{"report_id":"743abf58-3402-4199-bf83-ebbf5c834cb8","version":6,"status":"done","tags":[],"date":"2026-04-28T17:56:28Z","url":{"schema":"http","addr":"savaspin-casino3.com","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"104.21.74.158","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"savaspin-casino3.com/","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"title":"Savaspin Casino : Bonus, Jeux et Inscription en France","dom":{"size":62144,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (54620)","md5":"05a894df780c1e4cf120086d16a67485","sha1":"78ebcaece7ddd0ddaea2061da7fd75f0beb22a17","sha256":"cab12b67d26f8a122ee481f26102d275bc48314b78968788cda26a993d0f9d12","sha512":"0fa102c31ddbdf50fd74d7b7e5503491fe707f80c3c6beddd99737326c01e52580cc0f9679de837240907cd64c0a7f71bd2cdca0dc9250f6308981b2d68c836e","ssdeep":"1536:QEyFXmJ/PoV/aSmhKZpoNPaiUWeavoqzSNXNyH3N:QEXhzfGe","tlshash":"0253193ad4c82a5b52d341e1fe32ef5fb6dc50099219ca94defd8795e3c68a881713a0","dom_hash":"domhash41a192b77ece06c31d8b7d1b3044f90a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"savaspin-casino3.com","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"104.21.74.158","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-02T17:56:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"savaspin-casino3.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-23","domain_rank":0,"first_seen":"2026-04-28T17:56:29.642193Z","last_seen":"2026-04-28T17:56:29.642193Z","alert_count":30,"request_count":30,"received_data":1240650,"sent_data":14458,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/pWle5KpdXotQDmcC3USNB/_ssgManifest.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-06-07T05:13:47.582035Z","times_seen":232243,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/pWle5KpdXotQDmcC3USNB/_buildManifest.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3697e352eb320db171595739e44db16","sha1":"1fa232963f864bfc26cf938ebbd676e994bf71cc","sha256":"0629156c93fdabaaed279370d92dc4cd3bd3edb6387297dbdad95401d3d16c45","sha512":"a7e95aea1c200e14b6ff2106412b70ecef4603b576471a3ae8b5d4b8eb697d69315f491be6e522c8a6ee532d14494c1cb500f600b0bc9c8f2e085ac283f2663a","ssdeep":"","tlshash":"db117182010ae6191de8ed57373f1363bf52c07a663c0ab68bcc1d6c55904575f7a461","size":1014,"data":"","first_seen":"2026-04-28T17:56:34.200327Z","last_seen":"2026-04-28T18:15:55.881553Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/chunks/59-882425d0ee3ddb9c.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"22166e356b0b4febfa952702f5140f9a","sha1":"9668b67c36bd6b43ba30205ca522cd66d8bc75d6","sha256":"50de8542271da522d66b8c565c4c7d599030087ff57b01344f03752f34e3f726","sha512":"8d26026cabd8d3822dc613c9a6089eff0113646dd7d095a902e664b06e12e4aee38a95181416212a02d0a8b41b080449bbd1f362a04f4fe2824dfbd30e29eb5f","ssdeep":"192:CzBOuoWZy1D5lYd3uP4h1LlhQs1fqdp40aHanY7mF9:CzBO71FP4/ZhQtp4rHGx","tlshash":"c562c46d49864dae9abd84e8c427410cd3eca606b254bc60e3b6851371dbedc71b37cb","size":14830,"data":"","first_seen":"2026-04-28T17:56:34.220396Z","last_seen":"2026-04-28T18:15:55.885739Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/chunks/492-27fcff75637ccad1.