{"report_id":"66fd787b-6268-4c55-83aa-b5a01851cb6f","version":6,"status":"done","tags":[],"date":"2026-02-14T17:46:02Z","url":{"schema":"https","addr":"duospinfr.com/","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"104.21.26.132","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"duospinfr.com/","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"title":"DuoSpin | Connexion","dom":{"size":31029,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10420)","md5":"c9a714ab3ae49ee260a26c0c4d634deb","sha1":"d4bd6513d23442fce7b7c807e15a1a1d33974fb6","sha256":"b6d5350b1fd4055dd57b5128a45218caf6a4f63489bc931175d262f954148b32","sha512":"588fb29f439aa1558f2ab03a0e2ae8cf4e1c895c80c022f0e19762187264357224f955f5ce1e80229bfb449250bc5dac3640532081b07dc555944aff33308e3f","ssdeep":"768:SiOOMRgw26dIaYIajIavOKAl6xfKwoeojJmyzW5mlvEDY82BRfn0/JglCRzVNi11:1OOMd26dIaYIajIavOKAl6xff7ojJmyT","tlshash":"9ad240f7f4c0197702df19d2abf0678a7097811edd22d82892eca3d65bd1fac8471a45","dom_hash":"domhash5b2195f45f70f7b14e25382788e5f124","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"duospinfr.com/","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"104.21.26.132","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T17:46:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"duospinfr.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-11","domain_rank":0,"first_seen":"2026-02-14T17:27:42.601876Z","last_seen":"2026-02-14T17:27:42.601876Z","alert_count":41,"request_count":41,"received_data":1809196,"sent_data":18636,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Hugo:0.147.7","description":"Hugo is an open-source static site generator written in Go.","website":"https://gohugo.io","common_platform_enumeration":"","icon":"Hugo.svg","categories":["Static site generator"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":4,"received_data":197468,"sent_data":2212,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"duospinfr.com/js/popup.js","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"183e1cc174d7b7acc618c44ce055883b","sha1":"562cc8cc0418c29acb7026deca1ebadf4fbebcd8","sha256":"b7d1b89470f38732f1904276b67db5db5a203972a998c4901d58dede62ce4481","sha512":"f2d1218a69e5525f209c7065c9ad1da626d2dc3b95e97c4c88387b31caaefa0fc04d473fe3ffa743fed7341400f57057e15be1871f3e29bd7959fe757b39b756","ssdeep":"","tlshash":"1101245e79f03671a6ffa63902ee614932325052340ace61b9a8da412f60f498c77ded","size":697,"data":"","first_seen":"2026-02-14T17:27:48.770935Z","last_seen":"2026-02-14T17:46:04.320353Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/js/minify.js","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d39a73c3941123f70896b88ed62de87","sha1":"bc6d32c8e9a427f03f3814709264b630f49b348e","sha256":"01916ea19af404014500abca41f78d98b01d42c1090551524e93c2bcbbdc3e74","sha512":"2d1886ba43e46181b22376b8494f1fb635c5b300d289f06fc14c26cd5a71ff731288ce5f81ae8e4dfadf3a4df4d9fcb45ad008710fe6b86a20414d64f09a948e","ssdeep":"","tlshash":"8311e19964e3367f146724b85d2bfa0936271887205ed4617d0c89803fcc72d49f7a8f","size":995,"data":"","first_seen":"2026-02-14T17:27:48.7935Z","last_seen":"2026-02-14T17:46:04.311772Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f09791901694b5c288386618db0bfb46","sha1":"0417b3d44fe5fdef815dfe617a1cb01b287009e1","sha256":"fb9c950e6764f74bb558d8b95150750c8a62633b7d09a06d695cc38dc912e52b","sha512":"7dbcc0e492cd4859a5e05ddeefd8014909fbbf3a6d2d7aac3458c2253805d7370371694bf9fc08905ef0c4b6b5d7b5bfe0df1f962b39a39614281c5b43af1fd5","ssdeep":"","tlshash":"d0311fa74614063600df8b9ab3f817c17eb4149eb882c44126bf9ccf192ad916331df6","size":1753,"data":"","first_seen":"2026-02-14T17:27:48.81347Z","last_seen":"2026-02-14T17:46:04.330896Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"duospinfr.com/images/games/Jackpot-Raiders.jpg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/Jackpot-Raiders.jpg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 63519\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"72df2e7fbdb6e1f7ec76b1275a54f919\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IDJW7%2BuqW%2Bt8LZVWLF%2F01w3WptRDuEy7LVMX3q8%2FZrSTmNzx6p6rURXG5SNeYdbnOUEfRk4jtJ2vrTBtsCRde9%2Fkyx9YyXsehhlfzVo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde61718829902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63519,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 530x700, components 3","md5":"98ebcc48b48fe10495beb88e8c2d0775","sha1":"67d0359222bbf662d41485fd9cc8e14badbb9dd0","sha256":"aa3c80584a45dc2ac779bad98625cc8f16f6d551b2b715fb042fdeec0ca675af","sha512":"02d5d18c168d2d8a84c2cb5ffaf377f834ed57b7faeef5c8bd495ffda9fdfcfb21b3b90e629370094cd209c5fc605c7d92a7320719d4de3b23895c4112790750","ssdeep":"1536:Rr+/UOWs249vbJ4jfF6J0ETSgsy+JIb0JEAKM:RTOdXv94jG7Gy+Ib0KAKM","tlshash":"305301eb1987d839e040aed99801dc82dd0f0f91b6af542df53af31572d46656d1e8b0","first_seen":"2024-10-16T21:07:46.371428Z","last_seen":"2026-06-02T00:56:56.995093Z","times_seen":88,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/games/Blackjack-Firstperson-Thumb.jpg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/Blackjack-Firstperson-Thumb.jpg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28749\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"ce98efcde2e2c076eeb4540465ae77b4\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VwY%2F0WTf8EL7HDap1jVTEUvUk33ZgsUwSVBKT7aseszir%2B%2BOoB227XNjFAOlPsifWIKWjpungQsxH35wc8Q2Y6zys5Sev8yWG1FfrWc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde61718837902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28749,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 530x700, components 3","md5":"a0bc1acdadcf87bc2bf6e7ea1becd923","sha1":"40730ef5c3c565d425a9735a79835462e21ef7b3","sha256":"69b225c1a8af0a166775a4b7eb51e065ccc7aa7ae24f41653318fb1cb5350e8a","sha512":"60c09d6e783697f9716eb5f32f407820589a3688a5f431b3365e045e23d17982329129957903250b3935e59047c0d579967d6323aa35c2137be41bc5cda4842b","ssdeep":"768:QRL1xXhNDnkoNi/Uch7L8CucyLfaFpcad9oq3OqaSYK:Q/in7LN2CFwsOqaSn","tlshash":"58d2d03d3a92367cee70f678656dd27230802eb17dba842c0959c75ec030999ded7257","first_seen":"2025-10-25T17:20:34.143256Z","last_seen":"2026-06-02T00:56:56.972439Z","times_seen":81,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/payments/skrill.svg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/payments/skrill.svg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=21O6VZvowee%2F18BL%2FRQBlqMjP1uG6Pb3YF%2F5zQ3HbYA9s2fFs8dQNXMbj%2B7NLoBRQ5jdpVH4oalfgEJRuo%2BjEG%2FfZWzllcsgJwmThwg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c383bbafc4e387e9ac1e3f93c6ef4eb2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\ncf-ray: 