{"report_id":"3d0291e8-2e11-4688-a4e5-3c217e38d378","version":6,"status":"done","tags":[],"date":"2026-04-28T16:22:49Z","url":{"schema":"http","addr":"mrxbet-casino1.com","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mrxbet-casino1.com/","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"title":"MrXbet Casino France – bonus jusqu'a 1000€ et 50 tours gratuits a l'inscription","dom":{"size":127166,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (53724)","md5":"7004b20c5dd35521befbdada4453c6c6","sha1":"99836fbc43a2b26bfededf8652317b4d530e438c","sha256":"c540fc29f7e1232a18c6a6f7903cfe3ea1653ac35ed507c92fd522774ef61ab7","sha512":"e39106c476486ae173179c9ba2f05b9d075b57da902407efd6951ee7b5d3b07f7bcbc6ff329fee1a46f6771ed02d7cd72c7dee86d5a5c5e8274b5f56c2b2f56a","ssdeep":"1536:47Q7yEdL0/ZJucdpP4OSuf/5+ix5elTBpkRtooCpDmhvLKwBkrd/v+scGWjkdn1X:47Q7yCA/ZD+2L+pDjRdG+z","tlshash":"e9c3ea21f5e4ed120157d096fd62e9bff7882434d36dd9a8acfb8969e3c70da0360198","dom_hash":"domhash01c41f88e7775d2bb9f4112fdafb33e0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mrxbet-casino1.com","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-02T16:22:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mrxbet-casino1.com","ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-04","domain_rank":0,"first_seen":"2026-04-28T16:22:51.506104Z","last_seen":"2026-04-28T16:22:51.506104Z","alert_count":40,"request_count":40,"received_data":1616781,"sent_data":19952,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/chunks/492-27fcff75637ccad1.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33a3b66aeadc3f947af1a3e6b40d8dc9","sha1":"571b79088328bec4ff380e3bdbda28ae5e49b676","sha256":"cedc3412d27395c225ff730e22f06a0a579dff72b81b4dcfd1e9cca6633dbd0e","sha512":"3313106d76774c6a8a8235284cddaeea6ba1e92a25d46cc3dfd438c92115bc818ee82004aca8bb2e952b1f1c4efc0b8ac19758cbe5a13d6e2f4f96d8d5f5cbf3","ssdeep":"1536:hwu9CI02UwAnwvb1gxTdIZHolguxq8fyBh9GpNjpCq30H/atJU71cuz:G3JJk09Icuz","tlshash":"bda308da7361b1b593eb12579269c141e3b608887409842cb1b88cdb697d99c13ffff8","size":98327,"data":"","first_seen":"2024-10-15T23:35:42.529902Z","last_seen":"2026-06-02T03:03:58.991334Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/chunks/927.a7dc7992c436ba78.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"169204fe2bcc42c380af5e1ac2be7fe3","sha1":"8a03ce5223655c895c434033b81080a819fd917b","sha256":"e77204d4fe82687b08d2c78d02e066935c1b0c697a95682b12decbf3776b528a","sha512":"d47937c3eca1582d992d537eaccc779735e73d5450fdacdb27f801abff617ee8dd60a5fbdbde063b15a402746facd53cf439b115e864099f1c7537b218b3aed3","ssdeep":"","tlshash":"905131059986fdf9f9ba0cc9925fd53e762eb40f990c8da8fa7488414c098843603be6","size":2571,"data":"","first_seen":"2026-01-03T15:12:30.935058Z","last_seen":"2026-06-02T03:03:58.989391Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/chunks/546.767fc6323cdbff4e.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dbc38029da6bf4e8577f4ea86070313","sha1":"ca82c27f54ccb29ac2c9bafc04c6daf8bb697fe4","sha256":"cf8e5651bbd6a6c3e0b4ead08245c2038a435f51aebfedbeda73c51e16f8ebb8","sha512":"d111610f37cdf70f5536f4072a26b0793c7c03d0255cc14ffa6a791132b186d7947a57b54f5359596d682538075e3fb42c2bee26aa8690b2b7fa14852f3798fc","ssdeep":"","tlshash":"e2410244f0d5ff60a7bfb0f8866b5466a22f294897980c92f3e2ec4d145028c63b36dd","size":2376,"data":"","first_seen":"2025-03-27T03:50:55.681244Z","last_seen":"2026-06-02T03:03:58.995982Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/chunks/webpack-dbd44ce0ce35069d.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c13927983dbcdbe8963124c96a0fb20","sha1":"4285576b488d74a9b004c61389b413b2c1102342","sha256":"50b4e790ea3d69501319654124d1c274dad4546699102409f575b60be808728e","sha512":"6ffb8798f1f1bd34ce2c4c05a9dc426f802b138213563b1e59f3c1283cb79af1096990317fac8cef6e85ec7265f962f67e03ef06388aefa4475bf24eaac1f88f","ssdeep":"96:6IAgDpEzqynRRg0EKjmvFqMug1kkNxNF9VTlVHO/jeE2UjKBOK6nRVG/OGfIfRY3:64Gzxnjg0EMOFLBkQNF9Xe7jKl6nRVG/","tlshash":"aac1c79e72a4f8b6174365a4593f9056f13e207b781ed0b0d70ad9b4bc349688533fe8","size":5968,"data":"","first_seen":"2026-04-28T16:22:54.825579Z","last_seen":"2026-04-28T16:37:28.383977Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/chunks/framework-10ae643bd7ba2303.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91eb10e0c5b60f80501425850b7ebf82","sha1":"8344750bc431fbb9e8a5170a82d08c7664639609","sha256":"4c185f58731fad68b5e3ef26e102ce9b3cb56aa8257d39aead25b675152a339b","sha512":"bae75fd66f5ebfd2cd4b3904defe212456502a8cc1ab092c8b58605c6bdeba1d9fc2fa0200ba9a6699df89af547ba3d51b8783dad8061210ad62f240b6ff18dc","ssdeep":"1536:2YjvmNg6kMuR40esfdznYBSq6vvnwGzQ2N0mIQa:Djv4hudzno6nwq5a","tlshash":"33d308e87996f6516ab311a700af2803733d2a1b280c4d60e215fd9e75b841bb17bfdd","size":141013,"data":"","first_seen":"2024-08-19T23:48:37.498483Z","last_seen":"2026-06-02T03:03:59.000906Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/DdC_o8jwipfMR_RPMXWm4/_ssgManifest.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-06-07T05:13:47.582035Z","times_seen":232243,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/DdC_o8jwipfMR_RPMXWm4/_buildManifest.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4aa5f37376da7c1c49fd4f1f9005d112","sha1":"40c032a3d85c7b5bf147428557a3aa708eb2cb7c","sha256":"2929617b2191d2a8ba3c7a885bea08da7900ae447e1223b24037cd561b7b3306","sha512":"499669562e9d5b2b5c2ad0533ce726ab16fc4483b61a84f7aa4b39efd71b952e6a56a61aa224480eaa942531f994ebc93bbb468cf1284b36eebf3fdd6918a5d9","ssdeep":"","tlshash":"92117d830509e61a2de8ed57373f1363af52d076b63c0ab6dbcc0dac15901634f6b421","size":1014,"data":"","first_seen":"2026-04-28T16:22:54.806547Z","last_seen":"2026-04-28T16:37:28.386892Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-07T05:11:32.485514Z","times_seen":362759,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/chunks/main-69b63e2e16716907.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88ac3c4d4d8044e62af740c79450b794","sha1":"204aee73c4d44e8b1ee68be86228e42488153b13","sha256":"174c4c9955f35a80888ee630b848e2122b15bf6b47baa1c2d3529e924c79bbb9","sha512":"b079ff7c1455a3fe79f8481578928b8d8fa37701e8b15c9d704a393f97564dd9edd1073e69461673a79313c3a0c9fecfd72c9322bb1324b144a8949ce3ddc1ba","ssdeep":"1536:MpLDGYjwpNLTvpKp0Q78ILsDQs7G5j8SCmaoaYCOU:1pqCQ7fLsDQs74VEOU","tlshash":"15a3f9b676d1f8a213cb41d4883b1006f2761d7e642f6045b3eadcd6b96098e90f2f79","size":98298,"data":"","first_seen":"2024-10-15T23:35:42.506487Z","last_seen":"2026-06-02T03:03:59.004649Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/chunks/966-2601235ce9ca419d.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3916183d5387e7871a478a2753108c78","sha1":"d6c20ccfb0ab889c2783026c0faba3360097942f","sha256":"5e1379964fee60bce05cde87c8c634a2600371fa60bba4aad38e1ad9b2737bcd","sha512":"d8900dcd34a78a6964c4deb4f6b17e6af8d6120e7081a62a7575c5238d6c1ce129df74a73a69c24b534e4e770ab7e9cb0655a3871da3ea81f188ab9231632edc","ssdeep":"192:vbZDMNJAQDemeCjuUZXXmwEy4HxpEkduQh:v9ba/5z4kkduQh","tlshash":"95f1c6b27782f90623c5d4a4c17ab01fb5ac9c2b5d0b50f8b569cdeea9e015460a0f75","size":8192,"data":"","first_seen":"2025-03-27T03:50:55.682304Z","last_seen":"2026-06-02T03:03:59.001644Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/chunks/pages/index-67c545f8362cb3f5.