705a3a09dd971b40ad71e4","first_seen":"2024-07-29T21:54:31Z","last_seen":"2026-05-02T23:37:49.223415Z","times_seen":256,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/2349889433227e69.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/2349889433227e69.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"10b33-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x2r78NmXmRDNp5ZMAF3WRdMmh7dN5G8dRmKXF%2Ba5VUhpAPIEyyFgw1sX0jBRtdopFtfW1bgVucKLZKex7Off9z%2FIoLnumy8QrMmg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbdfdd5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68403,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (60216)","md5":"78bce7ce7acfc3881e181f458e56e281","sha1":"31b0a2cee84238768b19d60f5bbe95073f85f927","sha256":"bb5a1ecce51f1568ea7b8136da53386bf996288fcd864ec646ba176b5b858af0","sha512":"3dcc827162e8eda233878321092245d82f2eb30c1f09cbeaaedc63426ff11efef495f99064aefcb610277b3bfb0266890fe6ebcfa75ea538d8d58f5c55f1f96c","ssdeep":"768:giSpd5w4FuUe/y1xxzgxk93gtaKoYYS221frDQUkP/M6+rueVutcc9m4V:ZYAymxktgtDDQUkP/M6+ueVuZ1V","tlshash":"dc636c63324228f65bdf42c6e02e8606e33915d6900d4124f7aa5c3a5b61fe890e7f2f","first_seen":"2026-01-11T01:55:53.41201Z","last_seen":"2026-02-19T17:02:28.846589Z","times_seen":73,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/reviews?_rsc=bnag7","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /reviews?_rsc=bnag7 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-91e4fe688c392cad-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/reviews\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/reviews?_rsc=bnag7\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rfsPFRq3tloV2bWCzaYNWclQYkIrpFCjnFQlwisvob8VGPl45Y75pLaykq818xncHuKeRgetV1Vc9623TeoaxDkEimz%2B1kXweUEt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ed49c65a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1961,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1440)","md5":"37b0ffd9cb2d27e7a6a2c212d8bf3083","sha1":"24aca75d5e1c0753e588ce675c45ab982223c306","sha256":"30ba036a2dc940c8de5323e2f487f1c5e80fff031adadcbb5e71d758fec4160b","sha512":"bf3d200415ed7b9ee61a88a94de3f2c15340c0209c07cf9d85ff5c5889fc612b705315ceeb91cd573c0d6162814031d3b1feafce34130c59ad724ef805d17f42","ssdeep":"","tlshash":"2041237a890ced4d5a67c95d086fe31a550d1673c6701e6aebaccd0e1ac503e4f60e90","first_seen":"2026-01-31T21:15:21.902571Z","last_seen":"2026-02-01T17:28:00.893286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/privacy?_rsc=zmb1r","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /privacy?_rsc=zmb1r HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/privacy/__PAGE__\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-abc591fa8ebebdc1-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/privacy\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/privacy?_rsc=zmb1r\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1FD1qRa%2BZZbGuTtfcbibGfRZWcMnQvbXnz2TlPuPvX1qd4qnQwPcLS%2FOrYSNOlzJcyl%2F6G8bTBAHUf%2BaeFifsq4m8bcz%2BFo8mqB7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ee0c6c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20908,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4004)","md5":"f060512de28bcc3585bcbd107bd35f86","sha1":"702c26985ef93e43d00b8b5cb620d15d97eb4531","sha256":"1df016e628198a1b90b06de4923373ebba4f1788b6ab24edb6f131f27ab04f7c","sha512":"4e178681df5969c3ee26b74cec35c48c3b0ddfcdc56a5981c8ec3e4d6040db9a277b485ae840e137432b5fb4f5e9d151007ac2ca1685392b45d88df84245227c","ssdeep":"384:ySsExz09CbG6de7ROEFgWS0BAXSJTVmTUopZGyWBt7Bf/EpfQIDwo747eGGH3XAy:rz0kbfde7UEXKz6pfMxw047eHnKvy","tlshash":"e792b52ed708a7685bab01613a1fd6baf72d453dab62ce3e69bc861403465341f373c4","first_seen":"2026-01-31T21:15:22.03962Z","last_seen":"2026-02-01T17:28:01.002143Z","times_seen":2,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-emerald-king.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-emerald-king.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23018\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:45 GMT\r\netag: W/\"59ea-19baced3368\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iVqq2zw9p4EmyOAU6u8F7H%2FkzN7JwskaMsVRotsjnXOfDSQ5yfBj47uO%2FkcdnQ77M6q48FifvJUAHycS6YVii0KurvKlNsHVCWVk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f29a625a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23018,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6c5c1011fa2e1573034c4a42cec20758","sha1":"e452ba5a44d87fb732ac8cb92f097d55dcd9c339","sha256":"5a697b7461ed0a0b52656001e21775713352f39f7ffff902d89bec461c6d4ddc","sha512":"4fa3c61b2b72bc0bc3026cead4e70f3cafb9cbf182051cdbf1ae9d26623f6b4030c2a13e4c509c3ec301625dd650c92bb6cafff1c71f5963f550793dfb9c58a0","ssdeep":"384:DSJQvUAxxWvADjNLA8J7PRqCzG0dnaOjiiLjwp6LKJq0Ui02Cf9UOfqGBLTqjU:e2fWvGRAeD5zG0RaOjiiLjK6LMBe26lT","tlshash":"7ba2e188498bd033f9b865530906b3a664d4dc72b945d319bd3327387435b985facac8","first_seen":"2026-02-01T14:20:22.408874Z","last_seen":"2026-02-01T17:28:01.00477Z","times_seen":2,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-sticky-bees.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-sticky-bees.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33634\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:51 GMT\r\netag: W/\"8362-19baced4ad8\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cnTDaSCa7sZsMUCFb4uGWqgdXJMmDikQ13apCDrye5zDHcN1ez%2FZ3ZjgFEkVPJn%2Bltxe%2FXgoQthxKKQEHZkNfHO1UEcRdCTXGZyY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f2aa6e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33634,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"46722672889c4142cdf25790d66d97d3","sha1":"cac18203411e18265a18d0451762b539fd495a87","sha256":"2a7189d1869eed134f6e65509e6d036b88a5b7af7de51fbde1adba4d98899c7b","sha512":"39de5cc81a693b987691fcc455a1ba564843a7fd9f9081049c4c5428dc1bd37e650bd6ddb8bcaaf98430703a512ebd213108f7bb01aa8b38b3140a77aa87d9e7","ssdeep":"384:zyBpgvYDFl+bPt+GtCQZum2/jf6fpDDsSkjufNokMMxnAn3fZSWjLwG4bI6gZnDr:myYDz+bsFfm2zWDszpqAQYLnBD1tX","tlshash":"1ee2e0617e1ae931e5047d349af0c467c1b31e9d5dc5813abc9e8c0fbb15eaa9c88143","first_seen":"2026-02-01T17:28:01.006719Z","last_seen":"2026-02-01T17:28:01.006719Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/group/slots?_rsc=bnag7","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:31.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /group/slots?_rsc=bnag7 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-8bcfb64887d25490-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/group/slots\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/group/slots?_rsc=bnag7\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3IfhGHvq%2BUa5YoUGJpi%2FAdITJuMjXSALOk9plj8DCSJNHQmP1eLiEc%2Be8%2FRNEZ4iyYGOefzGkEDMq8DLYdgXVaAJeWFnII4ZQl%2BV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f43f365a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1961,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1440)","md5":"37b0ffd9cb2d27e7a6a2c212d8bf3083","sha1":"24aca75d5e1c0753e588ce675c45ab982223c306","sha256":"30ba036a2dc940c8de5323e2f487f1c5e80fff031adadcbb5e71d758fec4160b","sha512":"bf3d200415ed7b9ee61a88a94de3f2c15340c0209c07cf9d85ff5c5889fc612b705315ceeb91cd573c0d6162814031d3b1feafce34130c59ad724ef805d17f42","ssdeep":"","tlshash":"2041237a890ced4d5a67c95d086fe31a550d1673c6701e6aebaccd0e1ac503e4f60e90","first_seen":"2026-01-31T21:15:21.902571Z","last_seen":"2026-02-01T17:28:00.893286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/48f61cc265d47694.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/48f61cc265d47694.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"ac9c-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BNSss9bz2XHZEXVoowBT9NMe3IqWaygzirvvbHAHCL0aMYxBt1SUqdOgCkGbT8H9ezg1LBSq7A%2FSK9%2B8zB1FhWwYltvBVG4iiU8a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbdfe05a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44188,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16970)","md5":"dee46bcb482bf82bd4c1029f187c68ee","sha1":"d7cf4d6188a9313e31590dacf5902ec8b1f1b311","sha256":"1943b9c626e8cf07bb3fc5f19f03effe59f3be189438303a477919db148bfc7f","sha512":"ac80a472ed1005853052a9817975646693f125531cb9f9d5ce6d69b490caa8c18bc06077c18d1ef30fd5b71d39b97c7fcec9559537c9f12ecd8c6e972743b9a0","ssdeep":"768:UjLnQztxulYXI6KJxcoQNLE5k96UJGSgf5djPZ+a:aLQYcNLGk96UJGSgf5djPZ3","tlshash":"d9130959b021ecbb223bc1fc906e1416b26d5d79e31a6a24f3ff896c131494531a3fa9","first_seen":"2026-01-31T21:08:57.327027Z","last_seen":"2026-02-19T17:02:28.753031Z","times_seen":71,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/api/auth/getSession","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:28.