9cde61719863902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2305,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"208edc90dd73f021103a210703e102c7","sha1":"d11bbc8baace1b417473da3a2d1fcc201193d2b3","sha256":"9001a7db1e32b5f39485938d85fe8006d91ad95e814d73a43f51b72aedbf6228","sha512":"079321ec18bcca1323bd3e0df5262f1f8938bece1e9411d7c9a960dab846644a33a27793ba611607efd589356f049da3cc9cbf00f15a55f54aec023bc0ce51b6","ssdeep":"","tlshash":"5d4102e53645e5f19609c3bcd33ea4e2713325fd3521910c8394bd56b905a3f988caee","first_seen":"2026-02-12T20:34:35.098215Z","last_seen":"2026-04-04T16:38:40.894634Z","times_seen":28,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/providers/microgaming.svg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/providers/microgaming.svg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fcVAnIBgrzWOZZZ9WlE6CJTKBh7XzTUKO0gOM9gLlMMTcopuk41CbtZARwd38qdVb2nQrIcrKN00LVIHX8P9iYn%2FDftXbGqVcPO6cRw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"99a9db24df5003c9e1cb54d2bb66a99b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\ncf-ray: 9cde6171a88d902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8846,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8627ad86e074f02056ac06371fca206a","sha1":"8a003305e15cf459f027b164bd57b1ff055ba779","sha256":"4747e6b4b094e504bebd08cbb007f48555e8b4d30eb1fa6ff2099b5f4855feb5","sha512":"845f562f70c5bdaed6230d10f63d4b8ffacc90921ab2fd78be366d905771f3568a24c2c87f4fc68eee3901c0526dc4f5171aaed2fd782d0c08488240253d7866","ssdeep":"96:yw4f8bZk9CyK2zyI2OiadJdXCcM0ES7lQqPs9DtZ0b0iBvRZJmk5PWtFXVRW4tOf:C8bGCyNGWialXnBDP2GnJmkKn5DYv","tlshash":"45022d1ad3099a3bfa758118cd9024b831e5c6d7e0b0e3c0a2667f2de65ccd2985d7dd","first_seen":"2026-02-12T20:34:35.071445Z","last_seen":"2026-03-28T02:06:48.936391Z","times_seen":31,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/favicon-duospin.png","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/favicon-duospin.png HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1463\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"cc16a8ade414ec4f0248105bfc563f74\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rjIw926Cxf3CKLMOAjOFamExWsN0zdq1gr0yYsyrtZHli5jLYAV8MaZe1W8HbWNQX6zjKAfwC47ka4yFjOKsPVw2C%2BuB61OEwPI7MVk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde6174c85a902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1463,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced","md5":"40bc16183df83ed3a7389ff8267128f1","sha1":"22557b147f7283d97dea69705a5cda257cc38be6","sha256":"49ad39c46a6f88f177a192e05666f855c2d625754926bb81a12447c05aeb7e77","sha512":"bf1cd5ddbeb778f18373eb4d797759d264fdb97185d5eeb9a1192ee2c1437e933b6ce822d292a859ff6faf4a335df669788543d5f254e3bfa610e21fa7d87bda","ssdeep":"","tlshash":"2f31e63813e0862dd2851453ea2d9af18dd98bd0e4f1dd4b23c2d03dd8e8a8085c9aa7","first_seen":"2026-02-14T17:27:48.763177Z","last_seen":"2026-02-14T17:46:04.282184Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 17:45:41 GMT\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-06-08T09:49:26.825705Z","times_seen":29579,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":203,"dns":1,"connect":8,"send":0,"wait":21,"receive":0,"ssl":217},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/ico/croupier.svg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/ico/croupier.svg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tZb9RbIDNR%2BnFPcPo0BG1mpWGn4hFe1xitvwNU5qp98nwv01ghmUj3vFGLhyo4RNFdsKgvN5wA0MZ3PjzLdhEEFGQo%2BaDWV%2FdM8oaAI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"99339a299d42a51fea24dd3e049feeb9\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\ncf-ray: 9cde6171880d902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8866,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c34159a8744868aeedef1e64a454729e","sha1":"1b3aa7fceda8c5eaca76afb6770ef915c3c42eba","sha256":"187571a6d58376c9ce570fe18a4618b80067465a93117501c3f5cccf428b6a05","sha512":"7b14c5df9f7bf7c85aa9596cb68a6bacdfaefd068514f106d93b2e4f806de45c4044d1b84204acb147ebf06ba537dcf4db3441018ec5405969f5b6c727ee5529","ssdeep":"192:PuDfrzY877G3liPFN0mZJ6A6EcMXXpHaEhzB7cyjZ/6zWPOOk2i+0rGClz9ormAV:PuDfrzY877G1eBh3dNCkO+0rGClRSmcJ","tlshash":"dc0274df53b482b4384c53784a772fd333b594dca9a2860c933f9d546942fad272ca88","first_seen":"2026-02-12T20:34:35.123555Z","last_seen":"2026-04-04T16:38:40.898912Z","times_seen":42,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/games/Starlightprincess_Thumb.jpg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/Starlightprincess_Thumb.jpg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50241\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"ff359b8eb458f5cf9b3998a7726f9ff9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LurOevv3P%2B4CwdbxYgGuCqh0x1iDlL5sp16qMceCRS0zToBz%2FarMGKgE%2BiRdt%2By11RW9tKopShAn%2BLZqPhr8EaddZLKd9bJ58Oij5u4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde61718811902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50241,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"ad6b42646eb1d8bd39738c850813db33","sha1":"d9fd192e14b6608c3581eb7bf1a786e413abd1ac","sha256":"62281a2cd19904856bc9c8260386c5c4c43cb323dc47cc0283ac2c23f95a4b9b","sha512":"e7b9ccc9f42970928e3955f9c1129d580fec9d85b5d951516aa2b3d42a952489c19f09b26dcf710dbeda952f70e250038b921efbd185615d8d474066e5de96e2","ssdeep":"1536:FpwiLTkZVlwlYythkT1KjwzBH2n4jeAV1GCjNF3EYAJi:vSohthO4j6524sCxui","tlshash":"3e33f109dbb2aea8554ee17c0ce944bce863d38e0851395ebc8dc8670f84791d22d5db","first_seen":"2025-10-25T17:20:34.088619Z","last_seen":"2026-06-02T00:56:57.05148Z","times_seen":106,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/games/Big-Bass-Crash%e2%84%a2-Thumb.jpg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/Big-Bass-Crash%e2%84%a2-Thumb.jpg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 44629\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"5a91624ae50bd58962c54bb300b12e83\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bS2dsXasjpZF3boCwb%2F0ko5AOMGQTYgFGpSx6DISBp4laY8GvsNL%2Bgj8oEhcmlOTDBe28lRw%2FMZNSGfDwcULV5%2Fx8ChMFp7PH2l6FtU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde61718817902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44629,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=176, yresolution=184, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"3a2d7e7469683bd51c74af1408d81fdb","sha1":"e892892266d81b129122e49c2dd78563dc03f71c","sha256":"9c45dfaeb17ce8bc03e22c6f960b8a2febc855ff8732c7356107254de4ccb835","sha512":"69d72e3e69c764a02dbf7428c6c41e8bcaa4da78e252a0f74023c040ef4f6988d63d7c43d3d59413f49172f6dfccd85ab7d0aba58a30c276693c994d84551ba8","ssdeep":"768:Ue4YWNygSW+BnRzWXJdqs+yNMbDc7T6yMBW6RIN6OLEx:UenBgLCRz+qs+smDc7T6lBW6GBgx","tlshash":"7313f104b6535822a430567c48a9236bb946bd9bf014dd4fbc8c0f5b5f73aa8c2fb172","first_seen":"2025-10-25T17:20:34.111237Z","last_seen":"2026-06-02T00:56:57.056641Z","times_seen":106,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/games/GoldMoneyFrog.jpg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/GoldMoneyFrog.jpg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35457\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"4ea694878077802e91e371f6498abebf\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JtfiRpVSTBRFATzO276hh9W8OV%2BH1aXdWnP2kZ86b4eYiecwAE5gvbEYeseeqBU%2FSgHYxB%2BKEkHs%2FFQItqN1iFrz6%2F5BXkt4aB6Z9%2Fs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde61718826902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35457,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 