{"report_id":"42e121d3-dc46-4cb1-bf95-80d8e1611b3e","version":0,"status":"done","tags":[],"date":"2026-06-30T22:46:22Z","url":{"schema":"http","addr":"fireball-casino-pl.net/pl-pl/","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fireball-casino-pl.net/pl-pl/","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"title":"Fireball Casino Polska 2026 – bonus do 5000 zł i 5000 DS","dom":{"size":123591,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19253)","md5":"95e688389e4db1eec7b797968d65ae79","sha1":"d8b2c70f31efb061e35a3a46d01e65dcfb7fd656","sha256":"4aaee74dd14a2d59e53a91db49797e2cdd5ec772a3771c8d3587845a963db90a","sha512":"dd6e6a7d05613fffb9546fa61a448fad5a7e7ff1041ba0d1fe1cf842d752222f8c0f4abda0a3bb217dcfc0832f4f895ea1db37d55ad62a822a2083168226891b","ssdeep":"768:OTZdyp5H5VtGAH8b0ipPoQwkPJ3Ex1jOlFAoarO6nEpBw6Qem:OzypF5VtGOUpPoQph3WOoxC6nWBlpm","tlshash":"4ac3f86193f495b912abc3d18915371d3b89c606ce4a27c873fdc2c89bd6d618cf3a4a","dom_hash":"domhash6346fbafa6becb82101331c0251739ea","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fireball-casino-pl.net/pl-pl/","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-04T22:46:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fireball-casino-pl.net","ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-15","domain_rank":0,"first_seen":"2026-06-30T22:46:23.325555Z","last_seen":"2026-06-30T22:46:23.325555Z","alert_count":64,"request_count":32,"received_data":884082,"sent_data":18090,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/cache/autoptimize/js/autoptimize_c552a221896cbfcf9ccdf9529e85f108.js","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d325364532c5692fc5b306ff90ac559","sha1":"3bc6b474753c8276640e3ecd500cff2b893534f0","sha256":"0c7d70d81477e75a1b8c67417ed001e2a7eee06d8380a62f0c8701d971cfc583","sha512":"c036df195296e42920aebb167d25359359d251ed1b378f1a8b444dc1719adf5fc146bff321d1b7b2a35f3c276486aa2ccc0d57cdcbac60e0dd57403d52f97dbc","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vO:DIh8GgP3hujzwbhd3XvSiDQ47GKSh3","tlshash":"30a31addb2c6703247a721ba407f250bf136189d6c0cc450f16ad4e9bcb9a4a927bf6d","size":103927,"data":"","first_seen":"2026-06-30T22:46:26.699124Z","last_seen":"2026-06-30T22:46:26.699124Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/pl-pl/app-js-extra","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d9b4bf0622f6102bb6799056ef2334e","sha1":"65f88825b01788a298dd0856e66cf8d35e2c1883","sha256":"3b626cdc0e3eb8e3a3066b7f16186bed7791fba2f3e6f55af031db7966431027","sha512":"7931a3faf593ba431873ba20bf2f179686e45eaf82fd4cfa49c90260cea4c90991751d94e06e623ba00740d2710ebc4cdb6cc8bb875fd7453f91d900e1c6ffc5","ssdeep":"","tlshash":"31f08c9ae08b0a66b590adf004250bb28261b066e8018f446f58d0988060e89b669a8b","size":577,"data":"","first_seen":"2026-06-30T22:46:26.712375Z","last_seen":"2026-06-30T22:46:26.712375Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/logo-slotuna.svg","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.903Z","timestamp":1782859559903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/logo-slotuna.svg HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a140b4596c0f3181-OSL\r\ncf-cache-status: HIT\r\nage: 3100\r\ncache-control: max-age=315360000\r\netag: W/\"6a3eaf79-a472\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 16:57:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xgPfIRJPFyNMKjZIzC24ITqHK7THU9RCXHsGaDnVLqwawSsZTQnEs4EKsV2K74pt4mh%2FUhOafeB1dezgOl89HYq1IGYKcyCmS%2FGtlzkflqAkN%2FlVmXFTGi9ThcY8ejrM9bex2tIXxS6s\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42098,"size_decoded":32717,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fcb1d46db867d153a797071986c490ed","sha1":"760dbd73145067d94af9a34de3fb7b6b0e4b9f83","sha256":"f8a80534811e917ca3e125036d4e56817bfe558870f0e9ad3e9b27783a8681ca","sha512":"41a7366d0ad505308196e36d9b8a42dd44cfaf3e2be78890a8404435bbf59c8b6342e53ed2b1088d826d49eb6d324b800040e95f644ec69fa926fff4bb1e1079","ssdeep":"768:A939dXyIfn0QOXTQdWDKA7d/5ZvfJvtwezvAJQliFfVrSzsMf/xQsXlD:MQ3QQQdWdfvhlwe0JQ2flSz/XxQOp","tlshash":"7b13f11f3745b116237a778cf255cb8d0efe215a3778986aced092bf44287b1d81664c","first_seen":"2026-04-25T03:18:28.323493Z","last_seen":"2026-07-15T20:58:42.900078Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/icon-category-crash.svg","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.915Z","timestamp":1782859559915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/icon-category-crash.svg HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a140b4597c153181-OSL\r\ncf-cache-status: HIT\r\nage: 3100\r\ncache-control: max-age=315360000\r\netag: W/\"6a3e6228-795\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 11:27:36 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Grk%2F2ReGnImrIBIE9VXeiBPCmJHDjMw7hX44wmEzQp3L98mkXiAciSK1gWje1N0WlTt6LYfWwvfApNPaO9qC0J%2BMerJqjlGk%2F0bivtZ%2BSY9oEOUUWiwv1olCy7oCV5wGP%2Bwd4JWeixTz\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1941,"size_decoded":1533,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"92b5b951c1f2b4a405769d4d43e3fc85","sha1":"7f172a8131d05c2fda1f01499702c02f49ed051f","sha256":"20fc86aa0c1867a3d5b4219eb53e719b19de9333b650fd985610e18002bdc60e","sha512":"fa01ad7e91703ab46e46345e15a4b450cc579d200d916d0ab3fa4042ed9733e26dacb2b7522583ffd703539f258b63f271557c31aa15afae4e71b6e8a077828d","ssdeep":"","tlshash":"cb41db77f96dec13f274d2ecc942147459aad5a7a142819082c0ff4f14394ca1a4d7e7","first_seen":"2026-06-30T22:46:26.68258Z","last_seen":"2026-07-18T01:22:42.034007Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/pl-pl/","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-30T22:45:59.165Z","timestamp":1782859559165,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /pl-pl/ HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h7lIj5njcRXDZUUBbphUQac8OQMHBV3%2BGXGgcHK61B%2Bvw8%2BpWGtoH6z2FEs19rtTLMbNr2YFtua1rWn7BqtjkxYDZxm8MuCBtXb9px7fqhA6rqru71%2BsKffDi3uf8kuqtkO1Y3cGOtBH\"}]}\r\npriority: u=0,i\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a140b454fb4e3181-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":123038,"size_decoded":24122,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19840), with CRLF, LF line