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /api/auth/getSession HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-89bdf72e0a3da350-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\ndate: Sun, 01 Feb 2026 17:27:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 43\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"2b-dGnJzt6gv1nJjX6DJ9RztDWptng\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V3858lOHiCP9S3eIJhPyO8RapQkjarnnYkcVrnIrgnExOBiwUMgdFQwLj92c1YsnAdeAcw%2BgtMo7l1Hd53jfKsHBLAApLlyvOOBx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328e46ca05a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":43,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a35da7b2f88e0b2a1d5ebe0ec06102bd","sha1":"7469c9cedea0bf59c98d7e8327d473b435a9b678","sha256":"e1654c7ad9ce4df238c7c18cafe8b85a27ac81155501831fcb1583963308e9a5","sha512":"62b900bf1f8d35e3df1cac72810891745f874b0dfd4bcdc5da1a3f761cc1cbb934f7aa5c65f3c2692aa48860f0384333933fb3fa7d4051254ab4a3935f6adabd","ssdeep":"","tlshash":"f790040014043d3777514105710c5535cc13447c51411053154c453c45435c44007500","first_seen":"2023-10-23T05:59:08Z","last_seen":"2026-05-02T21:36:32.541462Z","times_seen":324,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/ph/e/?ip=0\u0026_=1769966848766\u0026ver=1.318.1\u0026compression=gzip-js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:28.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"POST /ph/e/?ip=0\u0026_=1769966848766\u0026ver=1.318.1\u0026compression=gzip-js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\ncontent-type: text/plain\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-8a1465718284db38-0\r\nContent-Length: 853\r\nOrigin: https://mycasin.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966848742%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J263cgxg8OWEKlML2bioPlv4%2FaBAFlTNnv%2BTTZkvUDLZXr9mAB3Fjs4ihQFQ64D93lxFgX%2FQOy77s6SXYfi%2F%2FtNIhNVwvnpp%2BHx6\"}]}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\ncache-control: no-cache\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966848742%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\ndnt: 1\r\norigin: https://mycasin.icu\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreferer: https://mycasin.icu/\r\nsec-fetch-dest: empty\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-8a1465718284db38-0\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 172.64.209.75\r\nx-forwarded-host: mycasin.icu\r\nx-forwarded-port: 3000\r\nx-middleware-rewrite: https://eu.i.posthog.com/e/?ip=0\u0026_=1769966848766\u0026ver=1.318.1\u0026compression=gzip-js\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://mycasin.icu\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 71\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c7328e4ee125a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-05-03T12:38:07.183703Z","times_seen":27352,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/group/slots?_rsc=o7po8","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:31.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /group/slots?_rsc=o7po8 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/group\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-85777885b4915811-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/group/slots\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/group/slots?_rsc=o7po8\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KlMg643IkzfYa9RJP7OVPB46Lzy%2Bps4NUjZbPqeRnc3PpZFymsfK3eM0qRJHxFfPsBywr9UaDyPZt7VBSEgGPexyCf7iW33xN%2FMw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f4b8f95a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"857a2864c3686f888291165016bd2018","sha1":"beb130245c6d9ce627714ca17ba3c25bb50a3077","sha256":"6c6f663b1a957ac786ac52eafb1c48d30aaf4bce253dc6fdea165826a56e7edb","sha512":"390753f8ed92fc876451b2311990d40d39dc8f9eee5a7d3985f5a29857ad00c2c827e4457bc0e7bd29a8403a95453b95e2330afca600957ed3e098dd8d71b8cc","ssdeep":"","tlshash":"37f027b3d50efd252d2dcc4c0e5e6323859c58779ab51af4a2dccd9c47d113a4b8a1c0","first_seen":"2026-01-31T21:08:57.193561Z","last_seen":"2026-02-01T19:38:23.401871Z","times_seen":36,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/ph/i/v0/e/?ip=0\u0026_=1769966857390\u0026ver=1.318.1\u0026compression=gzip-js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:37.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"POST /ph/i/v0/e/?ip=0\u0026_=1769966857390\u0026ver=1.318.1\u0026compression=gzip-js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\ncontent-type: text/plain\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-8bc369e4bd03aace-0\r\nContent-Length: 1165\r\nOrigin: https://mycasin.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966854385%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:37 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mi04iOYfzzsB%2BRWmz4kdmCrSzvCMShMtmBzZ%2BV8TERaBSAvhQvJZQ%2B8wPtMevFyxiIFgBmhXE58FNk%2BkfWGIQkNXaqZ%2FXPXZ3j2B\"}]}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\ncache-control: no-cache\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966854385%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\ndnt: 1\r\norigin: https://mycasin.icu\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreferer: https://mycasin.icu/\r\nsec-fetch-dest: empty\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-8bc369e4bd03aace-0\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 172.64.209.75\r\nx-forwarded-host: mycasin.icu\r\nx-forwarded-port: 3000\r\nx-middleware-rewrite: https://eu.i.posthog.com/i/v0/e/?ip=0\u0026_=1769966857390\u0026ver=1.318.1\u0026compression=gzip-js\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://mycasin.icu\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 50\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c73291aca575a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-05-03T12:38:07.183703Z","times_seen":27352,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/0645c0b51de69014.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/0645c0b51de69014.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"22b26-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2BvUsJQmRJLptvPHOopeDDL%2BsNRkXdOS1IhLFNE2E3CET1nSS221UHZfmOuCxF5h5xbysTvdJSqujK49Z85KuKiFz8PGeN4VJ3qD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dc08c25a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142118,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47084)","md5":"9d45e69fbb44e738a07585f4a0e2cabe","sha1":"f8c9b2b7850b1007e4a64aefc1ea360954543a67","sha256":"0d3e866fc5f535bccc02dfbc1d9f5e717a06924bb1e2b7b7a97ea0b61c4a4006","sha512":"3c2a7ee5db4ae2941ec7ad4fff26f5672244af08fa839e54fd6efa302c1e5b43978de353aa5bcf3c96e9a0e8e5c8a2a693d962aa7f8cbc07b46435e5a2098986","ssdeep":"1536:6ofZm0sIEZ/gaCN2wIXdauLdKeyI+9DMvOEle10XsDJ+G6H4zJDVlDJKkTaVQcGC:QoN2wINauJXTT4z3KkLoN","tlshash":"1dd35be57140b5f85b6b42e1e47f8208b23d2978940e4468f3b92cfd22158dd71abfa7","first_seen":"2026-01-31T21:08:57.271535Z","last_seen":"2026-02-02T22:33:10.215161Z","times_seen":67,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/6ad96a8ea39e5f61.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/6ad96a8ea39e5f61.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"8013-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W7PU9kcXwb3Z5qXr%2FPbBlKurYKmAZJVaeAReoYhs4Butz%2FoQ%2FnviQRnfeRDwG949QZyJcVZSaEZyrKF3vLZJ3n3EbHotUds8urh4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dc18e05a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32787,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32430)","md5":"58590522cdb7953a32a5e0ffbcc8cd6d","sha1":"ff06e9fc51e2f9be9ae55c9cc2bb9e6901283967","sha256":"bbd0a5562d046864a232012dda15a366777f9b6677b07ac7b208804f74e0324b","sha512":"4e59fefa47581048a046ce15f05cd9820f7818d5cfd0b2fabb7544ce6908ef662091769794ad31eefa189e042f99fec03a86f31eccb8e8a50e40e9f4135efaa9","ssdeep":"768:GKuzc3PXS6w5ZLpJz9tEK+nmKaSIrstfh+kG:9cc3PXSLZLp9x","tlshash":"dee2c66050557abcf56704e8b66ec40cb11e6e68cb0fcf18b5bc7c2a385a8816d96fd3","first_seen":"2026-01-31T21:08:57.328326Z","last_seen":"2026-02-19T17:02:28.658552Z","times_seen":71,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/api/track","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:28.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"POST /api/track HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nContent-Type: application/json\r\nopenpanel-client-id: e2820c06-249b-4bc3-9f61-fafb2c624bb1\r\nopenpanel-sdk-name: nextjs\r\nopenpanel-sdk-version: 1.1.3\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-bb1472fad5268e20-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nContent-Length: 191\r\nOrigin: https://mycasin.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966848742%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":191,"data":"{\"type\":\"track\",\"payload\":{\"name\":\"screen_view\",\"properties\":{\"__referrer\":\"\",\"__path\":\"https://mycasin.icu/\",\"__title\":\"Mycasin: Crypto Casino Games \u0026 Casino Slot Games - Crypto Gambling\"}}}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin\r\nvia: 1.1 Caddy\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RBVEL5D07aUAKKBORpOc%2BTVFn5%2BbgBUwhbFlYAysTxewUd1vpTcO0e2Kx5BHG8n8Al%2FHbDwa945Is9JVzfMs1XkFV7paHvpbVjVm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9c7328e568035a0f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T13:30:47.290276Z","times_seen":14582701,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/?_rsc=q50qy","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /?_rsc=q50qy HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/__PAGE__\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-be4d948f79791bbc-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design?