530x700, components 3","md5":"59f6ef6b43fc6efaa120ce4b00fefe1c","sha1":"0c83c669e0fc16e00fe9a1b1678518c2d342ec49","sha256":"779632fcd5f98e5e2cdc7347b5277fce1386a86799c455ad397b4ed774a41f2e","sha512":"61a3e1f40af912e71e882b171e88590e7921daa497c763b398975bbe0715dcd090896cc30973d21921c186621c3678a510c2ae2d0a19015878b19041b3d3de6a","ssdeep":"768:HnEZmBkJ+LMstDQhUAwOzSojSdx6lJrTlIV0SV+TUaIqu26nAxaRDIJ11:HRBwattDwwOOASq73l0E4aIqxoir","tlshash":"5ff2f16fd209f48459b0fe75537e49951c1bed286d2d88fa283106b9cace9c807d372e","first_seen":"2024-12-23T04:31:02.910609Z","last_seen":"2026-06-02T00:56:57.040051Z","times_seen":84,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/games/AutoRoulette.jpg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/AutoRoulette.jpg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28336\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"24a90e99a243826c34ce754049b2c30e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UROFZLvdKnjwAmgzVI%2FjNOOubPxMmLrBslNHlewEIRjE31vG5EzBrDVDOWk%2BGix407ZwHHSeY9QDwUidqBKsx3S6S4Kz2x1RzbDwqfg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde6171882e902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28336,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 530x700, components 3","md5":"c097d124538129b9c912a2de092fff0f","sha1":"bb03867d79c276e1867e12ed631b4c9d6f2102d1","sha256":"f05e84bbe3858aab95a2f14ff494ff65e814563277d03795575b6ea3d25d4699","sha512":"d0d318da976715dec19149cf322727e27005429664ee2ced98d4099aa7c85eed5475735321f308d566cf867de27a4bfa61881466e69e1c3a13554565da75c989","ssdeep":"384:glhrffamQ71OvML56WS8KdiH0A1oM9eMWUjfISvzsj7lS+PAdKudx1m4LAfTwUYY:8hjfam0potNMAyoj7oKudx1BAfUUYY","tlshash":"43d2d058fa4db088cc89137830ab176c1d717d10fa2494eebde8ad90bda57dc5ac88cd","first_seen":"2025-10-12T11:44:00.720254Z","last_seen":"2026-06-02T00:56:56.93586Z","times_seen":84,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/games/Wisdom-of-Athena%e2%84%a2-Thumb.jpg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/Wisdom-of-Athena%e2%84%a2-Thumb.jpg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 52225\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"513aa5ab5ba78138f90d828ad03e3885\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=51DwhUEaBZSAue6WO8SnjA%2BdilLXTAN5tWicSxkzLIyHcInJd1rzvvN3kNw1XuUHwkif%2FmLXlpFfuJptrLYWDy1PGzY%2FVQ1lrMeJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde6171883b902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52225,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=176, yresolution=184, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"7083edcdfbdb5012d1af7493d04aedc3","sha1":"9ea4f6b0ec2e7ded434332e19f29d7d1e9e7d5c0","sha256":"7d0ed3e1633fd18009eaaf42628bb608bfd55e117c1e79b4c52b30391e0d1b26","sha512":"a43759a5cb4d66e4b1fc15f2699e59e8ba0b74a62dc112a6fb1512f809c57967f0300190added293cd131ad46f3d8c2c1b8be212c9000faec734d6c90e92d5ff","ssdeep":"1536:BlLW6yT83pY7kRk8nx0HD50EGWPOQQMj+bg0oTT4Lu67:SHTKpOkRky0j6hMZ0Lj7","tlshash":"7c330266b9d072e24a0e72fa7f9e1f50c8540353f9da4368356f89e8cf111416e6a0da","first_seen":"2024-12-07T20:04:01.15003Z","last_seen":"2026-06-02T00:56:57.058113Z","times_seen":82,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/payments/neteller.svg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/payments/neteller.svg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j78IkfpdAICAzvaQ8w1vZ7TEhhcTmQu99PDmwJ8se0uFb%2FxMUomJnVLJJNkDkb30PjpSIC47CvTyYhdGT%2FdLh9HLylQn2gBQ%2BrzwYV0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"930a27e9792eb3ffa1a93bb965b79524\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\ncf-ray: 9cde61719867902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1482,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b1d25ad45e585595252baf3570fbda55","sha1":"ad845f3e6c1474afa5da837ba76ce0b46ef471af","sha256":"8805b62d462d9ae478e732cf37e619a70dcaa71b9517d2e93026cb0d40114c50","sha512":"024e8c89302ca388609e1a9e568c352361358b2f676a24005fc46fb3bfd26d6e84ced5606069d8e56785e650fefd01279edd88c59a7dbbe4b796b66d884dd2c1","ssdeep":"","tlshash":"183132f6b3c1d0b4c501c7bd966ab4b736a7b8ad298dcd44c6d33839bc6541d0989dc0","first_seen":"2026-02-12T22:23:03.065265Z","last_seen":"2026-04-04T16:38:40.896262Z","times_seen":21,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/ico/roulette.svg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/ico/roulette.svg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XdTV1KUOAl2zSWE3ugAO8X%2FTSot6sgSCN6k46UjZXRFvEJKaotC%2FbS1IIUQYWLSHDzFTok0KQZWOUM6obIAhKzfF30Lqv%2BGvjXeU5uI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"caaaa4d22c490cec5094afd19ce1b1c1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\ncf-ray: 9cde61717fe8902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7160,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fad9346b77b0ef29d7522366a7469c1d","sha1":"556a6474b17e664368db296aa4471de2bb799e7e","sha256":"db608ebde6061044a2f9e71f3fca49ef9f0080029f8ad08de6af1f85c9455516","sha512":"939acfcf4f1fc26c5bf5e1b47df8f4b2e18534ae707859459f3e3f99f1b8afe64e1df1843c8624e3ed053bac97dc3731d1d60b2264768401960bef53578cbf2f","ssdeep":"192:PuDulO9qpSBDQtfehWWYG/hsHh18dIl7V0GghjwX2GDDnt/:PuDuogA50oH/hm1kfIDnt/","tlshash":"03e131cf437891e07889277d89772fc333a160ae85a5894cd37e6805a543eda3b58a9c","first_seen":"2026-02-12T20:34:35.076599Z","last_seen":"2026-04-04T16:38:40.888343Z","times_seen":44,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/games/Sunny-Shores-Thumb.jpg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/Sunny-Shores-Thumb.jpg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35294\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"cc7c584e81c7b1d095f5c4b5fdb44cfa\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y8abg2G9WWHwN%2BOu95lVws2TbcVOGqtk7ICLvbYZGrZ78wlYrReCGOSUDg%2BbRMU2tP1a35gthXSKMmPdmTy1g9JOokUC5Tsm8kAcknk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde61718813902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35294,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"e8b4b76f0f09ae7edcac0e2683ce1016","sha1":"effb3db4a45d7599a979966dc3dae8e16ba214a0","sha256":"b62f48d1af718dc79b525739d80d9e65355d26d59100c5e2ced8217154eb8026","sha512":"996357536a02ac1aa5787a8620c0b018cf124ede8eb5dddbfd960cbf195c14c704eadde8b61c73260395da004b755fd6ffb59573b0c5de95711a43ef13e4f802","ssdeep":"768:Xcp/2RuzIBlZsHVFz3ZGxZCJItAtzM8oNyxqup+7:Xcp/Ol2VFF4AiiboNy8up+7","tlshash":"15f2e153bc0138139876e3b464ef589ec4b33191ae808e5db45c2f23ef515e90faa8e5","first_seen":"2025-07-01T16:34:54.194099Z","last_seen":"2026-06-02T00:56:56.978534Z","times_seen":81,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/games/BuffaloKingMegaways_Thumb.jpg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/BuffaloKingMegaways_Thumb.jpg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 