terminators","md5":"c1daaedfb0ad437502cf9f7f96d40a87","sha1":"b95acdbc5942810e5fe2da6e001d9bc386a6fc1b","sha256":"a13e81ec64b3cf94f6f965d581b06c6bbcd32aaa30de8301b5ab22ef317fd734","sha512":"2c288b45f35b4f96b72233d24e726d22348c9f765a1efa106333c489635e300f29c3ffb43f7e0c351623285092eb700b521e100c7ac9db9c324d893d2f51c6b7","ssdeep":"768:bTZdyp595VnY6H8b0ipPUzCMtJ3Er1ka7QB3arO1nEqMCjxyh:bzypr5VnYAUpPUzJj3LaAqC1nlMeAh","tlshash":"b7c3e76193f4d5b922b7c3d18914271d7b89c606ce0a178873fdc2d8abdad258cf3a46","first_seen":"2026-06-30T22:46:26.683533Z","last_seen":"2026-06-30T22:46:26.683533Z","times_seen":1,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":6,"connect":16,"send":0,"wait":382,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/live-1-431x450-1.webp","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.829Z","timestamp":1782859559829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/live-1-431x450-1.webp HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6cMOdN%2FyaVhHerCSF9GlQn45Gd1b%2BLZWcDzPBZMaL1fxW8pwWQXSJ46xrvhUO7%2BCAb9jX2r%2FkyNmm8tRu19PICaxRM8k249e26T1sqqvtXwvhZe41qXODA1j0UVpuaWqF3RjHHLB5RFT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a140b458fbfd3181-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 5537\r\ncache-control: max-age=315360000\r\netag: \"6a3e37c3-362e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 08:26:43 GMT\r\nserver: cloudflare\r\nx-cache: HIT\r\ncontent-length: 13870\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13870,"size_decoded":14636,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 431x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c301a949cde8827b12f8fa302ef0ff1a","sha1":"984caedfc66c855324ddf07fda5d2b46979ddaa3","sha256":"ef6940f03b68b277b76028438552e76e18de8410a0a7a89d93df34dc359b9cf8","sha512":"63c6a5281537fd970069f88110a6a492aeb6be9afd5096cfa9e1ac79152cddabe905c6320f1f8b055dbd15c480eaeeb856c336a5ac68eb5bbf70e7f520c571dc","ssdeep":"384:rlm68/Y07e6px7n9k1n+41vZay04V929X4dlnIr:5ND85kk4ZZay0RUli","tlshash":"ad52c0b73d6653bc54614bbbc39b731bac4d00a31d780591986388e53e0a22257a7fd3","first_seen":"2026-06-30T22:46:26.684453Z","last_seen":"2026-06-30T22:46:26.684453Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/icon-tournaments.svg","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.916Z","timestamp":1782859559916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/icon-tournaments.svg HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a140b4597c163181-OSL\r\ncf-cache-status: HIT\r\nage: 3100\r\ncache-control: max-age=315360000\r\netag: W/\"6a3e6234-6ec\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 11:27:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jm2QdKq9gxEfMZ51lpGCJbngpielK%2FD7G09UsEcLZ%2BDcPxrBRkLHou%2FaxehH8K833Wr1zsIBtOSABntLubwu%2FOUvhqJrcjwUvVS0kd7Ruop0sHPUK2%2BAxDVrdWx4QdyyQfrqsc7K92QV\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1772,"size_decoded":1713,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0021bc0e3f4607eababf7234ee63081e","sha1":"a52ace6f8bfefda8f90dc9e690e335acb116e5e8","sha256":"f6b5442564f2d450baee1da76818b0305f68acb946a4d492a5a5ab56977543fe","sha512":"be4e4024a4902fee9c132ad48903adb4734e0a78ad294918432fe445e0711d56ed882a227a143a613306d22190c2f0546ac1b4252d0650997d1878c7a9bf7492","ssdeep":"","tlshash":"cc3187d270ead1e88306d7f8d5a788bc062718f76f29c0904fd4ee4dfa1448d496cda2","first_seen":"2026-06-30T22:46:26.685802Z","last_seen":"2026-07-18T01:22:41.346561Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/logo-fireball.webp","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.812Z","timestamp":1782859559812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/logo-fireball.webp HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6OyaZ9o%2FynfhDWJXLBB0OSSNFbW4v%2B7B8DQdNkOS815TsVt01xXY%2BmjviNm0ZS4%2FEmuMofzTZrfdA4A%2B5fSi%2BQKPv5YRURx9d28ZMoCOU0yAfav%2FtW2GxxlNUiRqcgsGEt0SNVinqArK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a140b458dbf23181-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 5537\r\ncache-control: max-age=315360000\r\netag: \"6a3e2ff4-65f8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 07:53:24 GMT\r\nserver: cloudflare\r\nx-cache: HIT\r\ncontent-length: 26104\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26104,"size_decoded":26876,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4e35d4f364f8b2cdef676a11893f77d2","sha1":"35315d1ec41c3513a2fc83d6c1ad9eee619a0000","sha256":"94a4c3d7768053bdb80275fac29bc5f857117e39c92c8521d58856eedfd1293f","sha512":"7cfc2f0ff714a676a0869507403a757ef8f964695c63d362efe045b40259210c72eb91fcc85e80494d356859b33ea9e8673b144fe2dd61a505d8bc1ee95da7b1","ssdeep":"768:5m1Bz0d7+D1SegsLvNUZ/wMAIJ6nrnySU9U1OO+u:5kMGSWNUZ4tHUm19r","tlshash":"0dc2e149afb6258cfe62d34e3a215fc1f4957a7d0235ca95d3510f8382931b28cdd8ae","first_seen":"2026-06-30T22:46:26.686909Z","last_seen":"2026-06-30T22:46:26.686909Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/willkommenspaket-bis-zu-6000-eur-300-fs-1024x332.webp","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.814Z","timestamp":1782859559814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/willkommenspaket-bis-zu-6000-eur-300-fs-1024x332.webp HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-donor-domain: fireball-casino-pl.net\r\nx-proxied-by: Cloudflare-Worker\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a140b458dbf33181-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"6a3e295e-9446\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 07:25:18 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cx%2B7DRoakarP9XlyMczBAmeqfImjOKXnQjJEowrUe3uVbFhi1dD9Yq3DgPMfya%2BfjCEdBSlkiVcIdzu4rlHeu6lX%2BocuMu4jDfOEJSs0cUI6d5AQnr81wEWsq87AYuu3W3charTrP1eh\"}]}\r\nx-cache: MISS\r\ncontent-length: 37958\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37958,"size_decoded":38818,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x332, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9b2000df8a0cb18c90a586c80b83e6e3","sha1":"a82c75d6a9e47540f5ad2a1e3d9d1d806aa49e73","sha256":"5f2a9a9daeabf3a68e58edc779b1ca6f5f5601121ffacba51df6858faae012a9","sha512":"4fbabf3aaab0df19b3275b3756787d7024c77a267148952b21f3feec051e4cbd9513a1d4e813be0f9d9fda6f5dbe149ff008e6d57b372fecc333d3cfe1bdf039","ssdeep":"768:UlN91b0zoZn9Sf4Kx1zOzS0CgC9gBDoVEJ0S/gcc+gPEkLQ:ITn9Q4KxgzS0CvuGVdcUPEkk","tlshash":"3703f1f2a37014c8235d1f11a572d781d6a7ebf5a83471839e78dd001b2a9aa9bdaf01","first_seen":"2026-06-30T22:46:26.687755Z","last_seen":"2026-06-30T22:46:26.687755Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/slot-9-431x450-1.webp","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.824Z","timestamp":1782859559824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/slot-9-431x450-1.webp HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WwiCvKe0MW2kDBwlIWYDpl7rvb7jDR8cTJ4PT%2FnADFQEzI1CWi1lEKFyoELOpXgO6c6Y3w7x09e1jwqgLIvTXwOgIx0vNJmBRBflfoyDKdhBhVPgzT6UpsOHxLZ6CJNCa1pWsUQd1qsU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a140b458ebf93181-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 5537\r\ncache-control: max-age=315360000\r\netag: \"6a3e3647-48ca\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 08:20:23 GMT\r\nserver: cloudflare\r\nx-cache: HIT\r\ncontent-length: 18634\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18634,"size_decoded":19394,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 431x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bd6f6f1e2b2af74ef7291708b6c05323","sha1":"c774ed0ce778949ebf163a38ec289c816db991ef","sha256":"1658815a572ac7b49560e8a6ae066bcfd63641b64bf61587b497fc8903c96e37","sha512":"acb15fce861948b201e5cbeb7ca798b1dbf6f061c84a059460fc84420dc796fa4e217d1df4693f0b0e50a3dc2cc548a4e79742256de2dc264f320756a9d70858","ssdeep":"384:KH9wfkTY3Umm98R3k4L2EoYgTmoM8It8EuRPrQDhEYmwwpFbBMxMD2Fa:KH9TY2Ak4SEzgTmoquRcuXVpFbSKca","tlshash":"8382e119709f0433073a8b447a9e2fd9e4a14fae77a4a0875da08006343ff637dd26c0","first_seen":"2026-06-30T22:46:26.688675Z","last_seen":"2026-06-30T22:46:26.688675Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/slot-12-431x450-1.webp","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.827Z","timestamp":1782859559827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/slot-12-431x450-1.webp HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sS4kZZcld0hofj9ccwyw8EM7wRXryoHY4TXlfuzo%2F2ktp%2BMKZsDn1AQ0%2B1EVQLXvuhVSo7W2BSl04NF6XIp%2Fh8276XLiCHPVsW7N8lTXlVyNW1dZ4KKcVIoKZJdc9M6UNvZKHdVGxQiN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a140b458ebfb3181-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 5537\r\ncache-control: max-age=315360000\r\netag: \"6a3e3663-55ea\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 08:20:51 GMT\r\nserver: cloudflare\r\nx-cache: HIT\r\ncontent-length: 21994\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21994,"size_decoded":22760,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 431x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e5c02cd731e6f6318ba611112af09eac","sha1":"878c57dbdd7e8b4d2c4c5b1c2c7c246686b0032d","sha256":"fcda2b3302a6461c3fcb13bac10b3ead6c12234bc87c5e4ae3794e196397b3b7","sha512":"684e015718218e370715312e279f56af568554571a08035bebd68864ef0a88354bf6339f1beea9dbac86b7acb90ec8354e4b4171b9c970535746d6c7179dd265","ssdeep":"384:Rxwjv2rzmSN5mudVqU7hK66FV6QVHAlchwal1Iv9XeAtvFaGTErGA+7Rz4O:Rxev2rzmSNRf45FV6QVglGw4I15TYTOf","tlshash":"30a2df7b69a6a2357c446ef01ab7c24fb580d398153208cb997c80c19efa0ac1d4ef14","first_seen":"2026-06-30T22:46:26.689623Z","last_seen":"2026-06-30T22:46:26.689623Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/slot-14-431x450-1.webp","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.828Z","timestamp":1782859559828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/slot-14-431x450-1.webp HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NM4JvJolA3Q7YqIgoKf7bv%2FTCGNVmQ1zbx9ZofseOv1AiiKkWuWkJ8TtN4AvXOuuJHihitmPKiZjzm4Nwtp8K5PiJkKlYkyazR9tYGVnUFUieNpcqqpqLVq1LVYOS4HPP7mX23wCJk2s\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a140b458ebfc3181-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 5537\r\ncache-control: max-age=315360000\r\netag: \"6a3e3671-2512\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 08:21:05 GMT\r\nserver: cloudflare\r\nx-cache: HIT\r\ncontent-length: 9490\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9490,"size_decoded":10249,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 431x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6542b9554e7ed7c180d32dc2f9fffa3a","sha1":"66afc5cfd3b5f761efbce096dca131473bcc5c98","sha256":"842d3fd8ecb08212f862a9f78edbc2e09041c8710829804898f6f5e12bdce97f","sha512":"391fa92f9d57c15dd9cc7471d44bce100149141fa9816149ba0452917b1f0dfaa01370dad5fd4b17cf1385c7e9cd95329b741281a2c84ad49539526c4bf4c6d5","ssdeep":"192:nijt8GZvhCQSeRibMtkUuRML3CxB9AzY4g6ofY7UbkE1:nyuQmM+Uua7s4gvYCkE","tlshash":"a812c09637e53a96dfa151f5d324c14637d30348b014fd9e8d7f102c24eeac406867b2","first_seen":"2026-06-30T22:46:26.690838Z","last_seen":"2026-06-30T22:46:26.690838Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/themes/jupiter/assets/dist/fonts/montserrat/montserrat-regular-latin-ext.woff2","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.891Z","timestamp":1782859559891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/themes/jupiter/assets/dist/fonts/montserrat/montserrat-regular-latin-ext.woff2 HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/wp-content/cache/autoptimize/css/autoptimize_246edab4cd48d731727b093099f95d9b.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-donor-domain: fireball-casino-pl.net\r\nx-proxied-by: Cloudflare-Worker\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a140b4595c0d3181-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4432\r\ncache-control: public, max-age=172800\r\netag: \"6a326e42-6ca4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 17 Jun 2026 09:52:02 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KstyfQ%2B%2BnLvG4FPgo%2F37osPBoIz6DdhHosmh3CAXoiFjpLb%2FRYdvSP6QvFSRKwYZAiSry%2BzysV%2BqNqCkKVwrcD1VBdJFBZFuEL842k3ezPDOZRkDMkhUj%2B%2F1tosBrsV4WFWC1fofbuCEJnWHkE3mePu3aem5\"}]}\r\nx-cache: HIT\r\ncontent-length: 27812\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27812,"size_decoded":28715,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27812, version 1.0","md5":"89711a1150919edc93f67f067ef94f62","sha1":"9f2ac701d67d1ab3a2efe7d4edc663d3d5270fef","sha256":"6e1f71b09a1de41dc109318bff4733fa7dfa6d03bf6b7fa9a994939274555dd9","sha512":"18b38e1694e821d30ee0c8b85613771a5b4cf3f9cf7f131f0eeb85a5b2eea07a7cb0d40c82a16958ab91faad4f7c69241bb3449f7dcbe830bf9ccd2bf0f61b07","ssdeep":"384:OaXzK0/YHEXbKd+EsF+UDvPNOoLiNBaK9sYB2Vc1qme0AYKIO3gJh:OaO0aEXqdsF33NOG1K9s7c15e/3gJh","tlshash":"94c2f19545c5a78fda8248b5c2b6acd7790139bcefd2324c8fd102d8875b463f2907ea","first_seen":"2023-09-15T21:39:57Z","last_seen":"2026-07-17T13:28:38.790766Z","times_seen":2269,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/cropped-fawikone-192x192.webp","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.979Z","timestamp":1782859559979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cropped-fawikone-192x192.webp HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q2XWH75e6UK2kAgKrAqZoP1cOdeJHjVbjcGG%2B2t5pR16YFpAfGtaEDpWDLWHbwHFHCdBttA8WRBs%2Fxaod7mLfg4GouNQ2JpfnBSnfz8CzQPJzMyfkr2Z%2Bf6ETCdQCTz5eSFNfrTImjgS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/webp\r\npriority: u=6,i=?0\r\ncf-ray: a140b459ec313181-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 5535\r\ncache-control: max-age=315360000\r\netag: \"6a3e31a9-1e14\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 08:00:41 GMT\r\nserver: cloudflare\r\nx-cache: HIT\r\ncontent-length: 7700\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7700,"size_decoded":8466,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2b6bf93def412971763710dd446f4319","sha1":"57de52c21fca228e6aa32a5f220e31da15705f8d","sha256":"65fe2e2d1f82dd41f9a0bc8d1c8554929305ae4c8b64f45652a1894d1616db4a","sha512":"6d1ec003b6f87682decd5f81df4af6c013886b982ed5157ec9950654829fe36b746f2a9b5cc5db31ba6ade82c24e77ddb2b7b0aa3ef1430c58e63b59a4a2ec16","ssdeep":"192:cd7SNaKETqlLNutvrRAKIbibGMfz8wtcpzNf:cxOQqlLNutjRAKIGQw2pzNf","tlshash":"18f1afd46894aaacef9083d795c4f7802a7109997b06cf96620e39172e71f9e10608e6","first_seen":"2026-06-30T22:46:26.692566Z","last_seen":"2026-06-30T22:46:26.692566Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/slot-2-431x450-1.webp","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.819Z","timestamp":1782859559819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/slot-2-431x450-1.webp HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CrdCIDMcCU9CiW%2Fgrz4oEJYRNboly%2FA23DGpzmDlQQpaFhAMNVvJbwfO1Su3RbMUgD%2BHPs5CcskqQb8KqVSxbKCZSKW4ylCq%2BmXyVPtLLEHctCDaodpuITIqaSWDCAZMbBKoUgIZZY92\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a140b458ebf63181-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 5537\r\ncache-control: max-age=315360000\r\netag: \"6a3e3627-47b2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 08:19:51 GMT\r\nserver: cloudflare\r\nx-cache: HIT\r\ncontent-length: 18354\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18354,"size_decoded":19120,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 431x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"66c3809cbf8b1e377b224c923f6fc0e3","sha1":"1f02369ab86be877ff1f382fe8a3522e5113b56c","sha256":"29fd064d2c7e8509ef97b26cb2bd42106a2bec7e406e4cc7e95ef346f60c9693","sha512":"a2e487570e5190ab7932cbbd5b567fa6c15363d18288073f779848f3dff5b1f910b23fcde8f4221a55857d71e090f306b079adcd7844bd6af4b02e45767cf0e2","ssdeep":"384:5MMNucy9k70blDfmi/DyiQoF3vvwPA4gfKtiIsI1KmPBZbF/fXkm:5fYblDNQovvD1yk5sPBZblf0m","tlshash":"9d82e129a388388e8117cd6290d91fcbcddbedc47f32c4500b7b26c93a946143422b83","first_seen":"2026-06-30T22:46:26.693493Z","last_seen":"2026-06-30T22:46:26.693493Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/live-6-431x450-1.webp","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.830Z","timestamp":1782859559830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/live-6-431x450-1.webp HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y5RLIBlKnOJqOZaK0AvMliOzZttPJWm2Rmn6prt%2F45cUcW27YXz1hWGyKrZqFSqGeqALsOIBh%2F4zyHnlP%2BT4Vx5LfySd%2BWcKjy%2BJmX7hLqcyjcdVJ4zCj08XJ4QlGnoE6cWm6rR2Hdai\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a140b458fbff3181-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 5537\r\ncache-control: max-age=315360000\r\netag: \"6a3e37d1-304e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 08:26:57 GMT\r\nserver: cloudflare\r\nx-cache: HIT\r\ncontent-length: 12366\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12366,"size_decoded":13134,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 431x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"86622dc2a7c20082ab1c5633ed3de4cc","sha1":"d99c723924dce89edf679dfaca34002860024e9e","sha256":"7abd8ec0fea1ade19d94c48587abbe7cd57b22c39af2918f7a374f6380f96eac","sha512":"f9a0ed4ff121a2d50c0bad537a7476f7505931d6bdff967b423b300a826efb6cf01210efb9680af79f705fccd149958c60188f437102b14187d82095c0c9f54a","ssdeep":"384:/Nl5Lp/EC81RH/K8LF2hSBlvgDaH99rXAJNkHy:/N7pN8XCulV+aH99rXIf","tlshash":"5042c043d8402145eea5fb8e6e88c49519d0370ad905c1af9849f27ff329963bb3cdb4","first_seen":"2026-06-30T22:46:26.69447Z","last_seen":"2026-06-30T22:46:26.69447Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/live-33.webp","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.835Z","timestamp":1782859559835,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/live-33.webp HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cBrYiigGxodMAkSA4C5%2BGY2mGF3ArWGpCM3CdeftBxiGrTeJOe7cGMrMapysXoIrLpfr1uE1IZ3bVcdUTfNvRE2X%2FsSNdfkUv4y2VcErhG2oLxZ58X0PtiOzMc5lzHL%2BZtCGm1Cs6Tsp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a140b458fc033181-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 5536\r\ncache-control: max-age=315360000\r\netag: \"6a3e6142-58e0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 11:23:46 GMT\r\nserver: cloudflare\r\nx-cache: HIT\r\ncontent-length: 22752\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22752,"size_decoded":23516,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 431x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"95b924351992fa3a32bcf4fdecbf64f9","sha1":"86795ba6f8b5267f4d0bef8cb88525d21250fd37","sha256":"e35901808a3a2f515876762a9f2ba55b648ab8c8b20c7c48241251abf30a865c","sha512":"b21c47a4c96b3d4179950402d328879d4f4d56210f80901aa0cfbe0056a78370a5e8479df6790664e2ebfe2ba7de18262ab21085a7ca25355b0f372a35a939b6","ssdeep":"384:3lJH334xGsQYrFmYNaQLs4QhRQLIEupqrFsEczWbPiMcC5HHIc8+:DY/hpNawStEMiczwPihC5HHL8+","tlshash":"dba2e1fd71d480d64c7de8898e749a640133595657e19ebfc509fdc88f2ebc88a108ae","first_seen":"2026-06-30T22:46:26.69547Z","last_seen":"2026-06-30T22:46:26.69547Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/live-44.webp","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.836Z","timestamp":1782859559836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/live-44.webp HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hPPjoYFyiSu8xmNuIRzXu%2FHl6Of0%2Bg59ofCxS167Kz9iRGyK6Cj70tAbtutUDiXSYQ3DyALmDMc7lJFTZozSOx1V8BmRqeOePcW0gr40rwNtA9uCnKHOIhq8lp%2F3%2FtdWIc1GZwMpW%2FJ6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a140b458fc043181-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 