_rsc=q50qy\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wS39TwjGEeqfvfYEoqQNcqmI5dDhu6ouw06imoNXXZXohjQ2wlQSE922YiNL%2F5SyLttT%2Fn3gWS%2BHO%2F4%2Fp%2F8Q1k%2BLwdjuN%2Bby98U%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ecf8e35a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2697,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1794)","md5":"c8ce274153d6bcb4cbbc93cf831022e7","sha1":"3593f07ddb8ba1eaf7a89e296f9f12adc9f13967","sha256":"1f9fd95c91c407229b8939b7e5db566d530daf700bc10fd2e6d237a0f46e7a7b","sha512":"a0d43740a462cd9e041edb23f1c96cb2860f1d2198be31acdbb82b84607234ff28ba8a200f6669b3ec2cb63070678932205a2538393eb8b12b2bdc82acab8c89","ssdeep":"","tlshash":"bb51769bdc1efd584c21dc5c292f6b7691c58973cd348c9ceb9eecac04581271b891d1","first_seen":"2026-01-31T21:08:57.340014Z","last_seen":"2026-02-01T19:38:23.498846Z","times_seen":33,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/a7c7a8fadd85f653.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/a7c7a8fadd85f653.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"3128-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dp%2B%2F0SGK2wtlD2ApDovRbIH7jJ8VjLrz6C351ilY1IHHDjrBZdl%2FUl9%2B6BLc%2Fn8B8NDdd07SrnbqE1mlBz2btn1Dp91%2BZfVsZjeL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ee5d465a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12584,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12227)","md5":"6736d35e645199d0fbb2c26ff1a4c4f6","sha1":"330babe7ad7a1a008df4fbfcc4aa2022ea5216a0","sha256":"a6c5341275522eea933fa0b30bbd42b98d1d5e1cf7db03c462ec5256d35523b2","sha512":"28bed02c6ff5722134d2315615d52efb1c3a29ffa7bb4da160554f9a7433ffbfb879ce9d3c2da0d6a67a42b3ad8476e0253814cf7aa8dd3197fbf256900127e8","ssdeep":"192:GL4RE0SZ4r+zeLhVbzB44ZdLIx+7TFnRA88KlWOfSeLzt:QOr+E5ZdkxGBnRA8flWOfSeLh","tlshash":"ed42c9546154aeece5bb00d1f82f810d312f3f98c60f8870b9bca8b91a645d43b56fda","first_seen":"2026-01-31T21:08:57.356712Z","last_seen":"2026-02-19T17:02:28.855421Z","times_seen":71,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-cash-surge.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-cash-surge.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37510\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:42 GMT\r\netag: W/\"9286-19baced27b0\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8p8AFbVMMw2vPpX%2FHOeYpbNJzGMCm3yYeY53wRF%2Bl6pmRGwqOvCJQo95psk0SLkf9oCGoV3Q%2FfhYFT5oke40T9kyQUcjhJ%2FpQxMP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f14de05a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37510,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ac4c53d36a34f1c9110ac8e03501904e","sha1":"0f8a5a80b599957a19f3987efe014ed0b075efe9","sha256":"0f850711681b835051109192f9c5c0a968f41e9aa35c5a1f80fcba6981bdb25e","sha512":"9c0e78877e6535ce36426aac2c7aec5728bb15c84458b8ce936d5c57b46159ccd1428d2823e2c6fb5d5b01e5d6f49acba5f249b90311584bff85bc7f871c7a8c","ssdeep":"768:q6kHIwR7tKbw3lel/TioZGaIJooxbtuIlevsT/wSTwaSuRnWMYe:qSw1lM/TlG7ooxXlSCCaSuRWG","tlshash":"03f2f15866507a357b2b0e8effb8a4e4cf19fd90f62c4a82605b0f26dd27f463224354","first_seen":"2026-01-31T21:14:50.631089Z","last_seen":"2026-02-13T20:55:00.803361Z","times_seen":35,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-timber-stacks.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-timber-stacks.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39012\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:43 GMT\r\netag: W/\"9864-19baced2b98\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CAc%2BtoCjkvPo8Y%2F8yG0qP3yogPbvcP6dlBDc29a6OcPtDfoljuJs72XQO%2BTPmKfTC9A11xKSKbGggeKkLVaUPv5440Qx5jYLg8GO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f29a3f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39012,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"411ec7b04dd9448c4a08f56b4fb20f15","sha1":"d444acd483499d997736a28087cb67aef1971dfa","sha256":"61b6f644468b82474a375dfc7ded2e00551a49e27f6fd9c28c83bf49266096b3","sha512":"522fd305da540e1b7fa50b0ab83d05b73f58ae9e30b9a302107b2667956f4b7768696c92dfae3c182a8fca9c855e98de7b1a2996a0ced5ca60aefe13bccacf48","ssdeep":"768:/x2SOpeK2lT6R0p7tJ3jMoZCNeMpJwL9v1wS:grpYhpvTJCNeMpmL9yS","tlshash":"9803f1769248068fd35dbc7b885b43934d28920a77e742734e740f78be8ad54aac07d7","first_seen":"2026-02-01T17:28:01.016211Z","last_seen":"2026-02-01T17:28:01.016211Z","times_seen":1,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/9c439f77bcf7138d.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/9c439f77bcf7138d.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"ae89-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fgt2EOLw2SDswjyJCJJWq6oO0nuo9V7kUqjkJR%2Bjua9elaX%2F%2BEuRngfhCDFOL2VUZcopc51fAX7PLrUi9Xn73umiZwmwQ0iwBNwS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbdff75a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44681,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (44324)","md5":"84c3a7bfbd13e6eed8ef2600eaddebdc","sha1":"492c5eb4c2b6ea7d50aa47251107d02af9a99efa","sha256":"c010c5927a47a70ff2fba12a2c2fc224103a5ba1db45bff25a3c4ff53a7ed2db","sha512":"ba4d7713a6c6d0abc5f738d03df05c512d350afb9d0fca1ab43758499c61f0a263f9cc412611e7d64cbbb82481b03ea62829c5cd8719234fa3f46bac724dabcf","ssdeep":"768:B7Tl+Bi1HaSiLD3XirHJdPYKENWNDRYEpEzf9MSnS61ls0c2kXBdnXDnI8qhxCYb:B9+McSiLD3XiWIDRY0EfUH1XMOYb","tlshash":"2c13d8da73607251a3cb515cc4af0b81733758ec2019807c3a7da9cb69b0a5976bf73a","first_seen":"2026-01-11T01:55:53.441745Z","last_seen":"2026-02-19T17:02:28.745023Z","times_seen":73,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/blog?_rsc=1eubi","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /blog?_rsc=1eubi HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/blog/__PAGE__\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-97b7440fee969cd7-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/blog\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/blog?_rsc=1eubi\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yx9zu9rwquOowMszYbDXA40YsahYl4yT3cFYeOoBI0rjgU3tw8UzZIyGcmzZzgs4EVo0X1pZ1%2FMk8x2YO%2BklqSihug2U6%2F4OCbAv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f16e8b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220314,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1621)","md5":"af1587f9a02c0e12ceec9e5deafac796","sha1":"fe60bcd88e1b88928a67699c0b857ec43f9911b3","sha256":"094f9a8050e94ea3c308e3503564079d3ea27cbfb716ef05bc50ec158b880ff8","sha512":"2b765ecfb5860a02a8a04a513244a0fa85c0c16d9bd34b45e089a1f399d69cafba468fa7771c18f306a4bf5330bc977eda071b2857e3c9e81400f81c9122fde9","ssdeep":"3072:YyI2liLaJ0X346Tmcxy21qx8+ba1wg0mev:3Ja346BMaJu","tlshash":"29242a167b1c32b007f3059b367a32ddd63a9014632665ede9aec06c236a33d8736e5d","first_seen":"2026-01-31T21:15:22.028425Z","last_seen":"2026-02-01T17:28:01.020344Z","times_seen":2,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/second-design/ranks/gold2.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /second-design/ranks/gold2.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5890\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:17:22 GMT\r\netag: W/\"1702-1930f241050\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hDU6VmGHF5ZtdK63ax7OlQ0rl2PWZqRP%2F%2BGwCE10qTVdjmAZoXLb3Fp7b4%2F233pJaTEz4HVf2YJHnYmBFZYNc%2BaQuYXx0ybIfWjQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f28a1b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5890,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b42ad808ada8aee01b29d5c67da60b19","sha1":"d244a415a989989f9b3526f1b20e43a18663fdf6","sha256":"1553c7ad287f236dd0dd773366c07500b544b2829c1135d83c961a5a44847cf7","sha512":"5aa7d32715644f66116126a68ac2cbd12451cb28e9f15e5f4e007dd4c07396a6394f2db96391bdc35a7424fb737a4db4fde86e0acc82343cfeea2bf18ba03884","ssdeep":"96:EuVHF3QRUx/IY5tr1t8I+NlpHt914k00GbyuYh6uvLyaHLgmSmX7GMXuE4AheVq9:xHd//TtXS1jGOYYyaHLJSmaAuEPheVq9","tlshash":"9ec1afbbf89e799a6b86d2cce0d7960658d50ec97536132cc305e54da13c28ec185a63","first_seen":"2026-01-11T01:55:53.50643Z","last_seen":"2026-02-13T20:55:00.84397Z","times_seen":29,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/3d29fa3d9e6cec4e.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:31.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/3d29fa3d9e6cec4e.