62106\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"76da1dfb7485633b20b217c9f863af45\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EqO9FcjM%2FKJwhNkTg%2Fj%2FGLlGncc8W2wB7U6wFWXy8SXLbsi5rVdoK3WQ%2FelDlybS%2B%2F7PBweju4wpLitW5TBwT0PalTyk02xN96BS%2FX4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde61718819902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62106,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"0566fa4ab4540bf1af5c4eaa1ae90511","sha1":"492a8d4ec04501385dc2024e26f9f191d64cd871","sha256":"2eec37122f2428eaf71abe8fa826b353fe08cb572d7011c1d41a125d12cf4c59","sha512":"4bdf4013c6e387bb4cecf6f4b58e83ab23b686ee3892485cf5b40f63fc959c9770c83ea1652a8a4b0210dd7b58f6b82e7958da7bdcf6a9e72124fff84526fc8f","ssdeep":"1536:ukJcWfGUDlwpfEJIwYYt4XW2yR7POY1cH+CvTabaIB:FCUDCpcdZoAJm1+6T6vB","tlshash":"a453f1fef4a110049801f0be05c13b52e687e306db127458f9ce5b3a6f59f8579992eb","first_seen":"2025-06-29T04:05:43.392908Z","last_seen":"2026-06-02T00:56:56.987928Z","times_seen":108,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/games/mercy-of-the-gods.jpg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/mercy-of-the-gods.jpg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 160900\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"0650d127fc23ca8db34cf061e89d808d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RsfsBiAKa0mtsJgyi5LI4WzNHgt2H0ZXwEAY8uQ4ib%2F%2Bj6x9ZtJte26AwFompgZ%2Fj61Zh8oEzqayz%2FGDs0%2BgnpnJ%2FC1PmpXhHWaJJCs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde6171882b902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":160900,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 512x676, components 3","md5":"18bbc7bf56e50eed922ec5c5877be0f8","sha1":"b1c129bc1da623d9663c6ef74ed86ad5d31605f4","sha256":"17e14dd347db67462468d9ba7090a068a1c70a0356a2a04f041f647407e37397","sha512":"b16ef16d4ef34a13abeaed1a227e24410833a41cd4dac9720a2ac56217440e7bb1f80382e99fc8e74651843aa42354090b14d8af78862ffc245ac5006d7c40cf","ssdeep":"3072:/zhBxidjJpc3c85ukyJQnAeCT3LHVTQdosZ2yjSP/e3WRulv90Ajgs5:rhBEJReJ+QlCrpTQd3Z2leGw904g2","tlshash":"31f3e0572bf5076be250233624e6af4a5c8f1793e45c50c97aafbc05bf28d420ad3267","first_seen":"2025-10-12T11:44:00.31506Z","last_seen":"2026-06-02T00:56:57.038465Z","times_seen":80,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/games/CrazyTimeThumbnail_530x700.gif","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/CrazyTimeThumbnail_530x700.gif HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/gif\r\ncontent-length: 264265\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"70264887585fddf8a38e4c0fe3b742d2\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ewPhqp2P8NjX2wD1MxOjjV3ghqbmwioXuZ9ATIUCKcfji2KRbhQmoSvirPlBRdMBvMWiPw%2BXH1RdtbHtSi%2FsQDDH2dx06z42%2FHoACKk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde61718832902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":264265,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 530 x 700","md5":"abe7ca9588a8febb89c83e20d8715930","sha1":"e6332e7da35249ddb518707cb35a05fe3803247a","sha256":"b2620a30af5e7b8b69fa237e072a29c5470e99be4b8394f2eda7680242163588","sha512":"30c5799533e4834e01175ab2e85a7aa8419da2c3f4970e8d0ffae468e543667e5a9c2bb69b50b6649ed8415b76048b9ca5aa03eaaaa5232201015fa85415ec1b","ssdeep":"6144:3BfBAMxMmwqoTmxIid+pamIKgJxIqYdRrUKPLb+EJ/Gaz0C:3BfCqoriopamwJyNT7f9/GhC","tlshash":"e84422265fcd82cf4da4c39b6a12773ac74e5c15ed44ecd4e442912b620eeaf0e2d42d","first_seen":"2025-06-28T23:36:16.808364Z","last_seen":"2026-06-02T00:56:56.950308Z","times_seen":85,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/games/LightningBJ-First-Thumb.jpg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/LightningBJ-First-Thumb.jpg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 123192\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"9cc6cd8c1d1b27883fafe6c21650025e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AeYhVeSQQoKLFLOSnXW6%2BsvbRMtGkxqhgbPYd4%2FBGVAGYAa5LZxoWIX9seIxVuEgOzCyxg9WNqM21qxCzBY6ff6JAUqKV%2FQq%2BkamXtg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde61718842902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123192,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 530x700, components 3","md5":"258b832e194b0531db9dfde70f1d536c","sha1":"167dcc2571309b2e2890eb7597c037136643f0da","sha256":"46eb19c1abd43a9dcafb96ab97355fed68423730cff1dc0c9e39857260149bde","sha512":"f21a1ee7ca9469c59b7b0f63d02ac8f112f8cd4f2985785616a70d73095bfa80219dfbaa0640a929c68aea1c0224044cf20ac11f3aff0f8ddb564656590d5c8a","ssdeep":"3072:NEVCb9fZLciQCUbccEn0rMd76nGBlbB+9njr73icmw6zYxgA3j:NEMb9fqiQ20I6nGBltQjr7SFwE8R3j","tlshash":"f0c312d32afd0c25d8db03bd826d6bb422394ba1c6260c94e4b7e15636c46f01fdb1a7","first_seen":"2025-10-25T17:20:34.148903Z","last_seen":"2026-06-02T00:56:57.001315Z","times_seen":81,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duospinfr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 00:51:52 GMT\r\nexpires: Sat, 13 Feb 2027 00:51:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 147229\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T09:34:32.198905Z","times_seen":206024,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":78,"dns":3,"connect":8,"send":0,"wait":21,"receive":7,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/games/First-Person-XXXtreme-lightning-Baccarat-Thumb.jpg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/First-Person-XXXtreme-lightning-Baccarat-Thumb.jpg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50417\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d10f162bacda921e0c469c57e0e6cd9c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FgxH%2F6KKw6UzLZPOQGO1MQHAUUxDYc%2B5Jz%2FyXfkX0m%2F7KPIHQyBhqehqV0iKZYXAdRLkHvuoWzIuM7%2FqwisD8cAtPG8aXrrpkBUsh9Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde61718845902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50417,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=176, yresolution=184, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"4857ec3f1cf4329151f1b5c627a25762","sha1":"9740c3f1dccde0bd568ad6386d287ec8fc6d28e1","sha256":"aa1b3d90538f187e94c7f515e2a186165a21efa771e1dfedd6e15f1b7dc73889","sha512":"d31e59c3754ab08ab8e5503896d63fd2c5a02b3d93236292e1c1d61ae0351adba646befad7c944e3ddad8dfcd0769d1eb26a3467ef7deff6bc08cfcd7c31d13e","ssdeep":"1536:KAbVYYqiqih97CPDYMzk2uU4Og02ey8FgZ2LQ:Zb9Mxk2ulxeyQZQ","tlshash":"7e33f2d3bcc62ed3b59e6df80c5412d948437ad454c9a41733de85ba3b1a4a1f5fe084","first_seen":"2025-10-25T17:20:34.14106Z","last_seen":"2026-06-02T00:56:56.972969Z","times_seen":81,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/payments/mastercard.svg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/payments/mastercard.svg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ttxAX7dvVW%2B4fcCNb62inyCR4URLEVA%2FhBsSno%2BlA66CfCis%2BA95SAvNp3eru%2Byjq19GlEyGuRrOLZXNssZO19Yy8HFstaJQl2r3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"07a14ecad66490a7ef11840278896d19\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\ncf-ray: 