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"045dc07f95969c2df33cd4a214e83717","sha1":"b89af6510652f59367921b09cf4a68bebdb27dcf","sha256":"9d8c30be80230957002ab1fdbc8babe834fdefd49204879c1e609a5491fa05aa","sha512":"76205eb0e13934fa7b15710243ed9e6da746e20ff36b77dbed304ce80c27d6c9bb9ee005c6be3125aec1b75b9ebde613fe9d54dafae5eea366e872085eb026f7","ssdeep":"","tlshash":"18011298b493be086b2750f8462f310e63be795e153e49a0b25284c83af231d1a91fcd","size":828,"data":"","first_seen":"2026-01-21T17:57:31.276517Z","last_seen":"2026-06-02T03:03:59.017415Z","times_seen":251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/chunks/59-1542ee2effd1dc30.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c635bee1a621ed91e76f30f7713da1a","sha1":"8b13e3a9ac9c601edcf58a7dedbf5c11bfa58833","sha256":"90031f145b5253e20f464fac25b17a0cfea78a925a8a229a869ed2760f58b6a2","sha512":"6a03ac14ef42397237b723270fe17a69d81a01f8b16a221890eb9f95e456f7ada231e0f03e06fc9c94f7310b050724f88c5c7cdc841306e1b188dc3275008b5c","ssdeep":"192:hzBOuoWGy+Jbicm0ZykfVlNUoN+30nnWR6/eo7tuTRmnpcGXrAPYPKF9:hzBOOum49p782pcQrgB","tlshash":"6862b46e45860cae9ebd98e4c427520cd7ec6606b154bca0e7a68413b5d7ecc61b33cf","size":14798,"data":"","first_seen":"2026-04-28T16:22:54.838997Z","last_seen":"2026-04-28T16:37:28.386378Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/chunks/pages/_app-c7dc205c3f879bac.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3bd52f9d280e38d9ec39a25309da8d23","sha1":"22f7d2bf433523556e8a3e04354ee97a0cf768c4","sha256":"e9e842cf5747a0f01bba7b66d80b0c23335494b6ae5bdf7b9a80568fda6a8625","sha512":"ce1dc683510a9b99f1b21e0b6e5a26586c42b068898d43a94555b87298ecf38c62a8bf7ea4146d724779332235e61688a76cd06c2d4177568a22c30bb14837ad","ssdeep":"3072:ii1PkPUKsWkG64HtlYw0kn5DU+djxlozNm8ad6/QQX+uhuxOEowsB489M4cJkcxN:iiCcKsRGn3dCadhQ7wuNJiRs1+HZ","tlshash":"eea4f7d97282b062839760b6847f010af33e6a98240d802cf6add4db7f7564d9277f79","size":487960,"data":"","first_seen":"2026-04-28T16:22:54.827814Z","last_seen":"2026-04-28T16:37:28.381185Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Ffire_bird_39a6dcb76b.webp\u0026w=1920\u0026q=75","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Ffire_bird_39a6dcb76b.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30734\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: 4qMH7f-nzC-jtF1MPW7L95ycHtx9rr+8Yp6ZS0TcmFI=\r\ncontent-disposition: inline; filename=\"fire_bird_39a6dcb76b.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=itQWmOjXxJCJW%2Fw6Q10Cw3s%2BnWMEANhv8Wh3b6WU221pLpfbzPFgRVSiGdxOc57YeScKA%2BDrqCn5maiX%2Fy9QRZNzviy%2FSseMQ2EjZ0GCMJwyePS2PzPPGAcxrMcBvKJLVFj8xGs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3767ed2a2223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":30734,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 499x666, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9a06a41c1a543ebac932088c58f6c30c","sha1":"9979d2f9d1faa4655231bb001129585d96f06a95","sha256":"e2a307edffe7cc2fe3b45d4c3d6ecbf79c9c1edc7daebfbc629e994b44dc9852","sha512":"4f32426df6829d0cd30bc0972dfb76193147c68b653eb2fe95f0fdfd2536ab80e4a3853707da140ed1d1c2d53768d7d4deab4a214e73b4005da97491ddb15a04","ssdeep":"768:8L0+BEscxdNFnXQv3kHEMTB9TLdLrE7sZJscDx:Q0kbcxjF0+bTBtdfEoZmcDx","tlshash":"97d2f1ac1163d3418212e5483c51b478cce3279bed9714d7a8099244b6b798aacfb2bd","first_seen":"2026-04-28T16:22:54.799696Z","last_seen":"2026-04-28T16:37:28.382487Z","times_seen":2,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T16:22:27.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Next.js\r\ncache-control: public, s-maxage=10, stale-while-revalidate=59\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jGpki2QmFqXA2kP0cjxXvdlp%2BY2Bf%2BkTOLh%2Fcy4OTwYAmeMDUAdXpzWuS8OIxmPkt9Oud8rUt9zpjr2IhsCHJKlXzyWZaWVL25VnNKmcQJ9DQfoD%2Fokqs9SOdQdfLdIbLGjyYck%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f3767e79f32b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]}],"data":{"size":120013,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (62219)","md5":"6c2f9ed99a345ccd0e8c92167aaf4210","sha1":"ab8507a34c0abf68b5c6a05c8249d0d4912dcd20","sha256":"ce4b4526737cc8eb0e139e297b050bbdc6a1a50dcfaf17b45716d0488326c331","sha512":"2f48c0c0467d1e82502b397946471fc08b17dc80f3e3c35f66b26d8e8ea150da6c2d832a425cf18168e6db2464c6614c4e44de2ac9b85f5f6dfc0434240f0f68","ssdeep":"1536:GuaRJgbZVuEdt5OWKub/O5x5elTBpkRtooCpDmhvLKwBkrd/v+scGWjkdn1swHY:Gu66bZTmuS+pDjRdG+6","tlshash":"09c3d821e8e0ed120157d197fd62e87ff7841434d3add9a8acfb8969e3c74da02a419c","first_seen":"2026-04-28T16:22:54.802118Z","last_seen":"2026-04-28T16:22:54.802118Z","times_seen":1,"resource_available":true,"data":null}},"time_used":396,"timings":{"blocked":24,"dns":1,"connect":1,"send":0,"wait":348,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/css/425cb6e228741817.css","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/static/css/425cb6e228741817.css HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:48:53 GMT\r\netag: W/\"eee-19cb9f78b30\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m38qES3jGjwH1eLoRzeoRybK0kYFe6p1h3bv3AMLYBX7EOlLj4eSl2dX2h%2BdXIWZRpZQMZSiuZsS3%2FG9EzI7DLzPHtgNXotLRd%2Bs44uIlpFxMBgMTSG69gIdG8E7nmWV7VF%2F0bA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3767eb49a823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3822,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3822), with no line terminators","md5":"18552a6e17838c46016a53e9762873c7","sha1":"3dd15aa95b79296b2894bfbd8fe4a53911f694d4","sha256":"66ecf375917e5eebcf9959e90773c31eff8f779803c5493fc5dd3760600542fc","sha512":"e1e0f9e0f622a0abca95b0eea21d599f23df0abf4d7e40bc5a85c69696ff5c6c97db03271d826ad105410cec045c6f279b66ce0ab29b9b5f4e29065d0265c9f8","ssdeep":"","tlshash":"a371f03a4fd0d438f4eb606f6ba2946d4b18c442ea275bdcff12d82bd1cb3d60562589","first_seen":"2025-04-29T14:40:21.773905Z","last_seen":"2026-06-02T03:03:59.010214Z","times_seen":175,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/chunks/546.767fc6323cdbff4e.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/static/chunks/546.767fc6323cdbff4e.js HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:48:53 GMT\r\netag: W/\"948-19cb9f78b30\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6o0g0WrX8qwU7zLMMvXy59Hzd1S7O2Kq%2B1AiL9iqHIR6RO1ivPa72vzPp5CQn2TZkiPm1mGxSPumcPvkHaxdQrW8%2FPE03EIMXE7scpFrroc7m2cE%2FBnifR8JpilNowi3hj4BdOs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3767eb59ac23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2376,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2376), with no line terminators","md5":"3dbc38029da6bf4e8577f4ea86070313","sha1":"ca82c27f54ccb29ac2c9bafc04c6daf8bb697fe4","sha256":"cf8e5651bbd6a6c3e0b4ead08245c2038a435f51aebfedbeda73c51e16f8ebb8","sha512":"d111610f37cdf70f5536f4072a26b0793c7c03d0255cc14ffa6a791132b186d7947a57b54f5359596d682538075e3fb42c2bee26aa8690b2b7fa14852f3798fc","ssdeep":"","tlshash":"e2410244f0d5ff60a7bfb0f8866b5466a22f294897980c92f3e2ec4d145028c63b36dd","first_seen":"2025-03-27T03:50:55.681244Z","last_seen":"2026-06-02T03:03:58.995982Z","times_seen":268,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/DdC_o8jwipfMR_RPMXWm4/_buildManifest.