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"18e2-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b8XV%2F8CW5dS%2BGp0vwTdC8iATUgleaxyIclJPgcjKXK0cAQa54VAWKqljnggkYLTjK93L206muBUxaVVUsMg3f9kjKQI7sHSyg7N9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f57b275a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6370,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6013)","md5":"103bce398bf72f998ccceacc2ffe6e80","sha1":"db2b28d3061395776a370a3539b6ae3bf15d9dce","sha256":"29b058437c3f7686ecf84d33045a537cd24e4f01807e2af5cec8649b51b1dc18","sha512":"10f6ace8ef1373d40e4d4376c214dfaa5e4a45a1dd6a6a0106a59756da63c78791241555c08f24471707cff6fe63ed751d2acc6a6dd00b6ca7538073507e54f1","ssdeep":"96:v0dZm2etxGIWIA1srSVMS7frIDtjyMB0whWDxcxv:R2efGII6sr8j7focv","tlshash":"97d1734891969bdcf5b704a8e92e816cb06d5fa5cb5d0978f9bd38351e000d07e69bcc","first_seen":"2026-01-31T21:08:57.217994Z","last_seen":"2026-02-19T17:02:28.862354Z","times_seen":71,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/media/Roboto_Regular-s.p.0a2e2b47.ttf","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/media/Roboto_Regular-s.p.0a2e2b47.ttf HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"29144-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZRDThXJMjLgjIZbuoYXZRCsBFl3i%2FoejML%2F19JwOifD2FSWjQIn0hHaWCePKPR0DjPnP6JNubdHWFjjbqT2iyf1ZUFHD6PIjllJQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbbf645a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168260,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob","md5":"8a36205bd9b83e03af0591a004bc97f4","sha1":"56c5c0d38bde4c1f1549dda43db37b09c608aad3","sha256":"4e147ab64b9fdf6d89d01f6b8c3ca0b3cddc59d608a8e2218f9a2504b5c98e14","sha512":"e96b43b0ca3fd7775d75a702f44cd1b0dfd325e1db317f7cba84efdf572571fe7594068f9132a937251aab8bd1f68783213677d4953aca197195fbe5db1f90d7","ssdeep":"3072:5y2goL/sAQRuzzlPrvRwhRFUzMWlYfxJVBxV+aYT3qPXI0yH4yDuNOIOU7og2NE/:xOmCeu+bqPeHr0WUMxNE/","tlshash":"83f3d601d642aa19c6d6b2787c7cb3be4c75e82dfd4a602734e5af2115c8c05ec69bbc","first_seen":"2023-04-07T15:31:36Z","last_seen":"2026-05-03T12:57:44.411132Z","times_seen":6309,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/media/Inter_Medium-s.p.93090983.ttf","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/media/Inter_Medium-s.p.93090983.ttf HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:29 GMT\r\netag: W/\"6476c-19c15989c68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=diIk4JnJwi3QDR5m7XEqJiiMGo9Uoghn5VZfEszKVoR6%2FIkjag92keqyWfEqVEAfOeKWj8zggPchrCtxvpkt7E35xIkbTNgAK%2Bbs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbbf4d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":411500,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter MediumRegular4.000;git-a52131595;RSMS;Inter-Medium","md5":"a473e623af12065b4b9cb8db4068fb9c","sha1":"126d31d9fbb0d742763c266a1c2ace71b106e34a","sha256":"1bda81124d6ae26ed16a7201e2bd93766af5a3b14faf79eea14d191ebbd41146","sha512":"1fbc2841783140fe54f3ab1fa84e1ded2534bcec3549ade2f513491b32178df515bd63a0a4a2c35017a6850ff9c3a24f8602357d912acf8ca92b8d68ba846d3a","ssdeep":"6144:D0RV3jlWkDOh9oC2wuhsJWPziKSQlRiFy34YmkCD9oI0+msvMlwt5BO2x28YzWDQ:D9SxC2wuhDPziK2yIYmkCCIPmsHI8F8","tlshash":"48945a17e706db0ece562d34cbf587d033a9bc91781ad247b16a3a19ce931b40ad71e2","first_seen":"2024-07-29T21:54:32Z","last_seen":"2026-05-02T23:37:49.09594Z","times_seen":217,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/7844c00c7b87d4b8.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/7844c00c7b87d4b8.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"4471-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jNiyfoIUstH7pmzxNZMpSl%2FE6J4HjrddBTbDu8Od2HqSjryvdOT0wk7xaKZqAFJNnpT8sK7xF5afpwXDZh9DT4xDUtdzfmdPekU6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbcfc25a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17521,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17164)","md5":"f596bd85087ae8c7da24ce1771082c9e","sha1":"b7529d11179acbc5a77d79cf2cb3196e1dcc643c","sha256":"b8089e9f96c5d58bc21c3403009eb46a6d86ae550566419879b9615a439ba651","sha512":"fc9bf925cc24f25650d96a00d8acad75c7f110c1459c93473aa4e885f2347766465cdaf397133edf42f4c0fdbe22c42d36d0e352327382fa5a0be1efa1ad08b4","ssdeep":"384:Sjl699ZRlP6Xe9XEbp1k2PF/TG+IDCOa7f3flVC:Sjg99ZTP6Xm0bpfNbLI+Oy4","tlshash":"5a7229e02109793d909f118eb22a651d772d3a46e00f1838b27ddcfc12aded43197bea","first_seen":"2026-01-31T21:08:57.369086Z","last_seen":"2026-02-19T17:02:28.737399Z","times_seen":71,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/f481d12fa6115376.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/f481d12fa6115376.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"46ac-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GvvV4oOtHamKDRKI8eaMkv1%2F4ftxv%2Fkc7CfvECLihv2zsdEIkUAN3wlHq%2B9I1fRZWIqmbuEwR0jMQZQkswhhQsSj5wi6rjXbERDi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbd8005a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18092,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (17735)","md5":"c4e41c714da5a9df953f2bc887a8be30","sha1":"23b51314442a5d523c045f83e46a8cf27ac8b29b","sha256":"f14145c9cbd9eb49621d7bae4751666c8256d371c32bec3bec537995e913b579","sha512":"a42dc09d57cd64f5b8156cac5a68d4b1f2555eb2021d6fe69bc1b1994547cec0e952745f5ebfaaa6f316f3fb3dc05c8fc82999b496523dc791d4c47875c3af2a","ssdeep":"192:F4SCYqp/cVReSok7GCaTBoypywK89KkKlVqxs9VSi1zPLSGDQma7oZLrBBBZr+c3:F4SU9IReSmoy88vSMAzNNdH/Rx/","tlshash":"be821bb52b54f470e2fe81dec1270829673f3b1e210a5435f17f8ced3924a627256ba9","first_seen":"2026-01-11T01:55:53.525125Z","last_seen":"2026-02-19T17:02:28.607716Z","times_seen":73,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/1d8278968b92360e.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/1d8278968b92360e.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"7b35-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VQUyJPNFRuTJwWNaCpeJ4hz31GuOYzFYukWBYRVCuFvosnOvFraDf%2FnH4U2tSpw5WxKSOfF9hkyTQAiS6Nb2XD1CLUeOfNnPLbeB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dc18f15a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31541,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31184)","md5":"e5179e89d99baf52797f24105189d4bc","sha1":"d974bf4950afadea4a0076927f161eac3dfeb055","sha256":"86f986e1571bf5dda53da18ac84496726aeb00b3980533fd917380d68469a8b0","sha512":"81f677899b0eed324f5f70d95aeb73d92cdc1b0ef95693949b1c8d1fe7361a51c38cc1e114a27f6877dcb966419123e99441da1d18645337bc79facb0cccce6e","ssdeep":"768:qugNIiqWiEdR9uDFyXXyRYgx5RJK+wglNjzjaSGyXOu:q5IiqVts+wgTqSGyXOu","tlshash":"ede2da817411f87a89af92efa0e60462937d7709e0088624787f9e2c772d609b157f7b","first_seen":"2026-01-11T01:55:53.487198Z","last_seen":"2026-02-19T17:02:28.609324Z","times_seen":73,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/api/games/home?priority=none","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:28.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /api/games/home?priority=none HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-8f4b71f1cfa8a4a6-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"3410-JNmIeLScyJBkdyghxazxaB5xLR4\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IPEHW9C%2FaoNhK2kpuhdiOfEEhJMzxU4a1ll%2FB2dWr9JS6hvfPIMO37RLcVtJ4J2WDzjKyvVM8M61h2XIsdxjL9RjSbjDIURu%2BTVE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c7328e45c725a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13328,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f37feab11f2d0906ad163b94649f6c7b","sha1":"24d98878b49cc89064772821c5acf1681e712d1e","sha256":"35af18de983a7e1faa9d59f497369e71795f5bedcd3c9f563a62350805f00084","sha512":"b1a4fdf503906783f78faf9e8bdf94c4531ba69e9973a0a9d2966914ff5a0cde2d36f31092d4ec571ed2af109821876ca7d94206e2d205d34e1275015918d4d2","ssdeep":"192:Neof7taL3t5NEf8JmxEPv7a29G71GDu4AhiEIT8rj8:9azS710siCw","tlshash":"d652bfbac4954ca9435f6f0110c72d0ef4bd2e2331c81c69681aee3cd99ed97e60769b","first_seen":"2026-02-01T14:19:43.942168Z","last_seen":"2026-02-02T20:55:17.580137Z","times_seen":32,"resource_available":false,"data":null}},"time_used":1358,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1305,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/ingest/v1/web/start","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"POST /ingest/v1/web/start HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nContent-Type: application/json\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-95a0097496fd4175-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nContent-Length: 301\r\nOrigin: https://mycasin.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":301,"data":"{\"userUUID\":null,\"projectKey\":\"hXZI8YC5XRbnxJF59UBk\",\"revID\":\"\",\"trackerVersion\":\"17.1.0\",\"isSnippet\":false,\"timestamp\":1769966849368,\"doNotRecord\":false,\"bufferDiff\":1769966849368,\"userID\":null,\"deviceMemory\":0,\"jsHeapSizeLimit\":0,\"timezone\":\"UTC+00:00\",\"assistOnly\":false,\"width\":1280,\"height\":1024}"}},"response":{"raw":"HTTP/3 502 Bad Gateway\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6382\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c7328e89a895a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6382,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"aab5144409ccdb63d00f774a1341fac8","sha1":"585293e65a555c68e90c47414965e6c1288782e8","sha256":"01b8d2a6d6ac297016d3a1e800865d0c597c875a7a156fe2711fe14f5a5d48b5","sha512":"4a5bc1ff5f971a8990927d9c32f7198dc71c0cd62977e09c6c63dca2c361f7b27cdfbd590ae29ec4274b75d0dda48fd8f1fbc68f05998d3dad37981f36ca99d6","ssdeep":"96:1j9jwIjYj3DK/D9KUn7hG4Fh8/G4FQ5a424FA+skKmtmni97RLlKaQxP:1j9jhjYjzK/BrdeGT+VMn971lVeP","tlshash":"4cd14371b1f512b610a3c2a23695fb1a79e0c613cbef4494b7ddc2631f9ee85a903294","first_seen":"2026-02-01T17:28:01.031892Z","last_seen":"2026-02-01T17:28:01.031892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-hot-to-burn-multiplier.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-hot-to-burn-multiplier.