9cde6171985c902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6185,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a2aa2a2dc175052b6b1402042d522900","sha1":"c90a514f7955df2c1fd34ce645dd942540936978","sha256":"6b3e25c7cafddb010951cc68b5e2f3ad8612edd9aa9c2efa5d8e4c1079176640","sha512":"e9b337c4a7580d93e6ec9c3867045bd055ef53240b333009670d48f2c43a306b261bfd87a4afeccef227bb0670dc856e950fb923419fc6aeb2fa3d1cc14589f8","ssdeep":"192:dDyVfewVZeyNaAOTRC2iGxS+G4auxqV/r+llwBJ3FYVj:dDWfewUAGRC2WduO/r+Wy","tlshash":"40d148ac15a695f08fc441cc19a04de13bba76331b9c8950f91df22dbf241ec15ead9b","first_seen":"2026-02-12T20:34:35.04542Z","last_seen":"2026-04-16T20:33:03.159911Z","times_seen":43,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duospinfr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 00:51:52 GMT\r\nexpires: Sat, 13 Feb 2027 00:51:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 147229\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T09:34:32.198905Z","times_seen":206024,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":87,"dns":3,"connect":7,"send":0,"wait":9,"receive":10,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/css/popup.css","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /css/popup.css HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aU6H9kfBgFxWNgNBiEdz6VTQejGjVQaSxTlqTJipRhNOpbKjvRsT3t5F0tsGj3lQ%2BThfTUUPXMLEYGJ8yvHmGy%2FE4%2Flzrq%2BKkNybYpg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7484cc2755f234f24e25f1e883af5630\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 9cde61716fc2902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2515,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0502c9976dca3d585f16d58aa0b4b98d","sha1":"a76d901895d921aefbafbb0e20a67cfa0dd400e0","sha256":"cef406f7a1fbe6ad0846a2fbbbb6e74b49f357f0b9d1beb0ffeaf0f930588a8f","sha512":"84d7ef6d6b90a894ade96ac49a66c64001bfc275b87f7376a366b0eaa4d6fa374cb90bf325814781e2814a30260e73a62845caf65b498e3a43b13f52081ed175","ssdeep":"","tlshash":"055123445368212078af969c67a29788537cd441ee06ca3d22eb354c5fd93ecf1bbb5c","first_seen":"2026-02-14T17:27:48.80293Z","last_seen":"2026-02-14T17:46:04.301201Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/css/brand-2.css","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /css/brand-2.css HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eG5bFzCEn9RHdk7KL5ed%2BjYECR0r4CisBvKdft%2FDVrKPifQGmn2mhH1KhIrE9ewhyAw%2FIAFp%2FvlvjmW98W3C2i%2BXQCGnTGa0e7IOnCQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e380e5ec443964f7361f16cbe959992b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 9cde61716fc6902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22678,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"45da78d54817cc2c744030d103cd094a","sha1":"2c5b17707e8b0bff5a53e33a015c27abfa5f7b1b","sha256":"6acefc748b0ca8a5d69115d25ad9f0d913f50684190d8a092eb3007a5972c6e4","sha512":"5695c8098d551ebecd335cbd557f903b441ed8302e58c8fdcf853515455ae04946380b807ad0dca090756600f25e5d6d54b517bd89804f137b0eed05742d3dd4","ssdeep":"192:4mUhb/+ssLBJ8PhL9nQJ8PhL9n0QjLDr4FN8l1djUdzLkHNFJLICXDoLfGRaIr65:bJ87QJ870QDU38l1dgmAmSIrGY8","tlshash":"3ca25364b16472b4a453d1e4aaf78f8d5245d0a0990dc27a7edebb2581ce3fc00fad4b","first_seen":"2026-02-14T17:27:48.805475Z","last_seen":"2026-02-14T17:46:04.303046Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/ico/gift-box-svgrepo-com.svg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/ico/gift-box-svgrepo-com.svg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NkYtqJI6b14HuvJ8abdJGc6oidkQQN3hyzoo%2Bvq4RxiXzgDnvTta57pxsuqJq%2BFShnz3reK1yyFM%2FvrAo9M2NWmGEnQjHf2vxnnGKW0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"274dc40e3a0aea6508d9264d4f1b03bd\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\ncf-ray: 9cde61717fdf902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6654,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"804e0a5e316045006debf1cddc784d25","sha1":"1c126b8452070c8100d83660f28a33c46b59b604","sha256":"3824a152855599f60ddd8eab53078649b9d060ae6fe1925d03ad5f982fd489db","sha512":"047bdc823a4e1c06cfe34f52be3ba3e406b10e8ded06fff48c38503aed10bbc64918db04a28522d87bceaa740ecd16301cd08cf4d4222d3a3fa6a984da01f91e","ssdeep":"96:kdpD3ykiaQ2P+1O3lGYlHIGs5HtPgPABFNmOFX+6TCiTJ0O0EFry:EpDwj2PUO3loGs5+PAnNHu65WOtF2","tlshash":"51d18447876cadab514096a8fef06696357944ba9a74c3c0f36f5e2734078b0940ceed","first_seen":"2026-02-12T20:34:35.05714Z","last_seen":"2026-04-04T16:38:40.935597Z","times_seen":43,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/games/First-Person-XXXtreme-Lightning-Roulette-Thumb.jpg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/First-Person-XXXtreme-Lightning-Roulette-Thumb.jpg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 62553\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"9546680032d1df8506aace0d8bd96c41\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I49AjTOO1ULtYYVc9EoiLALd6RXk0cmDRAKhbdF3yhiS3m4IJux4FF%2BA8DKGBI92a6Q8dfOzYZgMEKJCkI%2FqxMTL8j7UrbYk%2Fs0TIQQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde61719852902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62553,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=176, yresolution=184, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"ae0c96015f0cdf0f51894c631ad3ca64","sha1":"b1cd85cadad7f03bcaa2e6751312569f2f97389b","sha256":"91dbdd3a2814e884d472dcbd0dbc5f91d78f5d06ea251ab1e80a6bb910ace930","sha512":"1763e2f6a44bf1bbf7c936045b81a28150e986d1e72e9535148df42b9e1524e60423b3250e62e7a136472e973d8eff21ebb9dd781231c111603f5c5b0448102e","ssdeep":"1536:eWC/tOlXnT5ZgKzK8DZItihItXiapfTb+1UJBYrWs/D3ymxt8B:ElyT5Zg10y9tia/+rR10B","tlshash":"6153f25a3df625606497b73596d53c8efd668a00b5c1690fb69fcea31f00094ce2a18b","first_seen":"2025-08-31T16:35:31.987671Z","last_seen":"2026-06-02T00:56:57.005964Z","times_seen":82,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/js/minify.js","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /js/minify.js HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gZipEw57J6EW3Ny1Ehuur%2F4EPWZwF4OVDZMz1cLYnZ4Qz28f27ZbYX%2F9WgtObBPQdRrNc8Er3YdKJOpPt18PHUr8yY1k5tJVK9ag2RU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"453ecb4219022833be31f0237cf6bc05\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9cde6171a896902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":995,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"8d39a73c3941123f70896b88ed62de87","sha1":"bc6d32c8e9a427f03f3814709264b630f49b348e","sha256":"01916ea19af404014500abca41f78d98b01d42c1090551524e93c2bcbbdc3e74","sha512":"2d1886ba43e46181b22376b8494f1fb635c5b300d289f06fc14c26cd5a71ff731288ce5f81ae8e4dfadf3a4df4d9fcb45ad008710fe6b86a20414d64f09a948e","ssdeep":"","tlshash":"8311e19964e3367f146724b85d2bfa0936271887205ed4617d0c89803fcc72d49f7a8f","first_seen":"2026-02-14T17:27:48.7935Z","last_seen":"2026-02-14T17:46:04.311772Z","times_seen":2,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/games/Royal-Joker-Hold-and-Win-Thumb.jpg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/Royal-Joker-Hold-and-Win-Thumb.jpg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 