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/static/DdC_o8jwipfMR_RPMXWm4/_buildManifest.js HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 04 Mar 2026 17:48:53 GMT\r\netag: W/\"3f6-19cb9f78b2c\"\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZTkFoO89EhVvO%2B6i3iBoZYHopADpvSzG6VOyuptqs7QN9vzdMXwL05KvW3tr4AKFBXVH1BHvY0L8y7zle1o0JPR998gHtWkIWqGL7ef%2BCS%2FufPIiSem6id73TBp%2FREJ0TEWHyLw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3767eb69b923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1014,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1014), with no line terminators","md5":"4aa5f37376da7c1c49fd4f1f9005d112","sha1":"40c032a3d85c7b5bf147428557a3aa708eb2cb7c","sha256":"2929617b2191d2a8ba3c7a885bea08da7900ae447e1223b24037cd561b7b3306","sha512":"499669562e9d5b2b5c2ad0533ce726ab16fc4483b61a84f7aa4b39efd71b952e6a56a61aa224480eaa942531f994ebc93bbb468cf1284b36eebf3fdd6918a5d9","ssdeep":"","tlshash":"92117d830509e61a2de8ed57373f1363af52d076b63c0ab6dbcc0dac15901634f6b421","first_seen":"2026-04-28T16:22:54.806547Z","last_seen":"2026-04-28T16:37:28.386892Z","times_seen":2,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:48:53 GMT\r\netag: W/\"89fc-19cb9f78b2c\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0uJcVY%2BuLkd%2F5See45Hk9e0oM6jzyflI%2BBDTcgdNOu8GwXjfRo0Y4Vz4t761%2BTCwsaiVgMpWcQZq8fRPJmw%2FG1oSBmImsdU0nt0u1fPSt19iPYSHzd1V7ajnmBThoNDBs5bhLRY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3767ecca0b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-06-07T00:21:57.731919Z","times_seen":1779,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Fsoftswiss_Lucky_Dama_Muerta_b2c63f6fa9.png\u0026w=1920\u0026q=75","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Fsoftswiss_Lucky_Dama_Muerta_b2c63f6fa9.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30852\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: hRj2QR1zy82mJwKSBTgBjI-BRAv-cEKborTVEp9NDuo=\r\ncontent-disposition: inline; filename=\"softswiss_Lucky_Dama_Muerta_b2c63f6fa9.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lSXIA9UXPA%2F19%2F2P3FjTVi62i6KnpAjFEKCCGql9GgY6wzAus9Fd9sOIdbikjcstsQUeQ0lfvJTuJnBR7BVXuk9fqmzOKhUUXbAcuOIwDe6Eu8SnjkjBxg0QaNlMrycknIJ2R2o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3767ed3a2923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":30852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c120dc49625e377c78fb0ddbc94c7968","sha1":"86111549bf5cbe47ca253f09307b3fe0cf7152b1","sha256":"8518f6411d73cbcda62702920538018c8fc1440bff70429ba2b4d5129f4d0eea","sha512":"a6c767679113f05b533f8d92d271e9b3817c123c3fcb07cbf8810773cdb5d8da21dbbaab4c7fedd2192ceba699ee24ed61f955a2eba97bfb513abf7f08607576","ssdeep":"384:1nbwJXafXoA2+zUXgY4E3aU7fx4VctE1CHXNSpv6YBFR3E3Vbsww1gjb1yksHELp:1nbyqwzg+gHy77ucth9gvj1Eli2jY5I","tlshash":"8bd202a6d24e354b23ae6c86345f2716d3557df4e4624c6f004ace2dfe7d2691a9303c","first_seen":"2024-08-19T20:10:03.125147Z","last_seen":"2026-05-27T00:20:53.026542Z","times_seen":90,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/css/b8b51d0b3a6f4866.css","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/static/css/b8b51d0b3a6f4866.css HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:48:53 GMT\r\netag: W/\"1759-19cb9f78b2c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ws9qo3SkyBAsHCo%2Fia%2FLs10sjb%2FDyGZvRK0ykTf4exoUo%2BSAQ3YRs3b3NiYvEdgpgYiigKFS11%2BpDM0ogoqIOoYWz5phaDp4T3we7hUJ0ZEh5Hf9L6p%2Fbsp09qA889mavX2vCT4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3767eb49a723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5977,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5977), with no line terminators","md5":"ec84f0a7a2055c970d4f253ab08f0c70","sha1":"c5d3245c2d4085779d873705881d9d7330eeaa06","sha256":"6a0b091cfe2a46fb254fc84ca7036ea34c6c542f83fcaf2fda6b54a828c13fd2","sha512":"195afb216b85d37b9d702a5263bd852f66982769652e1ae73285a60c57ff5aa1a34d949a08723746d58fe3e576aa599e0a493ce98fdb7b767ebe32b94f968ec1","ssdeep":"96:PB5mSJ+MbpDAKneQYX6Jl/0hSvRneZ0jVMR9wfX+9Ecl86djPfUQjSf902G:3mUJbiKneaXshScZXRj1zyCj","tlshash":"4fc1e5b30712ed25d6b26d6744a0ee8ccee4a103de33d5b8f841953ccbd96680270ed8","first_seen":"2025-04-29T14:40:21.754106Z","last_seen":"2026-06-02T03:03:58.987189Z","times_seen":264,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/chunks/main-69b63e2e16716907.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/static/chunks/main-69b63e2e16716907.js HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:48:53 GMT\r\netag: W/\"17ffa-19cb9f78b2c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=48tvjlhKsx9HhqeheqEI4DyC53cgl3mSPO82nK87RLEUyztC8Bdt76HBQHzWKuKxXiywi8sdXfcsvQSm%2Bxz8KrpxnkSkeAAXIEiO1xXoZtE41tBeJKWCTm5JfrDeuWiPo3ia%2FsI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3767eb59b023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98298,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"88ac3c4d4d8044e62af740c79450b794","sha1":"204aee73c4d44e8b1ee68be86228e42488153b13","sha256":"174c4c9955f35a80888ee630b848e2122b15bf6b47baa1c2d3529e924c79bbb9","sha512":"b079ff7c1455a3fe79f8481578928b8d8fa37701e8b15c9d704a393f97564dd9edd1073e69461673a79313c3a0c9fecfd72c9322bb1324b144a8949ce3ddc1ba","ssdeep":"1536:MpLDGYjwpNLTvpKp0Q78ILsDQs7G5j8SCmaoaYCOU:1pqCQ7fLsDQs74VEOU","tlshash":"15a3f9b676d1f8a213cb41d4883b1006f2761d7e642f6045b3eadcd6b96098e90f2f79","first_seen":"2024-10-15T23:35:42.506487Z","last_seen":"2026-06-02T03:03:59.004649Z","times_seen":271,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/css/dd79dc2c5a9a9197.css","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/static/css/dd79dc2c5a9a9197.css HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:48:53 GMT\r\netag: W/\"a112-19cb9f78b2c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VMaB4hY8lgjAc7FOY7IQcCiK8%2BSgmADGjaRgw%2FO1zbtAi32vNmRwUSRDbrGwBUCNLMhPCw4a2DK9RcPUXwadvvjGaks3stp8sSH7J8XLCfm%2FIZDxMomlVkfdeO8ixEzGxaW7IoI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3767eb49a423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41234,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (26798)","md5":"93e37c199f0ae59faefffcafacc5f00c","sha1":"a18665363dc58467e599d2bd59c1d63443bf8902","sha256":"d91a05b2ad13ad076307787468b87cd94e7dec4beefa460fb9b6c1e13473ccb5","sha512":"22f1cce98b2a8190e8fe8a83f883915899f1eeed64ebc5006757b2e0bcdba68ac5ef53f2f69439648c2dd3a9d58d0cce4585b5e5b79516718e9e2e3d73959d28","ssdeep":"384:gi4OZg6oxkmT0Ew2zXf0MrREq/XisHZ7aVWMMqLswaDGvi1vPTnx6G8S3yvVQW78:f4OZwQ2x8jeDqeTnwVA","tlshash":"4003c921e619702dd8fbcc6732ca7f1766184402f5950d69fa1b866ccecb9271b93bc8","first_seen":"2026-01-03T15:12:30.994041Z","last_seen":"2026-06-02T03:03:59.004085Z","times_seen":256,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Fbelatra_Big_Wild_Buffalo_88e93f38de.png\u0026w=1920\u0026q=75","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Fbelatra_Big_Wild_Buffalo_88e93f38de.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23336\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: um5JvSs61wtREZ4fYJeuVZFG49yLHdJQfQxj69WSHS4=\r\ncontent-disposition: inline; filename=\"belatra_Big_Wild_Buffalo_88e93f38de.