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42614\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:01 GMT\r\netag: W/\"a676-19baced71e8\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NIEf73CyU17izdzfEep8LPudcwf5Qz%2B%2Bou91U6TURBISiNRgflyKEzHPnsmC%2F3ZpSY%2F2%2FY%2FBMFjkdVgb7yy%2BWe2G5%2FltDMV%2FByhe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f13dca5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42614,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"17c7a49ccfb628eabb4d15b972171fb9","sha1":"12ee12723eb1150a75eaa874be22b571bf0d4138","sha256":"4a623c7a5c89e06e61558687e12e0b61cb1f2b1570689dab4d5d5cf6ff787a16","sha512":"574918f94e0de11c53440eb97785cf20723544783c558fbdf778f99cbafca83ba92731fd8d2ee42b0bdd386ac0cced5ae18a939be6d27e0f328d4869a13a9161","ssdeep":"768:3gC6w83aLKTb9pyrLNPwLeW/01zCvkf0c/uj7R/2lu3qSvoqBtKIwH+d:3Bk3aLKTb9pyVPWBEzCvkf0cGReAaSvp","tlshash":"d913022376130e57e438869f25269d029080664e7e16c8b977cf5f2474ba8e7c51b8ea","first_seen":"2026-01-31T21:14:50.717363Z","last_seen":"2026-02-13T20:55:00.779536Z","times_seen":35,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/e3b0cf32d3668e3e.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/e3b0cf32d3668e3e.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"7ee3-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NusVa3GR%2FUvbMEXFKbTI693nd0jUH9IKS2zX1IOJ4wksuhAN3UTZ00LFIIWInlBbgegi02ir0VICPeXb8WIzpkj%2BYlz6wKKT5FvU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbdfe65a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32483,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32126)","md5":"4e5379c1bbfbb186f837f831921c4f13","sha1":"e3b42b23015fe4463332662702dcbdc12efd3256","sha256":"fc40324411b1ef5263ea87012729f52d443136ffc93caa8940b43297f86b0c25","sha512":"45334f3cda20eedb7c3304206c9ecda79b42979634544f7eb54ae9b6fc8ad133e9b0cbe0dcc15585f769e74d50e0bbd599f8a2b5fa43a1a3d844e250053185aa","ssdeep":"768:jouEv/zy1gk+eUNXbkX+4BNtr3kJMlDE3BkefskEJ5sa:cuqu1gk+eUVkX+W3wCDENfskEJH","tlshash":"bae2a5e63602ba73e3dd01da50b64459e37e255e2009402cf97d5cae3a78949c0ebb7b","first_seen":"2026-01-31T21:08:57.293702Z","last_seen":"2026-02-02T22:33:10.107202Z","times_seen":67,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/3465237cc8e84745.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/3465237cc8e84745.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"ba7-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L1Bdu7%2BTt9m6LFbF8JgpsF%2Ba3rHSVebr%2B6fqFPyfVevz9H08VIzVWSq%2FXe9Drn5S4nJHXRiRwb6vXyLEnZy%2FSJd8xpVgxdUQ0euv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dc08c45a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2983,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2626)","md5":"cc39cb431a244f75298698659afec399","sha1":"88501cb3d254828dc153ff1c2af7dfc69c4ce899","sha256":"38ea9a18386586235e62c34bd4ab179c7ce02c5adf8ee2508ce39d9be127dcc2","sha512":"120270598777cc4593a0da34f67359cdb620773654691dfc116e7613bc04e408c107c3bbfb50daeeb50e71239b5bc09e285b12d8b4164e909c328d734d6ef667","ssdeep":"","tlshash":"c5510f947251daecf52b00fce13e401e225c2ea1831e4a79f6bc7db41a104f46e89bce","first_seen":"2026-01-31T21:08:57.364366Z","last_seen":"2026-02-02T22:33:10.133647Z","times_seen":67,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/ph/static/web-vitals.js?v=1.318.1","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /ph/static/web-vitals.js?v=1.318.1 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849071%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\ncache-control: public, max-age=14400\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\ncf-cache-status: MISS\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849071%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\ndnt: 1\r\npragma: no-cache\r\nreferer: https://mycasin.icu/\r\nsec-fetch-dest: script\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 172.71.164.102\r\nx-forwarded-host: mycasin.icu\r\nx-forwarded-port: 3000\r\nx-middleware-rewrite: https://eu-assets.i.posthog.com/static/web-vitals.js?v=1.318.1\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Sun, 01 Feb 2026 15:28:18 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nx-envoy-upstream-service-time: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\netag: \"697f7112-19c7\"\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sdjovOE2I1Gg08naojAVcorN5S40p%2FRl6gnUjiD0BHnlMaIQEaWiLYhCAJHmfSVoG5H7jZl63fySleSVxecQeba05a7ANDJE05Qk\"}]}\r\ncf-ray: 9c7328e6cc7c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6599,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6559)","md5":"aa1e3521e57a40ad394b049fa7ff3bc5","sha1":"ec88012f680be684d8d430c5efd61fc29b658374","sha256":"b17014672e5f28d0dc0cad40ee4d09feb6a1201dadb3932b1f3073a8e4f387d6","sha512":"729c7ed37f0f321fd1c588aab554f289ff37fce9a3cb7dfa78cb8f47db8cbacb69eb0660ea2e245a540dca857f4cf277f67f53c7d789609006e56799ce3ad282","ssdeep":"96:tzI8C48z+TJzq4L88kTAFKb5rbCKHDuqqUtl0AcJ4c0jU4mzWuCD/ZDZkRlulDsd:VC4F4Sk8FKvae0f4TcWuEZDyCSXEdij","tlshash":"eed1d9f59f41e53921bae2b6d47a514333396386a409409ce23eefd0146d4c6739bb32","first_seen":"2026-01-29T18:42:31.973098Z","last_seen":"2026-04-29T06:18:08.504495Z","times_seen":3481,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/vip?_rsc=888x4","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /vip?_rsc=888x4 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-885d342c017498c3-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/vip\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/vip?_rsc=888x4\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nq9ch4X%2FACoJUi8Q1AEaCS481jvjarh9NWD5npSaNTsnfjgfLGnqGOdKpSBAjuUoAI4Qs7nSVp3j8Y3wz%2BJ8QwMnIaKL0odapI04\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328e859a65a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2449,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (940)","md5":"dcb24d852af6d1e8ed2186f7bb7c4794","sha1":"8279ee0d8e7fd821983bae16c1f7511d6dbca40e","sha256":"021e8337e22e64a1b073d0d1b7ea5741f5665d45f0e3fb8c01e64bf8100d7282","sha512":"8c6138431bf2915040d2a61143f8b826ce9430a261bf03cf93c7d7dd6f439475ff4a7b188e6d9234f3e254c1691cef4eddfe8e5520e61ea98a2b75511e7415cc","ssdeep":"","tlshash":"df519f0dc849adb498d9d59d61d9d7016588bf37f1b88cace04bdc64128f03d0beab87","first_seen":"2026-01-31T21:15:22.093337Z","last_seen":"2026-02-01T17:28:01.038098Z","times_seen":2,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/group/slots?_rsc=888x4","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /group/slots?_rsc=888x4 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-a239b95865bec6b4-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/group/slots\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/group/slots?_rsc=888x4\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jNX5sZDXboX%2F%2F1CWy%2B%2FwtjxyBz7qs82X7AtSIR5ii5S4WrjIJo3HQ4MFJvKb53eQqBbHBwmYTsN7UH9lAC7yHLwFebGiHSqS0xq%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328e92c885a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1065)","md5":"c30c534497cd287455823b0218507e13","sha1":"0bf7f1bc42869cff238e9d3ce9480cd335c788c9","sha256":"6b9b985afdb522783abfcdd0951598b0eeea419a211ae11279e6b888b3cea8f9","sha512":"7cc77b2fc06c3ed5787c20f8f53aa7771a8d3708af182d58662e88b449bbf75d6451cf905a637bec60335538d1e5cad1d82d6080a4bd9e9c9e765756bed2b1c4","ssdeep":"","tlshash":"4351900dc849adb498d9d59962d5d7012694af37f1b88cb8e44bdc64138f03d0beab87","first_seen":"2026-01-31T21:15:21.96661Z","last_seen":"2026-02-01T17:28:01.040125Z","times_seen":2,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/reviews?_rsc=5alw5","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /reviews?_rsc=5alw5 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/reviews\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-afe0536f14333c89-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/reviews\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/reviews?_rsc=5alw5\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JMJ80uQdbsrcNMhQXLN9jFfISjC6PnW3c8oqQsNePn%2FGFKr1YtdlnVOgJoDTB6sKkMkKrvXRrj0RT%2B8JsbeFvNFCvv3We4InJ3Oo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ed59ee5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"857a2864c3686f888291165016bd2018","sha1":"beb130245c6d9ce627714ca17ba3c25bb50a3077","sha256":"6c6f663b1a957ac786ac52eafb1c48d30aaf4bce253dc6fdea165826a56e7edb","sha512":"390753f8ed92fc876451b2311990d40d39dc8f9eee5a7d3985f5a29857ad00c2c827e4457bc0e7bd29a8403a95453b95e2330afca600957ed3e098dd8d71b8cc","ssdeep":"","tlshash":"37f027b3d50efd252d2dcc4c0e5e6323859c58779ab51af4a2dccd9c47d113a4b8a1c0","first_seen":"2026-01-31T21:08:57.193561Z","last_seen":"2026-02-01T19:38:23.401871Z","times_seen":36,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/plinko.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/plinko.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2356\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 01 Jan 2026 18:08:42 GMT\r\netag: W/\"934-19b7abf6410\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O35cL5hKbJQH9WPdr7ilGwKvpxmausmG9aCGXsj7Z9hHuJNedk6po5hN4xNSi9onuDd6KsO4DCi2ieoeT2aj5nCF7Bpe%2Fout%2BVK%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328eeeed15a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2356,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 208x257, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b7d9d76919e7318a5ab3820f0b2acf39","sha1":"799ca8a6f171111e9a5327dcd6164fa7f048750f","sha256":"293bc6e6d78141aeed6e9e5a9ab93672246c8242e29c205adaeb711cd3985011","sha512":"28d4db6fe84750a2b3544e1ebb9fbff3fbf485aad0e9a904463ed8bc9c424e40343a090814bd0743dcd25220c95bb87e49d053c1b6986ed60aec3def0a634450","ssdeep":"","tlshash":"c9415db53ea2cce67145276fa4abc9084cb09bc175c63807c2e87ae4825b6184ec584c","first_seen":"2026-01-11T01:55:53.452287Z","last_seen":"2026-02-19T17:02:28.805601Z","times_seen":73,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-sweet-bonanza-1000.