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33a3b66aeadc3f947af1a3e6b40d8dc9","sha1":"571b79088328bec4ff380e3bdbda28ae5e49b676","sha256":"cedc3412d27395c225ff730e22f06a0a579dff72b81b4dcfd1e9cca6633dbd0e","sha512":"3313106d76774c6a8a8235284cddaeea6ba1e92a25d46cc3dfd438c92115bc818ee82004aca8bb2e952b1f1c4efc0b8ac19758cbe5a13d6e2f4f96d8d5f5cbf3","ssdeep":"1536:hwu9CI02UwAnwvb1gxTdIZHolguxq8fyBh9GpNjpCq30H/atJU71cuz:G3JJk09Icuz","tlshash":"bda308da7361b1b593eb12579269c141e3b608887409842cb1b88cdb697d99c13ffff8","size":98327,"data":"","first_seen":"2024-10-15T23:35:42.529902Z","last_seen":"2026-06-02T03:03:58.991334Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/chunks/546.767fc6323cdbff4e.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dbc38029da6bf4e8577f4ea86070313","sha1":"ca82c27f54ccb29ac2c9bafc04c6daf8bb697fe4","sha256":"cf8e5651bbd6a6c3e0b4ead08245c2038a435f51aebfedbeda73c51e16f8ebb8","sha512":"d111610f37cdf70f5536f4072a26b0793c7c03d0255cc14ffa6a791132b186d7947a57b54f5359596d682538075e3fb42c2bee26aa8690b2b7fa14852f3798fc","ssdeep":"","tlshash":"e2410244f0d5ff60a7bfb0f8866b5466a22f294897980c92f3e2ec4d145028c63b36dd","size":2376,"data":"","first_seen":"2025-03-27T03:50:55.681244Z","last_seen":"2026-06-02T03:03:58.995982Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/chunks/webpack-fc44eebd48639a8a.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"072f6aa9f83fc24c11cdc11e3be56063","sha1":"108267bf46ce61b14c758f6c287ce6de7ed30c83","sha256":"edca817e8125b4510a691f238c15afd5a5f06d598b61cbc74f732e85e8698fb3","sha512":"53b0983fefb5872b277e31b7c474f84c9e72872200d36c2acb5dbe68d1fe4fc03958e8d703402657ce5aa8e4681682ea8d705668f1761caa6b4f1a7a16da488a","ssdeep":"96:5kgj5E1q0nR38PEKjmvPqPS1kks4XNF9VThVHc/jEE2UNSBOK6nRVG/OGfWfSMV4:jm1LndyEMOPNkMNF9bc5NSl6nRVG/OGf","tlshash":"b5c1b59e7294f8b61783a4a0483f905af13b2476781ed4a0870ad9f4bc34a5c4923fe5","size":5968,"data":"","first_seen":"2026-04-28T17:56:34.185521Z","last_seen":"2026-04-28T18:15:55.885172Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/chunks/framework-10ae643bd7ba2303.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91eb10e0c5b60f80501425850b7ebf82","sha1":"8344750bc431fbb9e8a5170a82d08c7664639609","sha256":"4c185f58731fad68b5e3ef26e102ce9b3cb56aa8257d39aead25b675152a339b","sha512":"bae75fd66f5ebfd2cd4b3904defe212456502a8cc1ab092c8b58605c6bdeba1d9fc2fa0200ba9a6699df89af547ba3d51b8783dad8061210ad62f240b6ff18dc","ssdeep":"1536:2YjvmNg6kMuR40esfdznYBSq6vvnwGzQ2N0mIQa:Djv4hudzno6nwq5a","tlshash":"33d308e87996f6516ab311a700af2803733d2a1b280c4d60e215fd9e75b841bb17bfdd","size":141013,"data":"","first_seen":"2024-08-19T23:48:37.498483Z","last_seen":"2026-06-02T03:03:59.000906Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/chunks/pages/index-67c545f8362cb3f5.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"045dc07f95969c2df33cd4a214e83717","sha1":"b89af6510652f59367921b09cf4a68bebdb27dcf","sha256":"9d8c30be80230957002ab1fdbc8babe834fdefd49204879c1e609a5491fa05aa","sha512":"76205eb0e13934fa7b15710243ed9e6da746e20ff36b77dbed304ce80c27d6c9bb9ee005c6be3125aec1b75b9ebde613fe9d54dafae5eea366e872085eb026f7","ssdeep":"","tlshash":"18011298b493be086b2750f8462f310e63be795e153e49a0b25284c83af231d1a91fcd","size":828,"data":"","first_seen":"2026-01-21T17:57:31.276517Z","last_seen":"2026-06-02T03:03:59.017415Z","times_seen":251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/chunks/966-2601235ce9ca419d.