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qIRgSbNK8P1r6ukNuFVsM9getYd%2FxH95idsUd96TT%2FqW1VzWy%2F1IbBoUZL91w3VcYdhwBIqKLjVNdsd8zB1A5%2FInODYN9jjksQTFj1GLia5X6xII7S04JbIa7hGP55nbI3QR1WQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3767ed2a2523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23336,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4cf03c14ea2e0929c09871fd8edbe0b5","sha1":"e82a4fbb214910e3e83460521fe777c78615e4cb","sha256":"ba6e49bd2b3ad70b51119e1f6097ae559146e3dc8b1dd2507d0c63ebd5921d2e","sha512":"762421c57ea1e1ad84e18332aed52b64549ce88901e182708e13493e73c9c0933a749050e804d5232e00e5c5ecb0a0eb3d5a18b81b45b2b3f0434d4424685ad2","ssdeep":"384:QeW+eh5s3NTd5h9UXKgqcglgf3S3aC2QX0qhtx+I7zOFCKZ2FISWKbNndmdQ8aEH:Q5s3NTbU6Vcglgf3S3/XdXx+InPRISF4","tlshash":"d7a2e0d641f39996a6057069a88d56fad2838e10ccc4bd179984a8f31c5fe338a74fc6","first_seen":"2024-08-19T20:10:03.092554Z","last_seen":"2026-05-27T00:20:53.016151Z","times_seen":92,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/css/b8b51d0b3a6f4866.css","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:29.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/static/css/b8b51d0b3a6f4866.css HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mrxbet-casino1.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:29 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:48:53 GMT\r\netag: W/\"1759-19cb9f78b2c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VL06ymILuxGndE0K3daEVP8YVdtQiopcPkPZYSIEFf1Egnc9MOctAABeCU8pM2I263Eb1fY%2FXpmmxwKgIvwyjIsSMGy0RCEs%2BDIhF8Q1kuHrbEe1tAqpfXlEdS9crZz6%2Ff0IRes%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3767efdaa323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5977,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5977), with no line terminators","md5":"ec84f0a7a2055c970d4f253ab08f0c70","sha1":"c5d3245c2d4085779d873705881d9d7330eeaa06","sha256":"6a0b091cfe2a46fb254fc84ca7036ea34c6c542f83fcaf2fda6b54a828c13fd2","sha512":"195afb216b85d37b9d702a5263bd852f66982769652e1ae73285a60c57ff5aa1a34d949a08723746d58fe3e576aa599e0a493ce98fdb7b767ebe32b94f968ec1","ssdeep":"96:PB5mSJ+MbpDAKneQYX6Jl/0hSvRneZ0jVMR9wfX+9Ecl86djPfUQjSf902G:3mUJbiKneaXshScZXRj1zyCj","tlshash":"4fc1e5b30712ed25d6b26d6744a0ee8ccee4a103de33d5b8f841953ccbd96680270ed8","first_seen":"2025-04-29T14:40:21.754106Z","last_seen":"2026-06-02T03:03:58.987189Z","times_seen":264,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/media/c1b11e140b58cf5a-s.p.woff2","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/static/media/c1b11e140b58cf5a-s.p.woff2 HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mrxbet-casino1.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15108\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:48:53 GMT\r\netag: W/\"3b04-19cb9f78b2c\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cqtC2EYibxbWpCp6LWQNjmiLtzMdYIl3l9Dboit%2B0jJvh5iYadrNjxhvPhlSFI1d917hPqIcwBB1tuz%2BFf8zBsEMdU6G52mASGxJ8Dtv7egLu8eJgyWXU0Vyv07%2Bzx1mHNZzm%2BI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f3767eb49a023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15108, version 1.0","md5":"368f3e99ee207a4a2e2584eba7d3c82f","sha1":"9f907e41605807c4bf4f960745698b1e430a716b","sha256":"963fc62d2cf3e59e6f338db71b85b5ea86dd009fff859116d51a31a9b98d1d30","sha512":"2eb180c4cba21fa77eb89d801d6e55fd10acebe3a25e99228e3ca5861447a393aa60420a21f3cd573cedf5107dd391b5e5e1fcf5e09e799f2cbe7a6826eda2b2","ssdeep":"384:VHJTAkiZnTfVU4LSYdh7Db82J2Werb7VVX0m1+cz7aNw:VpTA9xTfVOA5o0erb7YmcGaNw","tlshash":"c562e16e92dc05534d2bd6f84eebd8cc7bd0f8548133af233905a62a854b810f218be1","first_seen":"2025-06-16T02:04:53.862041Z","last_seen":"2026-06-06T05:47:14.560815Z","times_seen":356,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/chunks/pages/index-67c545f8362cb3f5.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/static/chunks/pages/index-67c545f8362cb3f5.js HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 04 Mar 2026 17:48:53 GMT\r\netag: W/\"33c-19cb9f78b2c\"\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BEKVS%2BEifL1J2IpP8whPHlg8CS6RIz%2F1%2Fk6RIyxqgVew7vwnIFyw3iowfHSewKTeYPX72aQ81drp6CHzkU3gXT4DAoyrJFe9l6qd1bN2iPSDE0ep29JTCRsljm%2BWGDIsHVlJhoY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3767eb69b723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":828,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (828), with no line terminators","md5":"045dc07f95969c2df33cd4a214e83717","sha1":"b89af6510652f59367921b09cf4a68bebdb27dcf","sha256":"9d8c30be80230957002ab1fdbc8babe834fdefd49204879c1e609a5491fa05aa","sha512":"76205eb0e13934fa7b15710243ed9e6da746e20ff36b77dbed304ce80c27d6c9bb9ee005c6be3125aec1b75b9ebde613fe9d54dafae5eea366e872085eb026f7","ssdeep":"","tlshash":"18011298b493be086b2750f8462f310e63be795e153e49a0b25284c83af231d1a91fcd","first_seen":"2026-01-21T17:57:31.276517Z","last_seen":"2026-06-02T03:03:59.017415Z","times_seen":251,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Fcircus_delight_17e96af086.webp\u0026w=1920\u0026q=75","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Fcircus_delight_17e96af086.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35660\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: MqbF72B4yrEohs9SVIRJNjTUvPuL69+34b2JJGkT4Pk=\r\ncontent-disposition: inline; filename=\"circus_delight_17e96af086.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ex1GyfhQ%2BAdsg%2FvQaw8RHL4Ru96rRh2ixuCH5A39dvX11JDK6Tt2YUT4j3baeRUwx3eSlHDNXkIW8G69c6kfWxOaW8qqjkdOrw9zYTVBC8rx60Vo94Dtq%2BPmarINxJrKwPuaZ3I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3767ed2a2323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":35660,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x667, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a00aeee720af2ac68a3a985fe76ded35","sha1":"bd3062c09391f92f19579c60ab255e0f890620f6","sha256":"32a6c5ef6078cab12886cf525484493634d4bcfb8bebdfb7e1bd89246913e0f9","sha512":"f2f94a2fb2c1d67689cadffba7c95a945c405fb454b647ac512cacd95950c67f6d73fcb38f0dcfdc07affd1133f4f57037249e1e0f961db1d7c4596caaddedf6","ssdeep":"768:A9y0scFFFXbdzkyqiLARmzeXWspbFnBYkOHLJaY4:JIBzuikRmglph6L4N","tlshash":"dcf2f103d62d949f46edcd37e3449689f68d7b6812b6883c5e8383c9b6171c7c979c22","first_seen":"2026-04-28T16:22:54.815277Z","last_seen":"2026-04-28T16:37:28.384904Z","times_seen":2,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/media/9f0283fb0a17d415-s.p.woff2","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/static/media/9f0283fb0a17d415-s.p.woff2 HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mrxbet-casino1.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 21336\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:48:53 GMT\r\netag: W/\"5358-19cb9f78b2c\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=udhU94%2FvD%2FBsMYB4Kq5XHBCJMfg8t63hxcKejeTA0WA3YdPCvDRux4KPlqV9qFmwDH6y7Q55qkOu7eUqVANaJALEt5oCtaBWr2QGxgEmO79H9CrPdrB%2FY5J%2FuNR0Pp0e6arCJ5s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f3767eb49a223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":21336,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21336, version 1.0","md5":"0e35c6fd40c2ab9ef2d5b97baeca2f2d","sha1":"781b1852315aad9bcf111a3017ca734ab6dcd6b9","sha256":"07a6f958db51de42694ef87e2c01b9cf5ee415047b2fd17ab1c313c772a6804e","sha512":"7f76da76841e131252106ff1d70e22908753364d612e9b807d9332f89b13c759b1b9d05ac5983055b48bf99b441a2a07301db2c93fbb79323e492c238df1d7a9","ssdeep":"384:h9WnIiwq4BeuEc4AZTT4ZWgC9UCzpulxbC9WzQFvCY98IW1NoTXVY23sC6:LWIix4BayT0ZMUQpulJCuQF6IW1NgP3O","tlshash":"4ba2e1080f4b3a18eda72c8972acb57498741c208f8ee2770cd42859365e652fe3fe57","first_seen":"2025-10-20T15:26:06.98799Z","last_seen":"2026-06-04T14:06:59.774258Z","times_seen":269,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/chunks/927.a7dc7992c436ba78.