5536\r\ncache-control: max-age=315360000\r\netag: \"6a3e614d-4b82\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 11:23:57 GMT\r\nserver: cloudflare\r\nx-cache: HIT\r\ncontent-length: 19330\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19330,"size_decoded":20098,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 431x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"52caafda7980458c209124182645a596","sha1":"d7d10a4b213528de7c88fe0c4cb09eb466dd885c","sha256":"66779e38c887c988cad64e9e102f8bd08251a89fec8142bfde9291d07e3f8e00","sha512":"747674679c36da1147bf1bc6ac5c219cb4e75efb6a41c05f6492074ee0311d68d6727ee91ff29feaf5843bc01cc97a51de95fcfb48f0c8facc8efd28258db439","ssdeep":"384:V/DjlJQtFxNQonbl9Utm9mg5YKErMXXLJwN6/ZTfzUapLryEi1ceh:pDyjQkh9oMm51YqcYalglh","tlshash":"0b92f1231ccd8659f34956faac21631bf18766c01efe838374473e427c922d9da882ce","first_seen":"2026-06-30T22:46:26.696363Z","last_seen":"2026-06-30T22:46:26.696363Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/logo-lanista.svg","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.908Z","timestamp":1782859559908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/logo-lanista.svg HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a140b4596c103181-OSL\r\ncf-cache-status: HIT\r\nage: 3100\r\ncache-control: max-age=315360000\r\netag: W/\"6a3eb0a8-c838\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 17:02:32 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yeWW9KOtC1xyuSj5zKDJOnH%2B1nnApLC69A3do5wh8GMupj9kOb43QYDNdJ6yodujoTqKaHHxfuCrf9kqOSM2Nn%2BihnWuZdurE%2B2BEmA28ZK3Zf5xM5Ufz5MXGblRDRlAiNyLi72pww%2BW\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51256,"size_decoded":39727,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4647ba2ca44fe34746b55a2e81ee91e7","sha1":"6bd082ede59d66ba646b22200ffe772fe7884467","sha256":"410ca018958ce89529ab89207c24cabe684586798091c3b7067b32729cec0160","sha512":"80c29c234d03bbfcc82159db916749cf2139292d16f54c6277cc78a8cc5d31dc30bce1529f45553cd02e77a77afe91be075565ec8b7b7048fc6cb8fdd387547a","ssdeep":"1536:PX8NN8E4GAxbS0U5+tLSugUeIpMxq7uIflAMS:PALAhS07tteSMxqbtdS","tlshash":"1b33029343bffcae6122465c3aba560c5f58853603f4e79d62983e7635cfd008a42d57","first_seen":"2026-06-04T21:14:24.737971Z","last_seen":"2026-07-18T00:51:24.352513Z","times_seen":57,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/cache/autoptimize/css/autoptimize_246edab4cd48d731727b093099f95d9b.css","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.800Z","timestamp":1782859559800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/css/autoptimize_246edab4cd48d731727b093099f95d9b.css HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: text/css\r\ncontent-encoding: zstd\r\ncf-ray: a140b458cbf03181-OSL\r\ncf-cache-status: HIT\r\nage: 5537\r\ncache-control: max-age=315360000\r\netag: W/\"6a3572b3-f254\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 19 Jun 2026 16:47:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pkGg7G3eBF7AxqA6REmHGz0P6o7THgnPExFlOYzMuXtQ2IK7MHZXiiDnWIDVJOavTqARzO%2BfqQdNlkhGnm6wra1FN%2Fz4AgusRYozeT6A4Sg7OEojmfCZnkA%2FW5%2FKJAEUAtZ9HD3dgfAI\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62036,"size_decoded":13568,"mime_type":"text/css","magic":"ASCII text, with very long lines (60410)","md5":"17ecfe61a78e9c6ba7d96ad49bb9cb3d","sha1":"f8d6b564574098747d61367b1a40adb2589e13de","sha256":"05b5d42aaf96b75779c152621a8bec85334bcb728783072dde078cec818a653c","sha512":"12890be0ca477feefd462045472ed3dd1e5067979e241644f66960b5ddbb24a45b05202d28b367fcf2f372e085315ab0441a1fcac7aca0727f691a7c689a1ca7","ssdeep":"768:Aqyd4TLl3b12fjmXnMZtB52RSJR5ydqn9b:FAZ2RSJR4dg","tlshash":"2853a5a1b953712d7927e425b699b94d3018d402c71283ecf927e1a9cacf6f316b1b0f","first_seen":"2026-06-30T22:46:26.697882Z","last_seen":"2026-06-30T22:46:26.697882Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/cache/autoptimize/js/autoptimize_c552a221896cbfcf9ccdf9529e85f108.js","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.808Z","timestamp":1782859559808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_c552a221896cbfcf9ccdf9529e85f108.js HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a140b458cbf13181-OSL\r\ncf-cache-status: HIT\r\nage: 5536\r\ncache-control: max-age=315360000\r\netag: W/\"6a3e6a44-195f7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 12:02:12 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e8s3WPgThxanBWxnd3TFBNRBOboe46Mor3TXPKUAEdTWrs7erduo1z3r5UVjh6z00qoeRAnTt7uNjcuJCpz%2FzEt7Knz1A%2BxwlJH3vTGlpWTSdjLmnJVMWGY2jJ152arQic8OxL%2BeFfO3\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103927,"size_decoded":39766,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"3d325364532c5692fc5b306ff90ac559","sha1":"3bc6b474753c8276640e3ecd500cff2b893534f0","sha256":"0c7d70d81477e75a1b8c67417ed001e2a7eee06d8380a62f0c8701d971cfc583","sha512":"c036df195296e42920aebb167d25359359d251ed1b378f1a8b444dc1719adf5fc146bff321d1b7b2a35f3c276486aa2ccc0d57cdcbac60e0dd57403d52f97dbc","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vO:DIh8GgP3hujzwbhd3XvSiDQ47GKSh3","tlshash":"30a31addb2c6703247a721ba407f250bf136189d6c0cc450f16ad4e9bcb9a4a927bf6d","first_seen":"2026-06-30T22:46:26.699124Z","last_seen":"2026-06-30T22:46:26.699124Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/slot-6-431x450-1.webp","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.821Z","timestamp":1782859559821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/slot-6-431x450-1.webp HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2BquwkF3RPg7CJ7c4lMSS0zMsjbpcVxgEm6WFH1awrPibnp3gtOvxHG9GUm3oy9zai%2FXyzo9mSy9sldhrZwVSegA0pG1Vn2TTKWYvNt1Y7eJbQAdqKwg1QJ48%2FOyiNWTqQsgR6RH1fZR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a140b458ebf73181-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 5537\r\ncache-control: max-age=315360000\r\netag: \"6a3e3631-5a74\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 08:20:01 GMT\r\nserver: cloudflare\r\nx-cache: HIT\r\ncontent-length: 23156\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23156,"size_decoded":23922,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 