45035\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"5814425f555443bf4ad03e8f0fd1b3bf\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tUCT6aeOWhT7zRsqCaiDHj0JlhqB4jBHLsfO7D0ttRm3wMj2BqSh4WL1GL1J7z6duht6ghnXxhHCPrcRSprev3YUcbnoP5gM5QcFcRo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\ncf-ray: 9cde61718824902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45035,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"79d9a0249d2aea8c6bc19421a546cb41","sha1":"dc131dd6b47b92700c3266fa0815f58142da2958","sha256":"ed5ac9c0ec1688f6ad5da213440d4872a70bf129297f48fa529eb2f2af0e8ff1","sha512":"1c8a38f2aacc6f041e446169244e86474752b9d7e347494c53b2dfcd2dfe6a624df95aa58ca4b9936e202480380e4ab05437b805d77511a35bbc2828a662c4af","ssdeep":"768:TvJCz0WqcIfBj4o0Ct259fYpeFya/uG4FTEGqR991c5B+5i1v1j:TvJ60Em8qtaffXWn9ErR99Xi3","tlshash":"8a13f1d07e5270d39db8e7755c0f264e1133913b3490af46b29e819b9f03466bf79a60","first_seen":"2024-12-25T23:04:03.09879Z","last_seen":"2026-06-02T00:56:56.934251Z","times_seen":99,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/games/skylounge_BJ2.jpg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/skylounge_BJ2.jpg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 96794\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"25929076bdb7bc7c509527190492b4b9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lqWHcLADb%2BAvNSuk6OzICvgufnvuxA3Kt6yAPzMFmUByLnvPl1SCAhaGkP83cspTyxahBqi7oHpteW65UMs1Uptc7m5DAvCm16qyM8U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde6171881f902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96794,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"511a00a270fb6839b497efbca28445e4","sha1":"27694dae21f5786df909bca5749200ceb12fc395","sha256":"bbdd6becd6646f5276395955a51667379d26710e6d305c42dd6131888b94195f","sha512":"46c2fcdb0065e352091f43571d5e65237d2298963badea10ae8d2a1478ae8a672e228d987437bc4d00340b9371a4904f34c1cf7cdd8fd2eb22ba4183966242e9","ssdeep":"1536:EFlLW7vZ+wpIb0feD6iBCkJ7gVlkCWBc4COE04UtaK4SIWYcVJHTHXhi:oLkvZrIb029lJU7YceE04KIzw3hi","tlshash":"8e930211a053e4e7733371b58bcb9613d2d6e8425ca1a949b38c5e36dfb423b1ab25b0","first_seen":"2024-10-16T21:07:46.284115Z","last_seen":"2026-06-02T00:56:56.92519Z","times_seen":87,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/games/coinstrike-hold-and-win-thumb.jpg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/coinstrike-hold-and-win-thumb.jpg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36091\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f8150e9efe151dbac7797965a9f6c075\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cfU6rpkaaeMG0%2F9yYL85ZiJbOi0hXGscd9tZAxnXLvd6iSrUfi9q1Or9eKNehcVg4DlmujkCLRcbR5XEi6ghSeFfK10Om0FNs1Sy%2B%2FA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\ncf-ray: 9cde61718823902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36091,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=176, yresolution=184, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"da0863276e6f51c6aa49c181470060ed","sha1":"234e0883b873ced7815c0daa71643e666c325da4","sha256":"ddc5c322ea0e2add6448dd08a843b7bf4232db78bc406ba813a5ff56aa170522","sha512":"5760cad49c40c209aab182c2643cb6b1952d4df5a03259b74ae812596a3af053a375efac32706562c5b0904ba62504a6bf9267cee33224eccee6dda0a5049467","ssdeep":"768:SKDg6TaR245hfviWEhUB7r75+OYllMoz7UgDuqkz7tY/p:SKDNTaRlhXiWJ5r755o3xDZM7tY/p","tlshash":"0cf2f10abec50393bd49d63b1ef8795cc4b248d5a284d11c35bcc2d6af6124685bfe92","first_seen":"2024-12-01T14:36:41.337467Z","last_seen":"2026-06-02T00:56:56.95839Z","times_seen":121,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/games/Monopoly-Live.jpg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/Monopoly-Live.jpg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41630\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"38eac0ae26b3de4809c29d82cc95b64f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LzRoHqjRnFhSmyLC39OTGaUOstBya5jTrlNmdZJVlQ13dNZFFA3dD1qV4ZzB7ajNHPqDaG8el8RQbotpjfy8DmHVrK5Fsa4jQNFzseQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde61718830902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41630,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 530x700, components 3","md5":"105c12e69e56a54623b9b85018e76b05","sha1":"0986d110f554af07ef46ee7177ebedbff1f2baa7","sha256":"e456468db72998d9a07c6c0ab23b13be17578b3303664806a3168a5b5aa28be0","sha512":"eb02466ede928fd1f5c5d8e5eead8e1c8d54acad17762ff9e8392624b90b9164dc36168017bd51fd0b1335a72e44b5a8f3a5f97c5d893223703620439a22b154","ssdeep":"768:mploThqk3DmpY86PEO7nvTnywcpMOJlLZwSP2M/fnaHdMeVUU:mvook3Dr86n7rnywgMkCS1/a9pUU","tlshash":"1513f185fea671a5cf95288b1cc88a8e553749c0fdb3b90cecec7805987133e3572696","first_seen":"2025-10-25T17:20:34.161933Z","last_seen":"2026-06-02T00:56:56.937637Z","times_seen":81,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/games/FrenchRoulette-NetEnt.jpg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/FrenchRoulette-NetEnt.jpg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 48460\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d44be13ea7cc1f1970642394b5afebd6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3LFiAKd4a9Ybj5C4Y8Vky%2FrlEm2zY49SgwJhKH7bi5zetLoTIMMcOjmPH%2Fny9ebBPcvIgFTAM6%2B%2BYaTKT5ntudLztx5IdPR%2FL4aiyUc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde61718841902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48460,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"f5a68ab0a29816828ad2c227ddf99016","sha1":"4599ef3fa081ef3acac9689f24d2e1ca0653d57b","sha256":"0e64877a0943de569e6b3d95ac76504e68816f35b5b5c7be75f5d189e459d75a","sha512":"511656b60dadf6bc47cb053423536f7ab74c26bf8f9b1484943fce0956d7ab7a9d9af29fbe44e65eec5259246cfa51da429567be801cc20e3fd2b92913288fbe","ssdeep":"768:l1IKpY+NDdXmxdosw21xDfc/WoW7bRLC/Z2wv/1bN4hHUoNv7LzLcCbHGiKkJM5I:l1IF+Bd2xdobEP7lCh1tuhnN3z4CjGiV","tlshash":"9023f104341523c2c869e6f81c051b97e92f9a5fb9c2fe4db3ae5a8a3f007f464e7564","first_seen":"2025-10-25T17:20:34.097537Z","last_seen":"2026-06-02T00:56:57.059593Z","times_seen":81,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/payments/visa.svg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/payments/visa.svg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fnAX%2F77zGiRfuY9Wyz8lJNa8i58Xzu%2Feb2m5BtsBsGQx74JikC7oZl8Gy5fu7VgQQpXUFW31mgfGupY80K%2FlaIiPd9ZxCROfNliO9xs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"bcb708c85393e9e1dba2907cd1e66442\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\ncf-ray: 