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/static/chunks/927.a7dc7992c436ba78.js HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:48:53 GMT\r\netag: W/\"a0b-19cb9f78b30\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B8aD6qoJB4grL5zHDcWARLkIlvEHVqSkhX%2BvNMbViFPpr1tSMrlM2vrc1%2FXq2aqC7%2FeH5mYhJpG%2BG63y3g2qs04BryBEfq%2FpHXjOGcEbcWO%2F%2BGe7rczFygdkC7SeWvCOpKhCzKc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3767eb59ab23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2571,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2571), with no line terminators","md5":"169204fe2bcc42c380af5e1ac2be7fe3","sha1":"8a03ce5223655c895c434033b81080a819fd917b","sha256":"e77204d4fe82687b08d2c78d02e066935c1b0c697a95682b12decbf3776b528a","sha512":"d47937c3eca1582d992d537eaccc779735e73d5450fdacdb27f801abff617ee8dd60a5fbdbde063b15a402746facd53cf439b115e864099f1c7537b218b3aed3","ssdeep":"","tlshash":"905131059986fdf9f9ba0cc9925fd53e762eb40f990c8da8fa7488414c098843603be6","first_seen":"2026-01-03T15:12:30.935058Z","last_seen":"2026-06-02T03:03:58.989391Z","times_seen":183,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/chunks/966-2601235ce9ca419d.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/static/chunks/966-2601235ce9ca419d.js HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:48:53 GMT\r\netag: W/\"2000-19cb9f78b30\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SoECrMVjDXw6b3rPw6rdz7XMd7cNJZ7Nj%2B9cjM9RNjcRZ3yxVIJ4L4Fcf3jxIUcbM06OF6YdTJwq%2Fr2DaazRRECoCCUZUVel2jrqarSQ4VOaJEmMXRK%2B%2BOu5kofUy51EGvCbvWY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3767eb59b623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8192,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8192), with no line terminators","md5":"3916183d5387e7871a478a2753108c78","sha1":"d6c20ccfb0ab889c2783026c0faba3360097942f","sha256":"5e1379964fee60bce05cde87c8c634a2600371fa60bba4aad38e1ad9b2737bcd","sha512":"d8900dcd34a78a6964c4deb4f6b17e6af8d6120e7081a62a7575c5238d6c1ce129df74a73a69c24b534e4e770ab7e9cb0655a3871da3ea81f188ab9231632edc","ssdeep":"192:vbZDMNJAQDemeCjuUZXXmwEy4HxpEkduQh:v9ba/5z4kkduQh","tlshash":"95f1c6b27782f90623c5d4a4c17ab01fb5ac9c2b5d0b50f8b569cdeea9e015460a0f75","first_seen":"2025-03-27T03:50:55.682304Z","last_seen":"2026-06-02T03:03:59.001644Z","times_seen":269,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Fblender_blitz_883ce2076f.webp\u0026w=1920\u0026q=75","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Fblender_blitz_883ce2076f.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24208\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: fyuBQIPSfCkhwXLhBm-nooLrJGdybXBYgw8Bl6cFzyw=\r\ncontent-disposition: inline; filename=\"blender_blitz_883ce2076f.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2FwbBnlRz4Ohq%2ByWwfOIGNhpu2LcD%2BYL3j2UYUxV7ArNthz6%2F%2B%2B893yui5H3H%2Fk1yvoBUdJIaddnEqiq2sv%2FId%2FOrQSP8qLp%2BFQn1dKTGO0XtlUUxkli3iWbprbrcy7IhMzv16Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3767ed2a2423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24208,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 499x666, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9fead2ba9824400a195fed0ec57c886e","sha1":"1951d5103ffa34cba83ae38ac0ce4edfa4c5e58e","sha256":"7f2b814083d27c2921c172e1066fe7a282eb2467726d7058830f0197a705cf2c","sha512":"9ff63cffba4ec6bd8075dca8c1f7390f6a8a0582b88f450c1a7fffebc4fb14dabb7f198ebe804da859c58b32b4827de4e700fe5816f4bbb256402dd00ec8ba45","ssdeep":"384:J3BwQqMUSwlxVBvuSqu/lJqCPJVCf4qXC3vFdXMMiiW0vYqkbWyOUM8d/:JuQqMePFj/lJzEgqXaddcfiW0vYqzsMC","tlshash":"f1b2e1cff156349ac9106a44e800761bb82a67b51325fa27dff697c0a2c742621c4ff1","first_seen":"2026-04-28T16:22:54.819575Z","last_seen":"2026-04-28T16:37:28.379003Z","times_seen":2,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Fmega_lucky_diamonds_94332bcd3b.webp\u0026w=1920\u0026q=75","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Fmega_lucky_diamonds_94332bcd3b.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34144\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: uG5tNqCcnFnRn5BCxTkmPuHPvLjdedhXV-XhEA5aUGQ=\r\ncontent-disposition: inline; filename=\"mega_lucky_diamonds_94332bcd3b.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BJcJ0d%2FWKlW7vlx%2BIM4iwhhaCjiv7lHAbm%2FEzALZ%2Bw6d2JogSBrap%2FgcVh3%2BntWJTzR69kNOiUKiVCs6p47WftE6jvLzbfNui6VNUcK2KLLkJ8OTOSM9r4hc5yK%2FrBwt1KwYQAY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3767ed1a1f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34144,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 499x666, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ffc11d79b87b0db8fa53d2698d424276","sha1":"44ee53019af8d2c0ee3b33c8045ba9aad9d87fd9","sha256":"b86e6d36a09c9c59d19f9042c539263ee1cfbcb8dd79d85757f5e1100e5a5064","sha512":"91fa39c4b47d2f8c9e93621633f4711f50b95865c6ec60b17625238c5a22a0efac86c8bd623170ed2af10fbd823127200670e6e8199cd32aef69bdb8a8084b3c","ssdeep":"768:X1U5jS99D0Pu8tPqBo1MuHBS1xLZ7iM+HDgJxY4otvYEhmb1Jv:X1kj+QPu8tyBo16x5iFjBfYEev","tlshash":"63e2f18cbf87048bcad595b119c26d345fa3bddf42a81bd4842484f6650b075e2facfa","first_seen":"2026-04-28T16:22:54.821761Z","last_seen":"2026-04-28T16:37:28.369253Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Ffortune_ox_3a7e3ce149.webp\u0026w=1920\u0026q=75","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Ffortune_ox_3a7e3ce149.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 49808\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: cua-ARDJ-7qjsotOtPd26M0f1JqWzff6Hf3faM1gCZ4=\r\ncontent-disposition: inline; filename=\"fortune_ox_3a7e3ce149.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VofMVQfz3SUFNWLtGzL9aG5GV9I481G3g0Wxxa4jQ%2BM8F3%2F%2FZWWS400jRKYESh5TmfIYuk0mUNDnCh4CnvFxGDTMLjYkVJpxsZUKDW1S5a8KjG0rVBOtjUlZnWR4VwDsY5W%2FOik%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3767ed2a2123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":49808,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x667, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5a7a2fbb8b5bd4b978b7e87356e3c83b","sha1":"d751db2f6f11a153d58a66472bc50512e943a816","sha256":"72e6bf0110c9ffbaa3b28b4eb4f776e8cd1fd49a96cdf7fa1dfddf68cd60099e","sha512":"7f15c74d305c5882e5d28311bcf9e9e10c85a050a7a8da08f912df193813ad746eb6b85da851e63af475733baf8122f1c4d91cc32690bcd1cc11a0f806d81b30","ssdeep":"1536:Rkkcd5pYvbiBxjyNKd+3OHI2dPfM7qKgRpxVxZ8:ukcdvY2NQ3OHI2dOqKgxu","tlshash":"76230190ba7554b9b1e846c881a766e4dde931f1a4b9d689131a2e37c0e3f44c3ce08f","first_seen":"2026-04-28T16:22:54.823822Z","last_seen":"2026-04-28T16:37:28.376997Z","times_seen":2,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/chunks/webpack-dbd44ce0ce35069d.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/static/chunks/webpack-dbd44ce0ce35069d.js HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:48:53 GMT\r\netag: W/\"1750-19cb9f78b2c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BDDByxPAaQztvSCjkEudHSaE3noTCLoZi2HyPbetUp5Ptig5lvFF%2BZnAPj403xw%2FEwHc3Hw%2Fx%2BvfRA1mNhdOEdOZCDZ%2Bdi48gBb6aUUk8LBqpLkT%2F3sa0VtgY9cVWFobZlymU2E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3767eb59ad23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5968,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5968), with no line terminators","md5":"5c13927983dbcdbe8963124c96a0fb20","sha1":"4285576b488d74a9b004c61389b413b2c1102342","sha256":"50b4e790ea3d69501319654124d1c274dad4546699102409f575b60be808728e","sha512":"6ffb8798f1f1bd34ce2c4c05a9dc426f802b138213563b1e59f3c1283cb79af1096990317fac8cef6e85ec7265f962f67e03ef06388aefa4475bf24eaac1f88f","ssdeep":"96:6IAgDpEzqynRRg0EKjmvFqMug1kkNxNF9VTlVHO/jeE2UjKBOK6nRVG/OGfIfRY3:64Gzxnjg0EMOFLBkQNF9Xe7jKl6nRVG/","tlshash":"aac1c79e72a4f8b6174365a4593f9056f13e207b781ed0b0d70ad9b4bc349688533fe8","first_seen":"2026-04-28T16:22:54.825579Z","last_seen":"2026-04-28T16:37:28.383977Z","times_seen":2,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/chunks/framework-10ae643bd7ba2303.