431x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f163b1bfee33fd69d3d511a4a87904fc","sha1":"bb5f9b460ea8a74e51699f0bbcfbded4ad669305","sha256":"621beafd10d6a0cf27d9d2691a0fabfd3c07bb7a28906268c1eaf5ceff58da6c","sha512":"dbcc40f421cdbe2278ca084b8fae07823c01aef3ec10a117cf55a5613e63370f843e1eed3378aeb965ae7fb12761d35a0d8d8d9cb70eca9a1807ac22d04c1d5b","ssdeep":"384:Fa3xYVfDWkrDkrv6cO0UkWsL9jS3Omev2AKqJR71xf3mq63xH6NojNKBYrpyyCGM:FahPUDkrSh0UkxhjS6zJJ1hN6ANoQirw","tlshash":"30a2e045ce3f59e4ca0290cac1786a9b2560745330baeef974db1f1077709a5e7085bb","first_seen":"2026-06-30T22:46:26.700119Z","last_seen":"2026-06-30T22:46:26.700119Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/slot-5-431x450-1.webp","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.822Z","timestamp":1782859559822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/slot-5-431x450-1.webp HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vmY%2BBozfaPWfeePRdMJ9jL0bSCiXvJ0JGKQ%2FTwuwptgvsBY%2B0ls7Wue4X05Y3wRFX9IwQeeJfnNswIqZpMjVi3JlkvHZgcON9hPY0FHfUFU4fY%2B08BcCLmfnIJEE8%2BKnAXISt2lB7p6i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a140b458ebf83181-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 5537\r\ncache-control: max-age=315360000\r\netag: \"6a3e363d-3342\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 08:20:13 GMT\r\nserver: cloudflare\r\nx-cache: HIT\r\ncontent-length: 13122\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13122,"size_decoded":13890,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 431x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8ec757836f31ec2c760de5e64f6b1ba2","sha1":"94624ec295bbbc62b4d02c0d15dd66c23be0d7f1","sha256":"ece84ce1596ae4bf902dfa37db92b3b8a9bc94aae83dc925f9c33664d003385c","sha512":"a435d0b3e6103c2a0e069907a36951a10ed500cf759f8803c454b6e4b2d85039e2c7478364df4978e587f60bb8851a92df529cb5236873a444ea07e232fc761d","ssdeep":"384:rIKlr/3Y1HjtCcenlIl1/Gn3pii3gzEJQz2dvH:r5lrMJveOen5L3gw+2dvH","tlshash":"e342bf5adcb0c71fdd3a7a0b6e68839bd05b27582f5a4223d66f520f13522f816a1570","first_seen":"2026-06-30T22:46:26.701347Z","last_seen":"2026-06-30T22:46:26.701347Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/live-3-431x450-1.webp","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.831Z","timestamp":1782859559831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/live-3-431x450-1.webp HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xc3SR5pj6S%2F57sb%2F58E8CRbq%2BfCrbSPbQ4KL1RFU578r0U28F%2BLtERXG7lFDr2YuK4APc4HKGGekwnn3%2Bw7%2BWRogTg72oigYZDleKuNQmtyg%2F%2BEhF1IpztcFLFOsywDSq4BKA1xzE%2FQL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a140b458fc003181-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 5537\r\ncache-control: max-age=315360000\r\netag: \"6a3e37da-3b4e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 08:27:06 GMT\r\nserver: cloudflare\r\nx-cache: HIT\r\ncontent-length: 15182\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15182,"size_decoded":15958,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 431x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"36e3b651e38d0cf3bcb7aa02dd6f0380","sha1":"3c447a64e75fb23e3f4ff1af2d589493b4ca1826","sha256":"cde49299a07891945a7cca30ed2fbea4dd63b81bedccedda61f58aeda034ee31","sha512":"2e03ec609690b836c31314039db369ebdbd10d1ac935829d0837d194beb7075cef526003e30fa8cac782cf75fe2c7415f50768e6060833962307314e86d86885","ssdeep":"384:5hFZlKUvtIv9wZvHdtCd09GFnKZOPXO+apX3klCtAvc:hOUVIv9SVtpH+apXAAN","tlshash":"c962c0a3021dbbdafca9ec2ab1014c3a975aaf4d00d65589c0ff56bd046fb814d077a1","first_seen":"2026-06-30T22:46:26.70235Z","last_seen":"2026-06-30T22:46:26.70235Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/live-1.webp","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.833Z","timestamp":1782859559833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/live-1.webp HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0UBYicaa5nkKkptTciNGUWHnM8qty%2Bs9Pz%2FEBYAMY85eG1qk1scBx2ug%2FlI5T12%2BVlNSlAi2Buq3JJFL8KmE2wLVztmYsdInRjUUMETPG5fRNUfqOQiuoqRH%2B1Pbkbn34zQfw5WJtug9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a140b458fc013181-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 5536\r\ncache-control: max-age=315360000\r\netag: \"6a3e612f-5eb6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 11:23:27 GMT\r\nserver: cloudflare\r\nx-cache: HIT\r\ncontent-length: 24246\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24246,"size_decoded":25014,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 431x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0e0eaac842079c5a438dce77958d8a8d","sha1":"3bffeaeac306e10094e6e37111513898cd9c2736","sha256":"99626c92571b2cb0ad1fe554433d87229168b3948b8e6b1d6ad1f5ba43b6ced0","sha512":"619462938b0567b4ac923482150019a0eec97e5af861f1e0320450974e5493debac0b586e760e98314aecaa60b5d77add4a51acf25c3a6f015667f27cc9cf220","ssdeep":"384:6GwkzEIP1J9kV2wodzhLCLE/7jC972T9Nakx4PEpbR6954+zkfBBbvbotF2M3Mo:6GMaJ9kV2wo9hocc72T9Dx4E695XCbvS","tlshash":"fdb2d045c77d558f77c7f01fe25020e2197e96ba338c9f38e6a027e5612822764e6742","first_seen":"2026-06-30T22:46:26.703242Z","last_seen":"2026-06-30T22:46:26.703242Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/live-casino.svg","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.913Z","timestamp":1782859559913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/live-casino.svg HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a140b4597c143181-OSL\r\ncf-cache-status: HIT\r\nage: 3100\r\ncache-control: max-age=315360000\r\netag: W/\"6a3e621d-334b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 11:27:25 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L08mzJR3Ljk7tfq5fCWdxesDC%2Bi60KG0pZwctOzFfVk8QyKMv1zB2S4s%2FqQwGj2SrHWPA4kQo6V5I%2Fa7TEUCUaBlSWhtC8%2F9zw9pjLRbhBmaf1Djc6Q51UN1%2Br3M8y9MLcC40a7sNWKp\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13131,"size_decoded":4236,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0bd4fa9349390e6586a5379a54484834","sha1":"ca340503c7eb7a0fd4ebdaf773d31ff658e33498","sha256":"7648a21942ac7bfe2ccc93e6de1d2db651fde0c68d10214ac04e1251e070c1b3","sha512":"96ea4a0e5a4a9978847710d187740e1fd9626b8dfc7f973804e00424246806ed25db831aa7f0f39e4447e7a380da7647fc8f49a80e9bf7ddc74033c97440ffb8","ssdeep":"192:MSSSPIEEX5pRX6cXRMOMpbLjXijq70PiB0PXzV783IYqA22jGZVfI:MxmEXnRXrXRMOMhjXU0Kc0PXJ784VAUg","tlshash":"664243ebf2edfca2f21ae7e8dd55d434369b11fba681c6a042d0af6964340cd250d9d0","first_seen":"2026-06-30T22:46:26.70424Z","last_seen":"2026-06-30T22:46:26.70424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/slot-4-431x450-1.webp","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.817Z","timestamp":1782859559817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/slot-4-431x450-1.webp HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FtBDhLq4dcO7v128OAHggUD%2FerTg0VuDz3DXJHDAqb3opanbYF%2B6O21ehEZfkPxr0PEVxbZC9bTESRnNlHK%2BS3nP3%2FNLX7E12Wogz613oQf1yOqP7F%2F4FrXBHvHdVfszLLX6B2bxFao7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a140b458dbf53181-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 5537\r\ncache-control: max-age=315360000\r\netag: \"6a3e361e-715e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 08:19:42 GMT\r\nserver: cloudflare\r\nx-cache: HIT\r\ncontent-length: 29022\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29022,"size_decoded":29792,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 431x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"780f54b6b3f19aeff2fe92eeec9ecbb1","sha1":"388063d61b27478a06cd9f3a26e378f6c160eb7d","sha256":"a614581207b7ca41674b415130dd05755b2b4501a54e146c9a30bb832e585537","sha512":"374a8bdc9cc876d27a0ba8b73c6b3eb62e15051a8b4f31ced9652f725eebc48e5b768f66ddfbc589da4de814e8e55f51da3197743258738b669767a3b244368f","ssdeep":"768:G/RIUMcOqkITlUGBKLW60gjI0b/nhYOINGPqA4j7dl5fvQsSg:G5IU3ZtBKq6K+/nGOqXjpl5fAg","tlshash":"5dd2f0e125f60776bde72b7617bcc67403b183cb9a9a1101297c582cd9149f3ba4b7c8","first_seen":"2026-06-30T22:46:26.705207Z","last_seen":"2026-06-30T22:46:26.705207Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/slot-10-431x450-1.webp","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.825Z","timestamp":1782859559825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/slot-10-431x450-1.webp HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3E2nMxBYVqIcab8wJzxFeYSuAa8CZZvIzz73QMN%2FWdx8vziN7ECS19D7WutCunwJXeO4fyfSFnICY%2BoTDIg86kebDRx%2B8b98hDXhFrMCg0okogCDj114adIvdqDvtXO2uJ2IFrAN4jpW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a140b458ebfa3181-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 5537\r\ncache-control: max-age=315360000\r\netag: \"6a3e3652-4900\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 08:20:34 GMT\r\nserver: cloudflare\r\nx-cache: HIT\r\ncontent-length: 18688\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18688,"size_decoded":19452,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 431x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8d9b3ce81ae373e2a8e59e64f695332f","sha1":"0fc1e28fb38cbdc4b4c4435ae9df6393ee8905d3","sha256":"c8272bf27c8da829494c3a408dd276fde3d46ad75a2232f1b1c1d6e37a509ed4","sha512":"5898ea657842140413fdb04429c0134c48f3e8512ebd899356427b312c3f562bc611e1aa93b13f00e07f578c9870d64de5f15928c2657b03026b5f2f76a5eac9","ssdeep":"384:GzYbQ41CF2RviAnwqOUUtn6xhyGPZT/TYulosRq/W3Jy1p5O:KoQ41s2RviAnwqrUtncy4TbYuqd/W3JF","tlshash":"8882d1e4ecd2975e9e491c67e3d820835cbdca7bab238403202dfe69691c61016f739d","first_seen":"2026-06-30T22:46:26.706141Z","last_seen":"2026-06-30T22:46:26.706141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/live-22.webp","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.834Z","timestamp":1782859559834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/live-22.webp HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eQ%2B3nkUvz%2BXKwQuw5E4ALHtkoQHlhHkEBDMEsWIAGfcP840M0AoIS6Yd9MZRSS5sdB5YwELO5TX4%2BkR7ChaTqggGXO94wZmCD23Ben4OnqoYN8%2Bm7yvORBxtpIHIUWyk6rDiYhCZ26LZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a140b458fc023181-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 5536\r\ncache-control: max-age=315360000\r\netag: \"6a3e6138-61da\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 11:23:36 GMT\r\nserver: cloudflare\r\nx-cache: HIT\r\ncontent-length: 25050\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25050,"size_decoded":25816,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 431x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"355779178cdc3a51510c3fe39284c3d0","sha1":"c81146a092f1da94bace842500f4c55a31c03cbb","sha256":"6e24b7234a246e690297f1bc85d0e67962e1342eb5b4ee300a1aa3e2e92c719b","sha512":"399b68d2c2b1bceed306d3f86665461f66cdd612877a29bf63f0826d26243f9b215cc514d00142210e2843e6fb9ec004a066521221e1b72a8dfdf5c75d244895","ssdeep":"384:blEbMkiJWup/1TZ/6IiY0kAmQAVlAhEMs51h2hxUhZHBNceiFwOUW:b2bfiouN1TZ/6IiY04fAns3MhxQwe/6","tlshash":"12b2f29d11ffb40bf899f48807ca9035b19e08a7a409bea1b9704efb54360dd7254fb0","first_seen":"2026-06-30T22:46:26.707025Z","last_seen":"2026-06-30T22:46:26.707025Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/themes/jupiter/assets/dist/fonts/montserrat/montserrat-regular-latin.woff2","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.890Z","timestamp":1782859559890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/themes/jupiter/assets/dist/fonts/montserrat/montserrat-regular-latin.woff2 HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/wp-content/cache/autoptimize/css/autoptimize_246edab4cd48d731727b093099f95d9b.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-donor-domain: fireball-casino-pl.net\r\nx-proxied-by: Cloudflare-Worker\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a140b4595c0c3181-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4432\r\ncache-control: public, max-age=172800\r\netag: \"6a326e42-8144\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 17 Jun 2026 09:52:02 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CBw5nOnIFiAf0IPIH06ri8QMPPmf69t3HFwPIrJ2pHdfFgMIyY1la088JqqQr%2BisUupPR4mTkgoeyTJ%2F%2FlDRuQmvDhPNXkacLuFHFyrHLsR4e6gwp4tdh0dbvo2gWXxSEpZKTpfgZmUUvY41MOWbqQ1EcDth\"}]}\r\nx-cache: HIT\r\ncontent-length: 33092\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33092,"size_decoded":33985,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33092, version 1.0","md5":"057478083c1d55ea0c2182b24f6dd72f","sha1":"caf557cd276a76992084efc4c8857b66791a6b7f","sha256":"bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b","sha512":"98ff4416db333e5a5a8f8f299c393dd1a50f574a2c1c601a0724a8ea7fb652f6ec0ba2267390327185ebea55f5c5049ab486d88b4c5fc1585a6a975238507a15","ssdeep":"768:c+2lFKscxQAuDJ5m/xiYEQNMJjFaf0TteqKt:cZlhcxJuDa/xiMMJhaItzKt","tlshash":"3ce2f14a8cf7c02e72c5e22015d577c0d0a266e87ace9d4670af4478af50b47b33f9a9","first_seen":"2023-09-15T00:36:29Z","last_seen":"2026-07-18T04:30:49.205091Z","times_seen":47914,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/icon-slots.svg","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.909Z","timestamp":1782859559909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/icon-slots.svg HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a140b4597c133181-OSL\r\ncf-cache-status: HIT\r\nage: 3100\r\ncache-control: max-age=315360000\r\netag: W/\"6a3e620e-783\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 11:27:10 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GI4wYoNScd4oSb%2Bfob1Jj9zNWVUw5yoRqkBfiMuMzQOkgua29O5OyH0uaH3F3fUchD6lvsUyq2mr5%2BASO4Gca2hlFmKstnYyVxrkSUMl0LRqJO0jUs5iGCXTW3158qDGpDgf7foHgTii\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1923,"size_decoded":1839,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"509fa9b78e1392c9fd46f66d216dc8a4","sha1":"c23e19bc5c99522af8f14794c3e76eb65999c3c0","sha256":"e011c87a89b795e5c99feb69eb18527b2442fd14f7b6a4bf3503d1901f455f1e","sha512":"fb400814c0ad9ab8b585bbbe2838ce130b3a25d2480419dc17e6d0c813d2aa603b41ec43c7be3a979f84f6966ed1307a50369b64b3986f9a9f692272bc68c6fd","ssdeep":"","tlshash":"ca4184e653ecd4a4d207cf8487479d29792fb4f32e81ca6897e196e864282cf0886cc0","first_seen":"2026-06-30T22:46:26.708536Z","last_seen":"2026-06-30T22:46:26.708536Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/cropped-fawikone-32x32.webp","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.980Z","timestamp":1782859559980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cropped-fawikone-32x32.webp HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mOJwoHD30oMAr9bdrzP7puA0ejsEGACTLSUI4xEZJtjvSTcBGaRevI62lpWKpQcZuSF2ewGMAGuPTdOma98jC%2FryOHGdiez9hTYGcJnbv3jQpfU8rFVlBzBxavOP%2FNHGAyj2GmFVNtn8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/webp\r\npriority: u=6,i=?0\r\ncf-ray: a140b459ec323181-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 3101\r\ncache-control: max-age=315360000\r\netag: \"6a3e31a9-35a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 08:00:41 GMT\r\nserver: cloudflare\r\nx-cache: HIT\r\ncontent-length: 858\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":858,"size_decoded":1620,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"baf12c63bc37622af0bbf7a29be85a26","sha1":"5f0b22ebcdfce246a4e662a156c55b5d687e11c3","sha256":"c18aee70577a0192e904de5d41b8bd9aac6104bf76e5ca088c62d0b964ada1a2","sha512":"2a84c46edc562198fea8ff7d1faff8e339329bcb43a37524d010716aa2874e07e5b0f5aa823a21d81ec66d3a4519a6632229a9813d51436c32dce41ecb92c263","ssdeep":"","tlshash":"7a11da59c4e327bcf162edf077384a0c5379d08fa421c4f080e4a13504a3511cb17b88","first_seen":"2026-06-30T22:46:26.709473Z","last_seen":"2026-06-30T22:46:26.709473Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/slot-8-431x450-1.webp","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.816Z","timestamp":1782859559816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/slot-8-431x450-1.webp HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pzyg9JxU6B8rdWUplc%2BR4IAXQ6QINI%2BSL1uBsEDezkiqccb0vZws1IceD05tHQT6d0bCRtJE2lFlNjex5fkNN41blQyaMz5rJsVgnNaYUUAJRz78A8qX5FHX6N0rNOACpt%2F4ggHgr9X8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a140b458dbf43181-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 5537\r\ncache-control: max-age=315360000\r\netag: \"6a3e3614-4af4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 08:19:32 GMT\r\nserver: cloudflare\r\nx-cache: HIT\r\ncontent-length: 19188\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19188,"size_decoded":19952,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 431x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"98c7371cbc4769e441a5db05a79be83b","sha1":"a394fbc7882032350cb174aa39b44cbdbc3a45b6","sha256":"da31400b2aeb2df3c26da0c461fa7b12ee7ad9e8e51a6e5a134307066a141622","sha512":"0a5ce2099386dd08d153481681f37b8fd0d18f5373ba4d13b99792a625cef967b7e4c5246a0007ff051c9b09b6c13ce6d16aa82b1641d77f69175f5c45b3daa0","ssdeep":"384:dOqgLdN9BEbK0s9MhZNOWs6Wv6hbROgw4qZoZBI8nHeXT:dOnT9mLuOr6GbIVtZ78UT","tlshash":"e882e120262ed4bff76e2e13d5cb29c9bb51beb426fd37f6b0304251116994d8326348","first_seen":"2026-06-30T22:46:26.71046Z","last_seen":"2026-06-30T22:46:26.71046Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fireball-casino-pl.net/wp-content/uploads/2026/06/live-55.webp","fqdn":"fireball-casino-pl.net","domain":"fireball-casino-pl.net","tld":"net"},"ip":{"addr":"172.67.176.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fireball-casino-pl.net/pl-pl/","date":"2026-06-30T22:45:59.837Z","timestamp":1782859559837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fireball-casino-pl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 09:18:02 GMT","end":"Sat, 26 Sep 2026 10:16:24 GMT"},"fingerprint":{"sha1":"05:D9:15:33:33:74:0C:8D:F2:36:8F:53:C1:09:C9:BE:AF:34:3E:06","sha256":"65:C5:13:67:5C:BC:95:3F:C6:8A:61:B0:30:61:EC:98:A9:1A:49:00:92:BF:8E:EB:87:A7:32:41:D2:F3:55:5A"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/live-55.webp HTTP/1.1\r\nHost: fireball-casino-pl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fireball-casino-pl.net/pl-pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Do9SFqiOL1N9mcH5Lg%2BfwCRraoM4ltWUBYpqQOKiq1u%2FSHMraYyawZbKjxDtt1tMO3UWalRnjxw%2BC6Uw3lVFEmy8NS4dX%2Bh7q0I9baqVOIQrC5OMjkgThfnjVixprcjanPITdOOAmEsd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 30 Jun 2026 22:45:59 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a140b458fc053181-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 5536\r\ncache-control: max-age=315360000\r\netag: \"6a3e6157-4edc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 26 Jun 2026 11:24:07 GMT\r\nserver: cloudflare\r\nx-cache: HIT\r\ncontent-length: 20188\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20188,"size_decoded":20954,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 431x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"69d728dc979ba408aa8560634511488d","sha1":"2acb97709e7f1e90966dd4330c0665cda4cbdec8","sha256":"5d6fd448298dcf8c47a1d096c2fb07bef155135974f6d8dc70fcea460ca13f83","sha512":"a7a9fdbb48d7409b42e0244283415a3d339521e2e335ace5924a74f533bd41a60040805be4934e2a43d2ab8b4142fde8db50abc5aa30b1056d424d7463a223d2","ssdeep":"384:+TmHb9xQU6cgfkumcsbyOxNgsHJW1xJ4InjTP8NeHvE4klHcS1:+i9xQU6cikumcsyKNlJEJZXXE428S1","tlshash":"5392d0b9f0067d09d9607beca90f939574281bf0ce0703576e6386da49cc7b751856e8","first_seen":"2026-06-30T22:46:26.711395Z","last_seen":"2026-06-30T22:46:26.711395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"fireball-casino-pl.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}