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3916183d5387e7871a478a2753108c78","sha1":"d6c20ccfb0ab889c2783026c0faba3360097942f","sha256":"5e1379964fee60bce05cde87c8c634a2600371fa60bba4aad38e1ad9b2737bcd","sha512":"d8900dcd34a78a6964c4deb4f6b17e6af8d6120e7081a62a7575c5238d6c1ce129df74a73a69c24b534e4e770ab7e9cb0655a3871da3ea81f188ab9231632edc","ssdeep":"192:vbZDMNJAQDemeCjuUZXXmwEy4HxpEkduQh:v9ba/5z4kkduQh","tlshash":"95f1c6b27782f90623c5d4a4c17ab01fb5ac9c2b5d0b50f8b569cdeea9e015460a0f75","size":8192,"data":"","first_seen":"2025-03-27T03:50:55.682304Z","last_seen":"2026-06-02T03:03:59.001644Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/chunks/main-69b63e2e16716907.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88ac3c4d4d8044e62af740c79450b794","sha1":"204aee73c4d44e8b1ee68be86228e42488153b13","sha256":"174c4c9955f35a80888ee630b848e2122b15bf6b47baa1c2d3529e924c79bbb9","sha512":"b079ff7c1455a3fe79f8481578928b8d8fa37701e8b15c9d704a393f97564dd9edd1073e69461673a79313c3a0c9fecfd72c9322bb1324b144a8949ce3ddc1ba","ssdeep":"1536:MpLDGYjwpNLTvpKp0Q78ILsDQs7G5j8SCmaoaYCOU:1pqCQ7fLsDQs74VEOU","tlshash":"15a3f9b676d1f8a213cb41d4883b1006f2761d7e642f6045b3eadcd6b96098e90f2f79","size":98298,"data":"","first_seen":"2024-10-15T23:35:42.506487Z","last_seen":"2026-06-02T03:03:59.004649Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/chunks/pages/_app-8e36a52f003c793b.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"848f8d33084b2d45cb4bb58351db8564","sha1":"24d9ab0a09b461bcf74eb809c79106bc8e3a9b76","sha256":"3c4ce24d4eef8f2a6d7b37c4d211bdc3fa884f707211c7027b33792a133d634a","sha512":"11cdebe42de0ae6800085217bdb6ef96b1ac755e03773081e94be3b916c14ec31ed33cac8a45db64b6481e6d2e7b7268a8e9a1e3ae2f026a69cddaf5c5a965f5","ssdeep":"3072:ii1PkPUKsWkGZ4HtlYw0kn5DU+djxlozNm8ad6/QQX+uhuxOEowsB489M4cJkcxU:iiCcKsRGm3dCadhQ7wJNJiRs1+HZ","tlshash":"21a4f7d97282b062839760b6847f010af33e6a98240d802cf6add4db7f7564d9277f79","size":487964,"data":"","first_seen":"2026-04-28T17:56:34.17874Z","last_seen":"2026-04-28T18:15:55.876729Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/chunks/4.ef0ab83598ecd28b.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4ddadd09f48629c3e9f374116952efc","sha1":"c2f02ff2aca440b3dde651ea6fa8c3943179cc68","sha256":"6ca3df6c527ce257de2f605b0ac9e0e82f6db24213a2938f93784db3de15446d","sha512":"c7797840f4f221a322acf08c71ca86d75fc5277b3ae1ec58b8d9996d73fa57aa2342d42e6eb210d6c57cf1539b1fb6d6f7203bebe6a44d6850fa78462220bb10","ssdeep":"96:MXn1AnabFphMV+QB6wghii/eXkJM6cjp1JH1JqRd7jUV1OT0sX4l:0e0hYdTbTIRljUV1VsIl","tlshash":"b8f16481e287bbb5aebb58c2402f850d732e290dc7364cb4f674a8024294cd8b596bcd","size":7521,"data":"","first_seen":"2026-04-28T17:56:34.175677Z","last_seen":"2026-04-28T18:15:55.882833Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/chunks/15.15fac68198436cf9.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7b11e4d68dfd5dfca276735b05d6a61","sha1":"f6cb58ae2b5548287f2d2a12a1312ba8fa9c31b0","sha256":"2cd69c5258d421f4a93bc2890e11633bd9ed5dfe391bc4d4f94033f25f896c8e","sha512":"185f7f4f56114a0ac350b0755b517d4e022b2b132138a6e15fba9ef32a685bf5ce42dcdf10e9e84106d6b5946daddf7a19d0df9ea085116697a1737b44196c22","ssdeep":"96:p+8tQg5U6n2qKoJn2qK86n2qKYcBEOVSL9gHpDeRyJy1yNQ9Q0:p+8tbn2qKCn2qKZn2qKfpQ9Q0","tlshash":"aea16687a0c7f9989197fcdc801a8a5b703f8589b82954f6f960da3d0415ac0b257f5d","size":4946,"data":"","first_seen":"2025-03-27T03:50:55.684571Z","last_seen":"2026-06-02T03:03:20.679528Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/chunks/4.ef0ab83598ecd28b.