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/static/chunks/framework-10ae643bd7ba2303.js HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:48:53 GMT\r\netag: W/\"226d5-19cb9f78b30\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JREEETzYSVxRGUEDyMzNqbeClRjpcuQX2Qik%2Fsfy3jJr1XA61N7Qh2RNC9yocV83BprN6jWmWO6KGNv5isjmo1qA3yryqp4usvUaXLq6MgE65CEOcy%2Bzc7%2B7sILsuK6wdaV0OWo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3767eb59ae23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141013,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65202)","md5":"91eb10e0c5b60f80501425850b7ebf82","sha1":"8344750bc431fbb9e8a5170a82d08c7664639609","sha256":"4c185f58731fad68b5e3ef26e102ce9b3cb56aa8257d39aead25b675152a339b","sha512":"bae75fd66f5ebfd2cd4b3904defe212456502a8cc1ab092c8b58605c6bdeba1d9fc2fa0200ba9a6699df89af547ba3d51b8783dad8061210ad62f240b6ff18dc","ssdeep":"1536:2YjvmNg6kMuR40esfdznYBSq6vvnwGzQ2N0mIQa:Djv4hudzno6nwq5a","tlshash":"33d308e87996f6516ab311a700af2803733d2a1b280c4d60e215fd9e75b841bb17bfdd","first_seen":"2024-08-19T23:48:37.498483Z","last_seen":"2026-06-02T03:03:59.000906Z","times_seen":287,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/chunks/pages/_app-c7dc205c3f879bac.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-c7dc205c3f879bac.js HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:48:53 GMT\r\netag: W/\"77218-19cb9f78b2c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B4knhuTUes4k73bXbMuGaSpTyc0c8pHf5%2FaE7VU0ATiGxkcIUIyTGoCRWOfcaFyrwKz1ALcfwl9JiP2WFcnVuy%2FFA1XodQGDveVuu6icbssao8WdnIYlgnhDWbCnArorZXIr6PA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3767eb59b123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":487960,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64562)","md5":"3bd52f9d280e38d9ec39a25309da8d23","sha1":"22f7d2bf433523556e8a3e04354ee97a0cf768c4","sha256":"e9e842cf5747a0f01bba7b66d80b0c23335494b6ae5bdf7b9a80568fda6a8625","sha512":"ce1dc683510a9b99f1b21e0b6e5a26586c42b068898d43a94555b87298ecf38c62a8bf7ea4146d724779332235e61688a76cd06c2d4177568a22c30bb14837ad","ssdeep":"3072:ii1PkPUKsWkG64HtlYw0kn5DU+djxlozNm8ad6/QQX+uhuxOEowsB489M4cJkcxN:iiCcKsRGn3dCadhQ7wuNJiRs1+HZ","tlshash":"eea4f7d97282b062839760b6847f010af33e6a98240d802cf6add4db7f7564d9277f79","first_seen":"2026-04-28T16:22:54.827814Z","last_seen":"2026-04-28T16:37:28.381185Z","times_seen":2,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/DdC_o8jwipfMR_RPMXWm4/_ssgManifest.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/static/DdC_o8jwipfMR_RPMXWm4/_ssgManifest.js HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 04 Mar 2026 17:48:53 GMT\r\netag: W/\"4d-19cb9f78b2c\"\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3kJx9wjkxD%2FPlPimrtvqxKY%2FWDcmVjNp8z1jneSkQ0G73PxFvI1djwqz%2FyBWhb8PXOcU7gSYVSm9u%2BRs4XqZL8rnc%2B0hZqA199nO8sRbYKwjmgO12i5r6u%2Fkn4Mc2T4yfWxI4RI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3767eb69bb23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-06-07T05:13:47.582035Z","times_seen":232243,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Fsoftswiss_Dig_Dig_Digger_e775d7f45b.png\u0026w=1920\u0026q=75","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Fsoftswiss_Dig_Dig_Digger_e775d7f45b.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26962\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: AzSFO1WUx2-1VIIgfxOwWyI90fx8TGb3o4bJatAWqNM=\r\ncontent-disposition: inline; filename=\"softswiss_Dig_Dig_Digger_e775d7f45b.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mSdoDxoHmifzDjJHIiIMGfMP%2BgMvEdB335JKL01VMTlCG8A3GSokGUiBkSlKAShBre7UhnjIpveFT%2BqTv56FXQyrrokrfKjn5AMxxWLmjoX88%2FR9%2BJwZG1yaqrQBom1btOySapQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3767ed2a2623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":26962,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b7f1024608ca6e96df2fd83dc6ceb2ba","sha1":"43bf1e14d076bec914f5bdf95d10dd1d1fb80538","sha256":"0334853b5594c76ff55482207f13b05b223dd1fc7c4c66f7a386c96ad016a8d3","sha512":"392de0371c69d790394b15cbe6bf1abdd3e1652107256547cf341ac78dad216068cfb11ae5e03d697ee99d4fec454ffe79ff13782838aff067b3c0cc7f1aa062","ssdeep":"768:wvBOc9f8BWKrVGs4XerHFP691vwUfCwHrioqXdypEx9iqVfE:w/9frKrws4XerlIvpCwHkNt9igfE","tlshash":"37c2f1217e92890ca77dd0bbed9374a87cf0466c466270378c03829977ddaaecb1d64d","first_seen":"2024-08-19T20:10:03.123447Z","last_seen":"2026-05-27T00:20:53.035608Z","times_seen":91,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/api/report-error","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"POST /api/report-error HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mrxbet-casino1.com/\r\nContent-Type: application/json\r\nContent-Length: 85\r\nOrigin: https://mrxbet-casino1.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":85,"data":"{\"text\":\"https://courage-dream.top/m4r2mz?aff=max-chi\",\"domain\":\"mrxbet-casino1.com\"}"}},"response":{"raw":"HTTP/3 403 Forbidden\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding, Accept-Encoding\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eS8%2FnrPTmYRMp7u%2B5IAPB09%2FA23wlsuGKCPUOwpRLxy5%2B3MOxTSPBePQudVq4PLLxu7MU2c2xpUQYUYekXT4d%2FMo2bj%2Bg%2BHzmZtAaGC0NM7hAvcnkgWrwPtHaOQfT0t5Ao1Od%2Bk%3D\"}]}\r\ncf-ray: 9f3767ee9a7a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"9fe3cb2b7313dc79bb477bc8fde184a7","sha1":"4d7b3cb41e90618358d0ee066c45c76227a13747","sha256":"32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864","sha512":"c54ad4f5292784e50b4830a8210b0d4d4ee08b803f4975c9859e637d483b3af38cb0436ac501dea0c73867b1a2c41b39ef2c27dc3fb20f3f27519b719ea743db","ssdeep":"","tlshash":"2cc08c26351e2c0c96a322b402c36a50d092c3304c5a19004600420371c31168ac3315","first_seen":"2023-04-05T07:27:09Z","last_seen":"2026-06-07T04:26:49.347409Z","times_seen":95920,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Thu, 30 Apr 2026 16:22:28 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FgK8d4gIgRyWZwDRCxovaMBlwJQPbAOnMSZAKKc7y2ks2jXHcK7sXcchqdgQbSNs2tOy2BA%2B26Jpzfc%2BrfTAiy0eK%2BxjXthdTRy12UbeZIIzV2S0eBiJpVlGXRKwi9BeTSbcH0I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncf-ray: 9f3767eb69bd23eb-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-07T05:11:32.485514Z","times_seen":362759,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/css/352d5236847d301d.css","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/static/css/352d5236847d301d.css HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:48:53 GMT\r\netag: W/\"644-19cb9f78b30\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K7dulbuvGp051wlJAodi3p0lX6aaDozCQ07ozSUpVMh%2Bd9tFGxnl4XCRrD24scExPIwstkBX5nSZwvTd%2BABjpftKN1SMOeBBUPH7t5Xkg8pTk3SwneoesAyU4SyTRRuEi2wWVBU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3767eb49a923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1604,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1604), with no line terminators","md5":"d861c7ab0c20ce2a7a153e0a29f1f60a","sha1":"fc6bd3dab3f134d21c58832d9de3f830d62f1ec9","sha256":"4ded20bf9809d391e7e962e1395b3522283ca30f52fe7a86155d1d5b4b3789d5","sha512":"0f8ba9f03c97e33b8a6a9c2cda9bb1a130f8e2b72e70254c382de16ba63d39be6516245f7e740cb52a947fb85c32939217c29b9d982f330bed19c438322db91f","ssdeep":"","tlshash":"0a31bf1195c2af35f9bba4a95fe0367f7816584887fa0ddac2d5f35582ce0d2831c54c","first_seen":"2025-03-27T03:50:55.637284Z","last_seen":"2026-06-02T03:03:58.995344Z","times_seen":268,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/chunks/492-27fcff75637ccad1.