9cde61719855902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1883,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f6736ce7ff0df4d3d9857f0ec3ab430","sha1":"dd1c36f19ba22893996690b18901e2c0b1ce7f1c","sha256":"6e7d0f06ee9e3b4f9beadc767b84ccdc37cd9279cee92edf8e1fa242214460b7","sha512":"0dd3a49e3271f5b4a4346b2b24198b150e02d40128d0edc0284144386c3ea8c9b0d7edd8940878234700669f1d5c325e9568baaab20774c94177ae72d4a26f1a","ssdeep":"","tlshash":"e74164c503f09711644ebe2d9fbbed95221eb1fa64a1488643bfc748d58b9c5ff08024","first_seen":"2026-02-12T20:34:35.083258Z","last_seen":"2026-04-04T16:38:40.924588Z","times_seen":41,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/providers/evolution-gaming.svg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/providers/evolution-gaming.svg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CafA5%2Bi%2FM%2FhOLc21mCBS0T2y0FniXRqx6CKkMi8Jii5uF6wq0rkF51gCZF8RNI8k934xYF3Zu9jXQyHg7b7iBPNipatR7trdW%2BBEeIg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b227f350e09bfca5cecb6290f5e9f20f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\ncf-ray: 9cde6171a88e902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3846,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"447a89b321d99fb4ccec4455c8952802","sha1":"d1ff70055476c7382be4e102bdba9f68e4f0433b","sha256":"a4fe616a28f0128f8a62b7225ce75c5b0c8423a4468538a361a66c0e5d4604a6","sha512":"8f3bc760ff4cf404d9f09e4eb8d9f7ac3fc5e1f9519921f5f96eb43549916b59a2dd1ee2fa5265d7ee2ec4c7788b5ea38c770637b144652ec5910cffd0c011b5","ssdeep":"","tlshash":"03810c5183419773bd55829c8a60ec65b2f52fe6a0a0c3c4ba3b7f2fe60c8c8549d3d9","first_seen":"2026-02-12T20:34:35.109649Z","last_seen":"2026-04-04T16:38:40.909241Z","times_seen":38,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/js/popup.js","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /js/popup.js HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6BWO9O2pD596kXuVpMLGE9tsrCUtgwCQ3t%2B9njuNacJCtqM%2Bk5GkFfEWT4gAC74zqJczafR7SzSianscEzTzbiRDD42dH5P8fnOAokg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"72321f5b60467ed487fb64a0ee11b254\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9cde6171a893902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":697,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"183e1cc174d7b7acc618c44ce055883b","sha1":"562cc8cc0418c29acb7026deca1ebadf4fbebcd8","sha256":"b7d1b89470f38732f1904276b67db5db5a203972a998c4901d58dede62ce4481","sha512":"f2d1218a69e5525f209c7065c9ad1da626d2dc3b95e97c4c88387b31caaefa0fc04d473fe3ffa743fed7341400f57057e15be1871f3e29bd7959fe757b39b756","ssdeep":"","tlshash":"1101245e79f03671a6ffa63902ee614932325052340ace61b9a8da412f60f498c77ded","first_seen":"2026-02-14T17:27:48.770935Z","last_seen":"2026-02-14T17:46:04.320353Z","times_seen":2,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duospinfr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 00:51:52 GMT\r\nexpires: Sat, 13 Feb 2027 00:51:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 147229\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T09:34:32.198905Z","times_seen":206024,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":72,"dns":4,"connect":21,"send":0,"wait":19,"receive":10,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T17:45:40.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J325exg6Pq90EEJn%2BN8Cn1kPDS06UEssDIj%2Bqnr2SeIURHzk4hY7w0il2SKyWSyONK9RjVDrzGRNku8Uvufld%2F8QVDxBJy9hXuQ4b%2BM%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cde616f89f6aa14-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hugo:0.147.7","description":"Hugo is an open-source static site generator written in Go.","website":"https://gohugo.io","common_platform_enumeration":"","icon":"Hugo.svg","categories":["Static site generator"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29909,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10141)","md5":"bdb12e2a0b43a434a2a0ab5c8abf552a","sha1":"fb2fa7e781811317e9ff2f54799ddacba9600904","sha256":"ef45e2add6a1c087d58262be1cd2e820fd59465e0f7da4122568333612076854","sha512":"7815f3d0e1641a4acb0619adc534be7d76bb4669aa28d99dbf4a9fc7782e7a2dc8568038a9e2f12fc901dfe0b3d865052119fbbcbe2c3ea328008c2985807202","ssdeep":"768:yoOOPSDqN3i373oHN8/JgVKRwPN+J6xZFao:pOOQqN3i373p0oQN+J6","tlshash":"fbd252f7b4e0143723db19c1a9f0776fb0178119dd62e42092eda79e9fc1eac8572a42","first_seen":"2026-02-14T17:27:48.779323Z","last_seen":"2026-02-14T17:46:04.321994Z","times_seen":2,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":46,"dns":18,"connect":8,"send":0,"wait":16,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/games/VikingRunecraft-Bingo.jpg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/VikingRunecraft-Bingo.jpg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40620\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a9eba92c0b809c97f9d94f99ebd2e123\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cL1foMwQFF%2FddVxXO97i9JUcxhsCtLMzJB0VTTaw9GV1QzynJ8UKCtLPwAPaDRUxUnNnqhnU%2BFi2pk6pn7cIGwjnxxHzxMj87V6L\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde61718816902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40620,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 530x700, components 3","md5":"6ec9fc54e9cad332979c7c27655e2c30","sha1":"0d57d85f2ca989fa0e7bcfd6f49ceb60f101de07","sha256":"c8238e900eef266c9487cfa97d510e37a160511db355a9a54bf34d856e18c468","sha512":"6beec449f4e03061460b0248d3c9eb99a731ad1c50cb57f9d19a07e046b38e01e6f2c3c9fe41a67a5d1f8676524acfd8df0554bebeb681e12fc762973c4fe767","ssdeep":"768:0DuhSACBje3GEjknjTKnPohfbl3Furpq8pjgPNqJBykV0XnyjKhqDyz9BW:0D+C5JEj8jTKwhfJVapqcj6R+0XC8qDR","tlshash":"8703f2453a3623141aa93eb4a3f9693bb50d3185ea3036afcdc32cd5a887d643c0f535","first_seen":"2025-03-12T13:37:00.527844Z","last_seen":"2026-06-02T00:56:57.016806Z","times_seen":84,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/logo-duospin.png","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/logo-duospin.png HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 77246\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"69aa37edc44b36fdbf055b8f95682874\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hxpf8VlO%2FoYmAMydus31N6kO9C4u0z6Cpih2DOHAAT0RyOGGUzmrFtsTXkXEpo7Bqckyd%2Fk1GgKnTXE4gOqG0aNx4e6ahJ4WkClqtzE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde61717fd8902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77246,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 441 x 150, 8-bit/color RGBA, non-interlaced","md5":"1248db549a1625458e5ee9a1e30d4920","sha1":"69961c5cbf648f904f58155c2393fd743e989936","sha256":"5cf86b5bf7a5ba5f025a8dcb1bbc13c83d4bcd9cdde0d2cbaa82e738f7599164","sha512":"609711e600109df15c52bfd975c2b818a5e82c3f408015b4c29a6530ab38d9f4f1b90e09db38af8620bbc42526c212bc0fa7a63875d7d60ae3bd0ef24f322817","ssdeep":"1536:RLZmqxrL8JyrhJK5NkKKRoJDCSQTY7uG9U5MHvkrFPFT:Rtlo8lSNZK2JDNQTzQeMcJV","tlshash":"407302d1a117d20cb57dda7d4d07ee258c81a59cb2413a94e286081eccadadec1dd1fa","first_seen":"2026-02-14T17:27:48.80757Z","last_seen":"2026-02-14T17:46:04.324641Z","times_seen":2,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/games/Trollpot-5000.jpg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/Trollpot-5000.jpg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 