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-sweet-bonanza-1000.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27108\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:05 GMT\r\netag: W/\"69e4-19baced8188\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zyWMFdQikCJothc4qVTOAYhlynIMcR7OMwfAtOmRbd%2FikQsdRBwQvRaPzCTNRyFCid6yCJkjjMnM1DEwvVrE6lCYEZT2hgE16ViK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ef1f555a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27108,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"365b5fb250b866d83580c3e6e68f7b1a","sha1":"d97f1593049b709297622346a2d88d1f0b5ab912","sha256":"a83d6af61d1352a4fbab1da1624afeb9a9d6e184775e3c30e9c3e63de2b2287f","sha512":"9b52f05fc3bbb1b8623d93714c359b42bdfc35e367b9322cb5070dbdcde7b970abf07d97481879c141c0940e894ec1a308051ae90b7514550d317600e9b890f2","ssdeep":"384:A+Imkb0cVr5dVs12T0V2N+SgMZ5NiAALbyQ+RjfxNQrUReRw1WssYL/qsaBs5j4i:2x3DTQ2NjxnHxNUkeREJsYL/qsap","tlshash":"30c2e08704e8176fe180f560a4157b796367c23c2ee1f56c44aa932b33694b50bca2fc","first_seen":"2026-01-31T21:14:50.684476Z","last_seen":"2026-02-13T20:55:00.830445Z","times_seen":36,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/70c45d6675f019b3.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/70c45d6675f019b3.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"7a59-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A69tdXEHNd9fKMG5v64iakFWkO%2FMZTOpRXKPdGz7owxFGbpqPCQVZRGCWsM49yR0YaLVWsRluch53Cr%2Bj5FrXfusUxtqkuKT8%2FI9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbcf955a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31321,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (30964)","md5":"109dedfa8a9df629754107a4360cbed2","sha1":"dca0b5125582597623dd7a5f137bb172eacebd4b","sha256":"66937c36d62b42f9c0de04ed3961be40fff3bca6a84a6e8675ccf6bcb7bcb244","sha512":"75917cbf7e84472836f0f36f0d6204002de0ef185d062a67a4160f39b8165bcdb07ed964ccf923f78e9a4bec22cbda7fd444445695eb1f68f809df6d0d9a2def","ssdeep":"384:I+FjjzUO4kzleEPQKKUdoxUCHSWiDp1NpTLTJJQrtgG40/H5JiereqeCEYjYvbxI:I8jkO4YlMsdpCzifNpTByEqrddwR4","tlshash":"96e294a971d5f4910ba354b5803f500bf23e0c76296da0f4e3a2cdf9b9a055ed132f9a","first_seen":"2026-01-11T01:55:53.490165Z","last_seen":"2026-02-19T17:02:28.781185Z","times_seen":96,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/8d97a31a2b7bb52b.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/8d97a31a2b7bb52b.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:30 GMT\r\netag: W/\"c2b2-19c1598a050\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XKqO11pfh7ZO5FktdJXtf49jfhIQT7ORkzMM4EqT5XEybl8FfwmIyTVJMbuG36UjHLLZA%2Bm9aiJD9tNaH2xukPCz%2FciPwThUn%2Fr%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbf8475a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49842,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (49485)","md5":"7a6782562784798052f56f3f546edd76","sha1":"5ca984010f470a582d3d61937aa02edd1f2895cc","sha256":"eff3ee36a789baceced46592cfdf60b6b5c83bf5d7031b9e7789b45ba2e99314","sha512":"cd75a77848a365e4580e7897c2c9f6ce89280556a892969406e4219da7dac8e1d56ddb9578ed3b04593af3ba8a141294203fcc2a3366261d661ede7ac6ee41f8","ssdeep":"768:0VfQIsNtn3lErrOfQHL099txV8zlutf8uTpfQlTWH228qz9x/:kQXxSrS9LV8s8u9QIl","tlshash":"6e237484b7a5b02947a25191045b544bf278f938a4cc18acf360e4f628baddad4fff74","first_seen":"2026-01-11T01:55:53.523305Z","last_seen":"2026-02-19T17:02:28.656397Z","times_seen":73,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/?_rsc=888x4","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /?_rsc=888x4 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-a2038be39590e11e-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design?_rsc=888x4\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5iMSKo0ubpYv%2Bc%2FyX3%2FYOj3cPTAB%2BYXSE74BZtqr8WpeNmJEdXSqsaDTBI06ozv%2Bz42u7VEGYTpEcy5i%2BbfroqZVC29ElKeOjon1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328e808995a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2331,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (822)","md5":"2c76222b1daabfbaf253b461b006d2df","sha1":"403da709b7cb0e452bd6531643de4c6ebb716fb5","sha256":"7996e99be0afd3a17bec81f7aad2dcd66e1b21cd7e16a5def674d3a3f3d51e74","sha512":"dfbb8eda09c124a38b635797a8b5cec7f099328c7ccaf9e04b1015e0f37eb0412741ad1182a09ae4a51c184c0000fe52c06af09e2618baf58c77105a9ebe021b","ssdeep":"","tlshash":"db41800dc949adb498c9d59961d9d70165887f37f1b88dace04bdca4428b03d0beab87","first_seen":"2026-01-31T21:15:21.887485Z","last_seen":"2026-02-01T17:28:00.832456Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/reviews?_rsc=1a10k","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /reviews?_rsc=1a10k HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design/!KGhvbWUp/reviews/__PAGE__\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-839ad70ea64b0c8e-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/reviews\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/reviews?_rsc=1a10k\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FMPsOriWhefpHVi5KVnYWu3zsOXFra6e31GMecDLpjy74j2QjPMSyg5OLNgJ2xUNEaj%2FYK3MU3YVvHSB%2BLFTVVjm8xwhH6%2FShSoU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328edab045a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6620,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1621)","md5":"84f6dc95a2216560335e97ab815b5dd7","sha1":"f9ce48fe5b018c8d74d5d9b165d6a2ee9faeda51","sha256":"c7f86a5a60fe302ea25468e497c9fd6bc16c11bd246014c6eb51e31c2dd90ef8","sha512":"9e1f3c2fa5580e84e629460610971259366fddbdf62be14facb3244ee3b59c2c1bce8afd09337cdd93e4458a0df49116d6533213cbb8fb1c47c7c27ee1cca6c9","ssdeep":"192:BnkJZV9snkJZV9xnkJZV9TpEB+UeJ1EfSv3:yhCTpEb2","tlshash":"5bd1a5abd81efc581c36cd5c6c1f977796c9c93389344cace7adeda802190232b991e1","first_seen":"2026-01-31T21:08:57.310876Z","last_seen":"2026-02-01T19:38:23.504886Z","times_seen":33,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-zeus-vs-hades-gods-of-war.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-zeus-vs-hades-gods-of-war.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 49074\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:46 GMT\r\netag: W/\"bfb2-19baced3750\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g58t9O1EaImWlEfANdLIs2HzMwPxxoksmUwdyH0B6Woa60%2BxLF0UPh1fc4bLwoyqopyMUXVf%2F6Rqx4YeTDCF9ejRzRdmBK15Ktnb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f15e1e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49074,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ff682e6a400c4bc05791fd54ef83d681","sha1":"8bb50e03f92e4510a8749650368f7444cf067a55","sha256":"f785bb4fee9a1aa1a7a2a33527b142d1d8013b2cc28382453512c4dd8e3fd040","sha512":"86fa8194b0dc72fd557beb652aaac87a16ea8e493742388c2f748e349fe639ab5699ea358bf31c1b442c4d6984c35ae83736d77a294c91cfa5c94c00fb175800","ssdeep":"768:cKnk4UQkSFRzzBcSDXOO/Id97/hisxvMg/AirfXiss76ZXF4DJc5py:cK35kQX5D+O2N/AEvM9UKss76ZXic5py","tlshash":"992302f7c1d4ce58c1744035a0e3e12b4548deea29505c1dfabe1fc84c528b6922ebee","first_seen":"2026-01-31T21:14:50.70563Z","last_seen":"2026-02-13T20:55:00.827393Z","times_seen":35,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/pragmatic-play-asgard.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/pragmatic-play-asgard.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 53298\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 11:59:48 GMT\r\netag: W/\"d032-19baced3f20\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XB2G36K0dcwdg0VM3LIpVoGd2EtUaybRfO0kmeX9nQk85dgwi%2BCJ2EPYXIv7zwNYPzxoAuf%2FNMFGX8ORl8jRi0wEwQOxSPkvAV22\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f2aa7d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53298,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c44c553c297cb686bed680f304bcc5b2","sha1":"09a28fa50c660c166fa7ef32961099e7ec9e6021","sha256":"568091c53b02cba265979ed6793e1f5a7866756495dfaf53465d9ab02856a831","sha512":"0820ecc97f5c37bfec4ff1d3f86e96cd94910ea8350f58fb9749a46c5ba073c5f4a20270c7acc47cd772b554ae1fdb6267445f539c3cd2e27f8d65c23554d59d","ssdeep":"1536:maEf3sOuNroCGb0OotvC1LS2A6anAQKsEZ:NEfNsrCb0OotvC9S2yNA","tlshash":"f23301349552f27def8c2037979e4371f5b8a63941238046d2a7b786cd6a8404f82edb","first_seen":"2026-02-01T17:28:01.047297Z","last_seen":"2026-02-02T01:31:24.151174Z","times_seen":2,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/be7248fa84c6d551.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/be7248fa84c6d551.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"9d3-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cvl%2FiIKYDpPoxnSd%2FJ17NLXrfHB1lVeRRGpyA1yIYbHVM8c43DZEpsvRRIn4nqD9%2BuGJLGvw2E%2FF2jVhFja41tuI3TN%2FHCd9DdT6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbcfb65a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2515,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2158)","md5":"598a7c75a166616da34d0720a50b9cf3","sha1":"35eccbe396ae1d530fb0174811f94c4a35dd1c10","sha256":"99be381c3d3f98808a540d62ec9cb7fe1797ff9e3588e5078a26d52374152fa7","sha512":"5ee7366a017183c0a2049c1735a9135a139e62ed6411726d18b9edce9ce57e7d27bf5fe1b8ce6f915773d1d20e0c0a9cfa9ee383dda62d3a65043daafe744328","ssdeep":"","tlshash":"5651a5413444b164353629a8a0bf000e766e1b75834cbe3296fd74fd262189cdb676ef","first_seen":"2026-01-31T21:08:57.246674Z","last_seen":"2026-04-28T01:10:54.169753Z","times_seen":182,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/b24b62029e7b77f0.