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/static/chunks/492-27fcff75637ccad1.js HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:48:53 GMT\r\netag: W/\"18017-19cb9f78b30\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EOZfGzxWTM8wBPkiX5iY2hldtORd%2F%2BhmlDE4qOtYV4ymttl7dVwYsmffbkIAIrLIPoBjeMQwS3%2FdcJHv%2FXe2xMaWx6%2FeLup%2FJJG8tHwX7TKg6W1Y%2BHXwm1OQBUjt%2BvfimKMeCeQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3767eb59b223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":98327,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"33a3b66aeadc3f947af1a3e6b40d8dc9","sha1":"571b79088328bec4ff380e3bdbda28ae5e49b676","sha256":"cedc3412d27395c225ff730e22f06a0a579dff72b81b4dcfd1e9cca6633dbd0e","sha512":"3313106d76774c6a8a8235284cddaeea6ba1e92a25d46cc3dfd438c92115bc818ee82004aca8bb2e952b1f1c4efc0b8ac19758cbe5a13d6e2f4f96d8d5f5cbf3","ssdeep":"1536:hwu9CI02UwAnwvb1gxTdIZHolguxq8fyBh9GpNjpCq30H/atJU71cuz:G3JJk09Icuz","tlshash":"bda308da7361b1b593eb12579269c141e3b608887409842cb1b88cdb697d99c13ffff8","first_seen":"2024-10-15T23:35:42.529902Z","last_seen":"2026-06-02T03:03:58.991334Z","times_seen":271,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Fimgonline_com_ua_Resize_gu457_Sm_Snb_XJ_486888764c.png\u0026w=128\u0026q=75","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Fimgonline_com_ua_Resize_gu457_Sm_Snb_XJ_486888764c.png\u0026w=128\u0026q=75 HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2128\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: AIhan1q6ht928QW5SsNjEgo-ekn8L0QNGS-Fzn5yClc=\r\ncontent-disposition: inline; filename=\"imgonline_com_ua_Resize_gu457_Sm_Snb_XJ_486888764c.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=im5op6EG62AF6U97cDZL7iv0eRYxNtGNWKdqhnXVYq82X6YvRE%2Bkef7XK3H9WIuW3TGYhcl4FrmSPf1Pn9WK78tzOKPGNwNAe7JlK32dLarguw%2FNpQTpSpebz0OEICgR%2BBskRq0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3767ed1a1d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2128,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"13871a5926ef69ba74c624ea6093db85","sha1":"f65cc5a6a227903fdf0ad2895a5bb14312c51838","sha256":"00885a9f5aba86df76f105b94ac363120a3f7a49fc2f440d192fc5ce7e720a57","sha512":"67014e616c733d3741cfa49c67fc9eb419970a9368a1b2e7eef080c3b438e6899903a0ceef1d525cecd9d6c8184480918ae298cbee5a2f0af6da691ace57ccc4","ssdeep":"","tlshash":"ba413a92bda91d971042ba60a668f3ab2cd7056b42468406e3277e9f43f02b27d72156","first_seen":"2026-04-28T16:22:54.835569Z","last_seen":"2026-04-28T16:37:28.388545Z","times_seen":2,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/uploads/favicon_V2_12_730f521a42.png","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /uploads/favicon_V2_12_730f521a42.png HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 388\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 07:53:30 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b9SxpYyUDLR70s68KO8%2BYMzMe3ssAHgTp%2Ba1dt4aYJCE9%2Bo1kMwWV2jmSs2XT7dWQOAKxis47f6bQH%2B2ggi8W%2Bb5Aru8gz9iaVb%2FgOSah1cInmuUXR2WEfXT4zVoNCX4hBauLpU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9f3767eeea8723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":388,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"f6e292bc1fd4f4985269f1483f35e5c6","sha1":"4e5065c4325eb48261c75a8082c540d5c991784b","sha256":"2b55150eb9d87fa5bceb81944a39ece2b0ef84425593cd2a9054b35296c9ed4d","sha512":"fca2460b3b3e10b008df78e065a670133be43e025a26aa4d8a8dd9a71cc7e7ad652679843e1807b0a2f2130acbb9298d57c8f0d74577839f15ee23660b7bc8b1","ssdeep":"","tlshash":"9ce0614ec209f0d5dc0d547522f58192edaf150c4c57974504fb14152f76906f69d6aa","first_seen":"2026-04-28T16:22:54.837355Z","last_seen":"2026-04-28T16:37:28.379567Z","times_seen":2,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:29.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:29 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:48:53 GMT\r\netag: W/\"89fc-19cb9f78b2c\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D4Y4XL0nKxCZcjdd%2BVvUZzB9FZRjHClI7FzpUGwozo8a081KXMiv8nvq3Zadxx0XqdJ3BBf%2FS4yW9stermZZtsu4MAvrDNIS8FhjEQP0t5Lk9XcJ8InKwrsrxSVgF6Gau%2F021K8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3767ef8a9223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-06-07T00:21:57.731919Z","times_seen":1779,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/chunks/59-1542ee2effd1dc30.js","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/static/chunks/59-1542ee2effd1dc30.js HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:48:53 GMT\r\netag: W/\"39ce-19cb9f78b30\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RWNpo6ljLY1ai1jwjautFf5jBZqDLje216GTuAR44Z3sXkEsaexNX1JRcg9lf1fgmNE%2FGLBCa5GMFoSR7him8b8Aj50oaeDW0RFAD04mOO1%2FE8V4Ht57Vg4nUgCWqRpxS9543m0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f3767eb59b523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14798,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14798), with no line terminators","md5":"4c635bee1a621ed91e76f30f7713da1a","sha1":"8b13e3a9ac9c601edcf58a7dedbf5c11bfa58833","sha256":"90031f145b5253e20f464fac25b17a0cfea78a925a8a229a869ed2760f58b6a2","sha512":"6a03ac14ef42397237b723270fe17a69d81a01f8b16a221890eb9f95e456f7ada231e0f03e06fc9c94f7310b050724f88c5c7cdc841306e1b188dc3275008b5c","ssdeep":"192:hzBOuoWGy+Jbicm0ZykfVlNUoN+30nnWR6/eo7tuTRmnpcGXrAPYPKF9:hzBOOum49p782pcQrgB","tlshash":"6862b46e45860cae9ebd98e4c427520cd7ec6606b154bca0e7a68413b5d7ecc61b33cf","first_seen":"2026-04-28T16:22:54.838997Z","last_seen":"2026-04-28T16:37:28.386378Z","times_seen":2,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 17:48:53 GMT\r\netag: W/\"89fc-19cb9f78b2c\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oplL3ymQaCEr7%2Bfh%2F44q7xef6kWhDvZYelIrL%2BZ82hKRErYjbVjE5rG6xOrcegvCNNas2G7Gvlf3A76gfGVwk9dUA%2BaPKzEakBfjzd%2Fg05xWYh0q4EgBy7SWwsEpBUV5TrRj7Oo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3767ecca0823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-06-07T00:21:57.731919Z","times_seen":1779,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Fsoftswiss_Elvis_Frog_Trueways_c67568b187.png\u0026w=1920\u0026q=75","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Fsoftswiss_Elvis_Frog_Trueways_c67568b187.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21966\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: h75VkDwuLRO4afqmu-ggsPb3P2A1dvFhT-wD8ax9xzw=\r\ncontent-disposition: inline; filename=\"softswiss_Elvis_Frog_Trueways_c67568b187.