38493\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"3ba71741ed28dc4b934eb0d6b0b7327a\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LHEqH%2F%2BHL9MscFdjPnA%2BBwUoQq8zrLgD1%2F2lYJhTPWAfOn5sFz%2Fkuah6yFcbkm2yuTtaLL6fALsS3ucS%2BWdv2prxZT%2FKiT8AmN3B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde61718814902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38493,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 530x700, components 3","md5":"9310a31935ec2988b4f0177ecc2f0a89","sha1":"6fe8c3b06a443778afeae947d4f8d920b360373f","sha256":"dae22e4bc60be8399b1abf7ae33a0d79bf4d5f537c78be1909b4f471d0cb3906","sha512":"8450ee0c4334cb1f8c9fce0746b30ab5aa6eab91818db3f17608f66a98400a78b11af97ab2bcde72e417d3ec14659f9df343fa35d0ea8ea3b5ae5671dd51ca21","ssdeep":"768:8IjbZtcDSuskz9CR2hrpIFxtvRX8MX9+vAjdhXQSjTS9AUj9t1NpE5cc9yT:8mZts+urpIFxtvK4YobwAA1fE5RQ","tlshash":"9803e1b285333d55912975b8f96322d0bc3d6c70405d96cfa611bfaa0422ff79be41b2","first_seen":"2025-06-28T20:00:11.324121Z","last_seen":"2026-06-02T00:56:56.961726Z","times_seen":82,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/games/SkyLounge_BJ_3.jpg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/SkyLounge_BJ_3.jpg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 90520\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"67fba88255feb88c1ea750391532eed1\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4P9QrPleKd0eR5reH3ijB6iEZOqMim4ITVG5Qb18VyQuA%2FQrUSTbRntKIQeMT9vjrkpiISg91TgPvAYJs2Ms%2FAeLolX2gbs9SV7FszA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde61718820902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90520,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 530x700, components 3","md5":"4008418a07daecc10a0ff37c5a48a74c","sha1":"c6f92f10cb875e4841b310079b9c7afe738ad361","sha256":"c137e00ad4116d03c5c13481f26329444bc8c90d70df323d212a430a20b8e797","sha512":"d3b88dbbc2eadec0e512ff1573c1d99590568aa54603920f5420df9533782237e5176a0be2d1462df0de64e421eabcf49715578fa59bb8b2f0446ac373efbda8","ssdeep":"1536:ikrVpC8ssMqmXbd2O8P5RZK5NfG9cuxClpiFlP5PeLPiTwLdoVV1ny5zeuh4dKpD:iYVpC87MVXbdAvZkhuxClpin5W+uOVLQ","tlshash":"86930229a2f97851f70d9d988a43ea0d6bd0773230e2396730a2fef12d214571676b09","first_seen":"2025-10-25T17:20:34.137745Z","last_seen":"2026-06-02T00:56:56.963428Z","times_seen":79,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/games/Lightning-Roulette-1.jpg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/Lightning-Roulette-1.jpg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36509\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1d9761b854b44de2cb7f1d7c6d512da4\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yiTOm5bWteiGFf1hnK56DmKpti1AjzF2MGs00F83q8o0nfwsYh%2FTgnyUVz9QS9SmYxLT0yw5fpjGaQ4lNFwZxS86bApcURHfIA0Bxno%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde61718836902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36509,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 530x700, components 3","md5":"c031c18ff0175baaca7dc816c320e213","sha1":"3e95b77a964e111365fa0652b1ff1d4eb09f5c66","sha256":"805d9cb36e8460b2a1a27a3323515be9a675920c442c27b84cdd5ab832725262","sha512":"db737ef92a2d11e00e648e5b2bdc74b2612e66294f823936a4ae7d196323bc8cbd90ac451d9f14522171885f6150cecae4e59c68b9c879a96d22ab26b57fdfb8","ssdeep":"768:0BFaffAScYojzfzB51dk5KvLvuxdNgPvTyZY2/UzD:0raQScYojz7B51dvvvPvTyZY2s","tlshash":"1ff2f11e9d0c8c6796d2be29a8340029eeed584cf2f04f9df542891ff9e822954752de","first_seen":"2025-10-12T11:44:00.539405Z","last_seen":"2026-06-02T00:56:56.971092Z","times_seen":85,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duospinfr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 00:51:52 GMT\r\nexpires: Sat, 13 Feb 2027 00:51:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 147229\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T09:34:32.198905Z","times_seen":206024,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":155,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/ico/casino-chip.svg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/ico/casino-chip.svg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hF%2BsSi0VXOzMHkd0ToqeS3d1z%2FLOhhqLe0bVDhEVVQ8LnCVuNr4wowYvDO%2BTOFrA9xIsB2qZbDXO%2BziqzPXTLlZfbS6fbs6Vt%2BUqo5o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b81315ffdf1ef83e9543ec136d8b29fb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\ncf-ray: 9cde61718ffd902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2552,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b862880d46e9c6cb854dfc3809609aa0","sha1":"a7c141316152b222ed3e091d129a50c4adcf157c","sha256":"10068bd98835d3dd830a260df5aa1940a6d24ba2207bba462d6b9c8be95b08dd","sha512":"81441e9c6c3e6cf5a73dcf87471808354b9ade213be7e5ed66863dd965c2b4d79c6c6b7759b89cd26aae43abc660f3e9ce6af3d0cedac3f5cad56235c8179855","ssdeep":"","tlshash":"905100f42a7c529c5487f74eab67c891235eb075b67ac9d2cd8f87b880070c8fa47920","first_seen":"2026-02-12T20:34:35.121791Z","last_seen":"2026-04-04T16:38:40.93374Z","times_seen":40,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duospinfr.com/images/games/skyloungeBJ-1.jpg","fqdn":"duospinfr.com","domain":"duospinfr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duospinfr.com/","date":"2026-02-14T17:45:41.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duospinfr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 20:30:57 GMT","end":"Tue, 12 May 2026 21:30:51 GMT"},"fingerprint":{"sha1":"18:EC:27:20:CA:DC:B2:78:6B:A5:08:DE:A1:C1:01:DF:E2:9A:7D:B5","sha256":"10:8B:49:00:DC:D3:7A:4F:E1:51:93:61:5A:EC:01:E9:90:75:EF:4B:09:FA:E5:E8:D8:C6:32:D2:DD:0D:19:08"}}},"request":{"raw":"GET /images/games/skyloungeBJ-1.jpg HTTP/1.1\r\nHost: duospinfr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duospinfr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 17:45:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55508\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a80c9fc4d73ca4cfa5255ca053aff87d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tiz6yZl4VxWJuDZuKZUeqGwtVG21B4hk9wX4X3YxDZgoZVjuT2unNaszyGKxppsoT1SXI4al0mo8yhyNeGM2daY1OpvNKturJzYAY%2B0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cde6171881e902d-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55508,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, resolutionunit=2], baseline, precision 8, 530x700, components 3","md5":"2654a680d766e8e5bbeadc69f977f629","sha1":"3a06c2c4bfa3572b719babe51fa96ae516040a9e","sha256":"33ca681f4a766e2793bb5aeaf0758451043a691a283fbdce9398a63250093459","sha512":"69d970c427d2b0c8f38093b39f734fc8fd6f09e6a7b9f354eed0b590ab974c81fa29c1978e24e917044a2b14c00cd3860ec2eb1a69c0d5bf039b60ab0fa2dba3","ssdeep":"1536:d2EuOdrFmCasgqE5FF0UoE4nPm47e6/2ce:zPPTpsFFeD+SN/2ce","tlshash":"de43f179201a1b815a5ce0f19ef62205a717ce91d453738eb4aeadbec790c83bf1311e","first_seen":"2025-10-12T11:44:00.436608Z","last_seen":"2026-06-02T00:56:56.962909Z","times_seen":83,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"duospinfr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}