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/b24b62029e7b77f0.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"620e-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wB%2B1cTVHhBIiPMRnM2pOP1uF129od%2FtVDFNEeYs9YUNmCcQDmtbP09MvaFtQafI%2BX1XGehC7eT%2Fgvbyz67kJb0ABfS3zIdb5Vp2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbdfd25a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25102,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24745)","md5":"a3efa1496fb3790aa32be064c1ea58b9","sha1":"12600f977dd39b4f9ec71acdf338a52e0dce12a7","sha256":"96c4e85350af7ca6c9e95dbea100a3ea00f644aece44c0076c936e4c9f8894a9","sha512":"18140f500096bcd594c1109049ab0168549583ab1c260eba910b89ecd8d0749f2c5b7d602ad66dd153f685eadb2361e5a279ea5ec0b8da170082037711971606","ssdeep":"384:wHGENcWB9YdI5vwpLFRXkdJfWn0MfzO4uE7gj+fjK1iTCMsJ9oWuniaoJQdmAmQA:D2veRnAvfMCJ9oWuniaoJQdmAmQvSeVa","tlshash":"f6b2e8bc32117411db8710a9c0ef4d06e12e25b6220e8465b2be9caf25b5ddd50bbb7f","first_seen":"2026-01-31T21:08:57.278665Z","last_seen":"2026-02-19T17:02:28.869737Z","times_seen":71,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/_next/static/chunks/82dd7d6267e09cb8.js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:27.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /_next/static/chunks/82dd7d6267e09cb8.js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 31 Jan 2026 19:47:31 GMT\r\netag: W/\"bdca-19c1598a438\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LF1XqNNwVHJppu6g8TaiUc5LpQHGfIqTOC4NW248JS0Veq0e018Qmb%2FuK8RqR2ufpHhyPfoxEM97vYmVWN7rSRQ5VjPdENPS4Xao\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328dbe8115a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48586,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48223)","md5":"f8c4246d22a1a06a7f417da630df5915","sha1":"9df9c9183bc1b5f82cd24ea69b7e25a5af00f7de","sha256":"853c2c482fcd17d31f8ed4788c289e260c3da301ce12fc9bf6ba190e61e512fe","sha512":"e5b56350b103b601538c2762ecb1a05102c648b66436ccf600010f6a699bbcce8ba8498a84c30a9f3cacd1637c21100d92e574d9d960c8e040936eee9261924c","ssdeep":"768:HT3NPN5/4OYWH7pyZpRATNxU2nwSre084SlFO1V+mtmlCg3v9aCjUeVhWqMDPSRn:z3NPN5/4OYQkz2To2nwSrex8jm3v9aCv","tlshash":"3023c660b14171762a4343e4442e03096f3e79b4678c546bb7ac9de71e62cca4a7ffb2","first_seen":"2026-01-31T21:08:57.230118Z","last_seen":"2026-02-19T17:02:28.742744Z","times_seen":71,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/?_rsc=1unbh","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /?_rsc=1unbh HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_index\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-9e6843a7f224698d-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design?_rsc=1unbh\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eBhkCjznTngRtqqhXgOor4k5UjPy1HEQs3WbENrmR612w2ubm0QXw0JlgBRjCGY5nz%2BRvo8SLsvgrKJvJCmVIdT%2F552TbFvruXkC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328eb7bcc5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3448,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2946)","md5":"83a291f0cd9e53800d3716e4a2666427","sha1":"b55c49cf134f24d61584f24713a4c174360bcc0a","sha256":"98413554772af70f7cecfce5f5c90125b5cf1cc27f61776681c4596ccccdb267","sha512":"76bfde39f701c4a64db51b649a0dcceed5634ff8120cd5f8a13bab91fc009dbeec34c4225588b35872d6f9e880dfcdc63861a94803773fda24b0c25acd0aa5a3","ssdeep":"","tlshash":"c661327e120aff6c6a2b054c545ec32a635d8a36f7768e76e2fd8d72034a0245b872c0","first_seen":"2026-01-31T21:08:57.201017Z","last_seen":"2026-02-01T19:38:23.405245Z","times_seen":36,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/?_rsc=1cg37","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /?_rsc=1cg37 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-8cc1ae3d3ec9b774-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design?_rsc=1cg37\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zbQUoetb%2BHNWPGaZBa4BBCEpJ1cvZ6CR9Fe2WBGpDHhvQJAl3UfSHkOnpvGlwm%2F2kqzbluxUgolLxgqMr7DFMXO1KFyPpaWbqYb%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ebed715a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3448,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2946)","md5":"83a291f0cd9e53800d3716e4a2666427","sha1":"b55c49cf134f24d61584f24713a4c174360bcc0a","sha256":"98413554772af70f7cecfce5f5c90125b5cf1cc27f61776681c4596ccccdb267","sha512":"76bfde39f701c4a64db51b649a0dcceed5634ff8120cd5f8a13bab91fc009dbeec34c4225588b35872d6f9e880dfcdc63861a94803773fda24b0c25acd0aa5a3","ssdeep":"","tlshash":"c661327e120aff6c6a2b054c545ec32a635d8a36f7768e76e2fd8d72034a0245b872c0","first_seen":"2026-01-31T21:08:57.201017Z","last_seen":"2026-02-01T19:38:23.405245Z","times_seen":36,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/?_rsc=p39xh","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /?_rsc=p39xh HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /!KHVzZXItc2lkZSk/$d$M/second-design\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-b6c61218b37dd049-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design?_rsc=p39xh\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z1bcxL7qZTFyPmDSdSJtQLYDoVQ6DH1mYgKUbepum12XDGyLdV9sMY%2BYkR7IqLpplKl80gqU3pvg82c3UUgV4qhrfNdbSlB4%2FLhb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328ec4e9c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79137,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (30881)","md5":"116b0c1be9f5aae510920620f941d0d6","sha1":"0c4b28893735423014b0e0b166d6c9f58c19497a","sha256":"41aeb27d4be34863db6ffd365ba9a1c06bfb17bc61d2857c01da23e0ec156891","sha512":"0c3acca567a08a3fb231511fcc1237481bfcc431f7707f7dbe5e6ee6efe8b77ef1ed868c0f08db8119a40d4ceb097f7a1ee8c1883016f0cd2c116d3687884714","ssdeep":"1536:qIbaSjKQqlrFsQatbmhAzKGlFROV5TXbV80my5:15qlrFsHbmKKGlFRg57bV80mc","tlshash":"43732c1bc80efc680d66de9c3c5f1b7796d9c87399304c9cea9eccac01595279baa1d0","first_seen":"2026-01-31T21:15:21.958698Z","last_seen":"2026-02-01T17:28:01.052233Z","times_seen":2,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/about-us?_rsc=bnag7","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /about-us?_rsc=bnag7 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-9e928c1bd8280435-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/about-us\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/about-us?_rsc=bnag7\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zry6Xw4y4zXtYMY2u%2BIIGMwucnzzKuJ1fF1TtmCJgtn3OrC1iPYJyBCsxMKVAckOha6ADeZZM3nLvTj%2FPKqBnOZZHajtFZGglLMN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f17ead5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1961,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1440)","md5":"37b0ffd9cb2d27e7a6a2c212d8bf3083","sha1":"24aca75d5e1c0753e588ce675c45ab982223c306","sha256":"30ba036a2dc940c8de5323e2f487f1c5e80fff031adadcbb5e71d758fec4160b","sha512":"bf3d200415ed7b9ee61a88a94de3f2c15340c0209c07cf9d85ff5c5889fc612b705315ceeb91cd573c0d6162814031d3b1feafce34130c59ad724ef805d17f42","ssdeep":"","tlshash":"2041237a890ced4d5a67c95d086fe31a550d1673c6701e6aebaccd0e1ac503e4f60e90","first_seen":"2026-01-31T21:15:21.902571Z","last_seen":"2026-02-01T17:28:00.893286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/second-design/ranks/bronze1.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /second-design/ranks/bronze1.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4618\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sat, 09 Nov 2024 04:16:46 GMT\r\netag: W/\"120a-1930f2383b0\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zkRk7sBOt%2FplX7ld8JWRBF4qSIjXaAyWdcAgCfVZiE%2FfbIJgvusVspZivhhY%2BkOhra48mQrowK%2B%2FixwdXwvqYETE6h%2Fj12CihkVF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f2aa735a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4618,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"37711ce0075cb6d2e33d9fa53d581193","sha1":"ddd492c746acac43247ae3f6e53e0bbf0e6036d9","sha256":"27826149f40ff6caf6ba30192fe08ff3849f92d7f7a65bb32f3d159c89680ea5","sha512":"f312756bb6fe212c0b9f9f42f0aee2f2660c5d17e2fb0d9395afbda3d13465849160fe8c5cb4e3f5f3862268dc8692a82115e82b5636184055dfa71c421f6032","ssdeep":"96:yrZBnH3hr9w51Tx6v49RdgzuWl5aSlcaRj9E3sxjIiD/OisK5:cnxRw1Tx6vEku253QcjIFHu","tlshash":"14917e9a1dbcee60a611ae879f200d3b4891851fc1384fb2bc56da69d709398d3d2344","first_seen":"2026-01-11T01:55:53.480446Z","last_seen":"2026-02-19T17:02:28.719612Z","times_seen":47,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/api/socket.io/?EIO=4\u0026transport=polling\u0026t=0k913k2m","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:28.