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UWSXaJeeqc1Dgm6XT0JtsDrGgv8gKts9F2yJzjKdHp4k2beUctrELCjVeqqnP7FJNRbtvyuz9UqwitH77rTF1ULIToNcFbhFzTYAnHso6RegxSZ77JPMUQN918XfHj8MGgSK76A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3767ed2a2723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21966,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"89fe905b87b7b4316a388a0303eef23e","sha1":"63748ae1a9b6af0c90f463288063d7e9859f82b0","sha256":"87be55903c2e2d13b869faa6bbf820b0f6f73f603576f1614ffc03f1ac7dc73c","sha512":"ece5089d0b693dd8f4047be81010bfde68a3a1566fc93139c39e0d01281c0c84c9fa4121e00c451d22bfb5e4b1c1adc80bad001f7e02195ce99c345992c9f021","ssdeep":"384:7cDVuiOKc+mjDb/RRWjVeMYFCPUo/yEpAKY8LSMd/QzvbeHmY3gaw:AIecf1sjwvFGnyEpATGCrbTft","tlshash":"76a2e1c573d33e77833e41718a788973101264c6c553bd5ac6347acfaa422e2579471f","first_seen":"2024-08-19T20:10:03.133116Z","last_seen":"2026-05-27T00:20:53.029806Z","times_seen":91,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Fbooming_Gold_Gold_Gold_5de62fa3a3.png\u0026w=1920\u0026q=75","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Fbooming_Gold_Gold_Gold_5de62fa3a3.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22892\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: X4+P2NT7clIGAMVZ26q1ERSrxW2lYGUxe2YzOTEiigQ=\r\ncontent-disposition: inline; filename=\"booming_Gold_Gold_Gold_5de62fa3a3.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Y%2BHLupCQZfKzDwnOC%2FY5Z724Pfl94Juva%2FEYpXuLeb7Gffbqm1yVxPeUlED1QQEqqD41oyt8FzccH4%2FuNMvrVxs%2Bxuur1cw7%2BFak1n%2B3IYkY%2BgAYN1vzpvnOFITsF6S15s2824%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3767ed3a2a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22892,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a8b94f48e2fd11cb50cac27fc86d9346","sha1":"5c70ea2c22699346e5b3861641339a1d2d6c57eb","sha256":"5f8f8fd8d4fb72520600c559dbaab51114abc56da56065317b66333931228a04","sha512":"fe8743c6c2a1215f636679fd201d71b82cadc779781b7161575ea8c96b1f8ca1eb9dd85f7922755968ae943fe71c9d17d36564947b5a9fa5b32b003ec9ec7832","ssdeep":"384:xUFhEi6MF0xzDZZiClIrogNEMzHiF0O4kVNor4I4bAbsXxsUOplwM:6SiVF0nlkxLg0O3osJXsWM","tlshash":"7aa2d0e4c277cdc069969c8322eb944671186b891c83e473d47a94aa37e991d3e0d72d","first_seen":"2024-08-19T20:10:03.128818Z","last_seen":"2026-05-27T00:20:53.03917Z","times_seen":92,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Ffile_11_2_0d924ac01d.png\u0026w=640\u0026q=75","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Ffile_11_2_0d924ac01d.png\u0026w=640\u0026q=75 HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32934\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: p7FkZrBjScTKBYJpb2QD8eIPISJBK+h-ncRlVT0QbWg=\r\ncontent-disposition: inline; filename=\"file_11_2_0d924ac01d.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ws1diAK%2F5IlgpXFoGEnt9A9dM5rGHcOc6Wbtq%2FjqE3z2z8moq1SXaGsJ20ntUAme86%2Bb0GjrnTe5IBvku576aoZSHt2P3cQX6wp0YWm6zh3vLYt4jC%2FmCzjIaL6droBnV%2BQzlkQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3767eb69bc23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":32934,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fe73defb7f54a3f7027b528cbd6df0cc","sha1":"78b3195a55c0c8bacb180aba9293e678b7bedf6b","sha256":"a7b16466b06349c4ca0582696f6403f1e20f2122412be87f9dc465553d106d68","sha512":"52124549f353b5a763385ef272ea604cd5e77e1356c71d2eb7fed310bc353561a17eb72ddb448a95b022ca23a8fb584f7433b9cc588da0ebb9fa739258c7cb9e","ssdeep":"768:okWHllsWBbRlesg1+JeSlAgB3F2GhWHvxFUbd6:7WFlsWBFl/g1C9DPhonqw","tlshash":"4ce2f10332fb7f7717725b42afe7f252b8038c8ddb8a2b64e8e6617d029594c3850821","first_seen":"2026-04-28T16:22:54.842501Z","last_seen":"2026-04-28T16:37:28.388008Z","times_seen":2,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Fspirited_wonders_ce208d4391.webp\u0026w=1920\u0026q=75","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2Fspirited_wonders_ce208d4391.webp\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42986\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: cbSSeIM-9r27KtA+wbXQwNaXi9OOoA0J57LDsHQ04tI=\r\ncontent-disposition: inline; filename=\"spirited_wonders_ce208d4391.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NWGVYhMr8F5Xxsh%2F0sKVXG1J8JS%2Bv8%2BtBtkNRB%2FtWiS882QN1zxfhKB%2FgFmYA2%2F4zqw1qhvg90aNS07Og0h8b%2B5MXaTfY%2Boyhkd3bZy8e3gIZOtSdc6ERr5L4Cj1mL9CVzGNG%2BM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3767ed1a2023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":42986,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x667, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3761db7a548056fae5fab0f14654997a","sha1":"5504d347fa8e976256ce9cd3f5d4dd4f53163103","sha256":"71b49278833ff6bdbb2ad03ec1b5d0c0d6978bd38ea00d09e7b2c3b07434e2d2","sha512":"a52362776092e3306c20a4dbd325c0a6f3f7aeed8825f00f1e4645656399412da700eb730d36ea33d085d2c6d9365677dc1c23fefc5e7cac3320e6e350f8c63e","ssdeep":"768:wqrNDi38BxsIUu3skF3vG/eiPg01XxlmLbf5xrFobIpCAUAn+70nf:pRDi3cac0ei1Fe/f5vegSAo0f","tlshash":"fc13f222edc3433d1c30c10375d6a9e26d5adbce841a93706abdf5351da7bcb6e82054","first_seen":"2026-04-28T16:22:54.844613Z","last_seen":"2026-04-28T16:37:28.372273Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mrxbet-casino1.com/_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2F1spin4win_Lucky_Cash_And_Spins_22bcde6483.png\u0026w=1920\u0026q=75","fqdn":"mrxbet-casino1.com","domain":"mrxbet-casino1.com","tld":"com"},"ip":{"addr":"172.67.135.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mrxbet-casino1.com/","date":"2026-04-28T16:22:28.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrxbet-casino1.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:02:24 GMT","end":"Tue, 02 Jun 2026 12:02:23 GMT"},"fingerprint":{"sha1":"85:9A:00:53:78:D1:59:0C:D8:4A:9D:97:1B:05:1B:73:9A:7B:13:BD","sha256":"FA:87:FA:58:70:C7:89:0E:35:E1:09:94:84:97:7E:9E:EB:89:1B:CB:CA:41:5E:75:76:08:F0:22:F6:A9:A7:BD"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fmrxbet-casino1.com%2Fuploads%2F1spin4win_Lucky_Cash_And_Spins_22bcde6483.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: mrxbet-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mrxbet-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:22:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20670\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: 9a+gOWjPYY4qiluwI6mRt6tBY5cKmf2dMiZew8Zltd0=\r\ncontent-disposition: inline; filename=\"1spin4win_Lucky_Cash_And_Spins_22bcde6483.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z572yTHkulsP0cimripruzQ1NYLSv1zdYVEXDmuh0JixqdWMjF5%2FO6m2m%2FeqKkbX8KiymzIq5x00%2FpSoICm4VXiQ985AmyI37K0T6SEwghc7dUermvqSyLX%2BKTiFNJsHi%2Biz1f4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3767ed3a2b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20670,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f7f85b96f2e8ceb54d3d46dec321ae25","sha1":"e3c6fa402468a91bd3197cdee784301c017d93a1","sha256":"f5afa03968cf618e2a8a5bb023a991b7ab4163970a99fd9d32265ec3c665b5dd","sha512":"ad6205008eda336419d800350d86a09be7b0b5e2b96cc1e00637f2de6ec1d9c486eae2154deec67b55281d0f27407750ac0fdf97d70d7be9e75e5c38bc7983cc","ssdeep":"384:eJAiRDRkcPDx6TD5VcHAEdapxkppUHafktrvnTm7gCVQb+vHHhpiu:eJASRkc8TD5VcHAmpCdm7gCVQSHHXiu","tlshash":"b592e09a2d4bfb07548a6dfe39d02b437e8968160618c1fbd44422c7ad75ac8fe4c479","first_seen":"2024-08-19T20:10:03.129742Z","last_seen":"2026-05-27T00:20:53.039784Z","times_seen":89,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mrxbet-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}