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /api/socket.io/?EIO=4\u0026transport=polling\u0026t=0k913k2m HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: undefined\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-85b440d7e9bc397c-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:28 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e567wAAds8Syy9GU4hHn%2BR3VKmGsUzCOruixfpaxphMKeWuo6Fpn%2FmixE6jzU9FdC9ZqpJF0hjWRFCiRnHElbbef19ZMRg35XoOU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c7328e46c965a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"0478b5c36f538ff5bb21757acb085696","sha1":"e09104704e300a2fbb407ab3a16a2da2e04976a1","sha256":"ce991e7acac3175dd0b0fc70c17b709cdae2b1a1d70be2505d39a83beda63163","sha512":"b3411588663906205feda690143316a6dc305a425ddd5b5345684f20b28259da1298ed5aeebc1641703b53a56326c52471606d0962d3bc27fbed19e572e06153","ssdeep":"","tlshash":"5bb09bc4451d52c5ea20b7c471e79d0d1658785f99d9559d325444444556914202265b","first_seen":"2026-02-01T17:28:01.054945Z","last_seen":"2026-02-01T17:28:01.054945Z","times_seen":1,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/second-design/logo_blue.svg","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:29.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /second-design/logo_blue.svg HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966848742%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:29 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 23 Sep 2025 19:28:51 GMT\r\netag: W/\"556-199780cd538\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2FNpcb%2B8o5L9zabO2ARyUIq4GsZKzwDDIAotYybBLgf%2Ban859fN7Sb764E%2BBBYx3kyRM6EU%2F3Y42q6plwJJCAS700eRzctlzK7%2BS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328e69be55a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1366,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eb70d90349998f9fa492bc2a907fe894","sha1":"54823ba083d0332c2ac42162d1a4c6f47478050e","sha256":"00f69279206e53c192bdc9472d434b948a56123c7e5c2fce096432e54bd87f77","sha512":"c4c0009e1577c177a428fed81430f234d6f65c83f2b56934bfb8b6a1169f6488b06ff24e8a144e15fd427366ec65dee3694acc028ed433460ff5a6545ae24c68","ssdeep":"","tlshash":"1f210fb8b099d936d234d36cfb98d42591a082d7c4c58069b0c9fb2f98698c35f1e3f4","first_seen":"2025-06-29T20:05:39.730735Z","last_seen":"2026-02-19T17:02:28.733605Z","times_seen":79,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/privacy?_rsc=bnag7","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /privacy?_rsc=bnag7 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /mycasin.icu%26blue%26en/second-design\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-ab7db07267a807b1-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966849110%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-nextjs-rewritten-path: /mycasin.icu\u0026blue\u0026en/second-design/privacy\r\nx-middleware-rewrite: /mycasin.icu\u0026blue\u0026en/second-design/privacy?_rsc=bnag7\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=600, stale-while-revalidate=31535400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=24Y8TFX7ji0YvIKwe0w28HWw7WCHM320DVSLQAJEogs8ia1pnfZjGP%2Frxbt7aCzq2EEP3xoFnF5p0kVH9E8hDWjHZCMerBTMc9tV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328edebf95a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1961,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1440)","md5":"37b0ffd9cb2d27e7a6a2c212d8bf3083","sha1":"24aca75d5e1c0753e588ce675c45ab982223c306","sha256":"30ba036a2dc940c8de5323e2f487f1c5e80fff031adadcbb5e71d758fec4160b","sha512":"bf3d200415ed7b9ee61a88a94de3f2c15340c0209c07cf9d85ff5c5889fc612b705315ceeb91cd573c0d6162814031d3b1feafce34130c59ad724ef805d17f42","ssdeep":"","tlshash":"2041237a890ced4d5a67c95d086fe31a550d1673c6701e6aebaccd0e1ac503e4f60e90","first_seen":"2026-01-31T21:15:21.902571Z","last_seen":"2026-02-01T17:28:00.893286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/api/bets/lastWinsNew?filter=highWins\u0026limit=30","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /api/bets/lastWinsNew?filter=highWins\u0026limit=30 HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nContent-Type: application/json\r\nAuthorization: Bearer undefined\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-a353cdc61dc50479-0\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"1d73-gWLmwO0HhRK+8UsWbRHUq236DSg\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9J2iTnCiS3i9cblbZnCaPADD%2FL9%2B9Zd4brTNa2JWyU9dPHNypQoo8hnrn%2BzCy0ui8lPVV00rXw3ZQzbXyfgeY2ndOSHsDMUAfKhf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c7328efa9125a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7539,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"52018ca09be6e306c7829905288b0883","sha1":"8162e6c0ed078512bef14b166d11d4ab6dfa0d28","sha256":"9ee0980b513d8348fd8a764e2f03646860ecd0afff15249f9a9b27be649dba77","sha512":"5bb05cba00a34360a25077c92f25bc00b35427db59fe7d02cc5026b995feabe940a133a0cd31e3372021ed59723c99dfa9e546fbfd4f129c0c576ec11a6d0be5","ssdeep":"192:LILniI21T90Q/1+owPBHZ1KAN9AH9ol3vOcNbAt2wA9hbu8xA6N:tL1gGHk3f3xR","tlshash":"51f1d23a20f91ce8d0191dc6b1c33926a4dd651728c48da0866cdf3dd6f895ae907af7","first_seen":"2026-02-01T17:28:01.05754Z","last_seen":"2026-02-01T17:28:01.05754Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/games_new_webp/hacksaw-the-luxe.webp","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:30.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"GET /games_new_webp/hacksaw-the-luxe.webp HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mycasin.icu/\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27420\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Sun, 11 Jan 2026 12:00:01 GMT\r\netag: W/\"6b1c-19baced71e8\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xNmj%2BlIjyZvw0BUT8h7Vt37Ver1ANaQX0kA9WgKv8rnGkGBiVVm583Vc1Ymz5J3TyVnRUOJlGAw%2FImIjFWnZ%2B0K9acZ5qP1kps9M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c7328f2aa875a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27420,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 408x546, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9f68e6fcbf7149a0ac15e74db9eb0239","sha1":"7fe30acfe5e159111d075324237c8fe045c6cbcc","sha256":"21c72b1e801d6aa62f9083edf2e0b7afcfe08b9179bd4ea615d667be8d02b2c0","sha512":"e6ef2e8bdabb6f085521b243936ac97e71f6d79370c2cd1a8dc90a3d55bcd61c6777943bde20b1f24612296116f986a35e8234742e617bdcbb10efa1c85c71a4","ssdeep":"768:hfBBCwBYpByxSrGcgEN10B4d4HzXPpNCutXMjX:5/nxWhgE1i4d4HDpNCGcjX","tlshash":"29c2e16ac4a06f9eca63d9e727d801cc8700137d805996d3161b36266f5f60c937cbbe","first_seen":"2026-02-01T17:28:01.059447Z","last_seen":"2026-02-01T17:28:01.059447Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasin.icu/ph/i/v0/e/?ip=0\u0026_=1769966851729\u0026ver=1.318.1\u0026compression=gzip-js","fqdn":"mycasin.icu","domain":"mycasin.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mycasin.icu/","date":"2026-02-01T17:27:31.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasin.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 20:45:07 GMT","end":"Sun, 05 Apr 2026 21:42:16 GMT"},"fingerprint":{"sha1":"8D:26:A1:D5:D4:A9:23:9C:3F:83:61:49:17:65:FF:4B:81:24:4D:96","sha256":"D4:27:5D:35:E9:78:8A:FA:05:DB:FF:BA:19:70:56:51:81:3A:2C:A5:7F:AF:3D:7C:29:98:74:4B:88:A4:C3:AD"}}},"request":{"raw":"POST /ph/i/v0/e/?ip=0\u0026_=1769966851729\u0026ver=1.318.1\u0026compression=gzip-js HTTP/1.1\r\nHost: mycasin.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mycasin.icu/\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\ncontent-type: text/plain\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-bf536b7d58d7f6d2-0\r\nContent-Length: 1622\r\nOrigin: https://mycasin.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 01 Feb 2026 17:27:31 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vx%2FwlEGh9%2B6Ovx3QQtvf0nvhRLcbInoE83%2F0j7Jy5EHRXsVaqb%2BbQR09kUkPKE1D1rI3L3P7NHom0Y5k3Jp1AwVkrTkFndVZF5pY\"}]}\r\naccept: */*\r\naccept-language: en-US,en;q=0.5\r\nbaggage: sentry-environment=production,sentry-release=web%402.9.0,sentry-public_key=6d319d1014d598ea4a0365923853ee67,sentry-trace_id=78ce1db8428949fb941bd05c61f2a005,sentry-sampled=false,sentry-sample_rand=0.560370790626942,sentry-sample_rate=0.1\r\ncache-control: no-cache\r\ncdn-loop: cloudflare; loops=1\r\ncf-connecting-ip: 91.90.42.154\r\ncf-ipcountry: NO\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-visitor: {\"scheme\":\"https\"}\r\ncookie: ph_phc_TpHAAocKveEIHU2YeWxKfygDoEV7LC2bCq4mEaD7luN_posthog=%7B%22%24device_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22distinct_id%22%3A%22019c1a3e-cabf-7369-a81c-ec78122db31c%22%2C%22%24sesid%22%3A%5B1769966850368%2C%22019c1a3e-cafb-734f-99a0-ff13eead3f64%22%2C1769966848742%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fmycasin.icu%2F%22%7D%7D\r\ndnt: 1\r\norigin: https://mycasin.icu\r\npragma: no-cache\r\npriority: u=4,i=?0\r\nreferer: https://mycasin.icu/\r\nsec-fetch-dest: empty\r\nsec-fetch-mode: cors\r\nsec-fetch-site: same-origin\r\nsentry-trace: 78ce1db8428949fb941bd05c61f2a005-bf536b7d58d7f6d2-0\r\nuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nx-forwarded-for: 91.90.42.154, 172.64.209.75\r\nx-forwarded-host: mycasin.icu\r\nx-forwarded-port: 3000\r\nx-middleware-rewrite: https://eu.i.posthog.com/i/v0/e/?ip=0\u0026_=1769966851729\u0026ver=1.318.1\u0026compression=gzip-js\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://mycasin.icu\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 46\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c7328f769735a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-05-03T12:38:07.183703Z","times_seen":27352,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"mycasin.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}