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/chunks/4.ef0ab83598ecd28b.js HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"1d61-19db97d5ad2\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LhvmdXKh%2FDQXZ4raVIDxXhLTO8uYu6qtGHNXFsmj9Ls8NkKHFKr7gxlFc8ynJfB0JcNYBNGajN2RKp9iwfJjNDyjNdVWLUdtuq%2FGh8LGRGPWZadJxNuXYoKWJSGmk3TAtgjNyLelGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10bae714c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":7521,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7521), with no line terminators","md5":"a4ddadd09f48629c3e9f374116952efc","sha1":"c2f02ff2aca440b3dde651ea6fa8c3943179cc68","sha256":"6ca3df6c527ce257de2f605b0ac9e0e82f6db24213a2938f93784db3de15446d","sha512":"c7797840f4f221a322acf08c71ca86d75fc5277b3ae1ec58b8d9996d73fa57aa2342d42e6eb210d6c57cf1539b1fb6d6f7203bebe6a44d6850fa78462220bb10","ssdeep":"96:MXn1AnabFphMV+QB6wghii/eXkJM6cjp1JH1JqRd7jUV1OT0sX4l:0e0hYdTbTIRljUV1VsIl","tlshash":"b8f16481e287bbb5aebb58c2402f850d732e290dc7364cb4f674a8024294cd8b596bcd","first_seen":"2026-04-28T17:56:34.175677Z","last_seen":"2026-04-28T18:15:55.882833Z","times_seen":2,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/chunks/15.15fac68198436cf9.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/chunks/15.15fac68198436cf9.js HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"1352-19db97d5ad2\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bxiu0QaDVuCb2JILh3idYgMZo%2FNLSUyRWJC6UvX8Lh5BTEqOLzDTLwl7qFL7ibeAjCAW9dlIyxZGqTCZ4Nh4GbyOikJoGOjLCkuixgpRKnVu62Ocf74ZOqLEZM3pY4%2BogheS8yl4OQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10bae724c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4946,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4946), with no line terminators","md5":"a7b11e4d68dfd5dfca276735b05d6a61","sha1":"f6cb58ae2b5548287f2d2a12a1312ba8fa9c31b0","sha256":"2cd69c5258d421f4a93bc2890e11633bd9ed5dfe391bc4d4f94033f25f896c8e","sha512":"185f7f4f56114a0ac350b0755b517d4e022b2b132138a6e15fba9ef32a685bf5ce42dcdf10e9e84106d6b5946daddf7a19d0df9ea085116697a1737b44196c22","ssdeep":"96:p+8tQg5U6n2qKoJn2qK86n2qKYcBEOVSL9gHpDeRyJy1yNQ9Q0:p+8tbn2qKCn2qKZn2qKfpQ9Q0","tlshash":"aea16687a0c7f9989197fcdc801a8a5b703f8589b82954f6f960da3d0415ac0b257f5d","first_seen":"2025-03-27T03:50:55.684571Z","last_seen":"2026-06-02T03:03:20.679528Z","times_seen":146,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/chunks/pages/_app-8e36a52f003c793b.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-8e36a52f003c793b.js HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"7721c-19db97d5ace\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ySnd5sL%2FYYUnIfg%2Fw9mE%2FI%2F1M%2BsbQhTfxo0xSmGTQdpFGH01CSUO5vk8JyLdLJzuCaOwD%2Fsif0w3dMhEP6XDZqcivVmBBASAt18nNn9kDpO74MnogU5G6VOoEqHJiJyS1%2BmOVr8U%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10bbe7e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":487964,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64562)","md5":"848f8d33084b2d45cb4bb58351db8564","sha1":"24d9ab0a09b461bcf74eb809c79106bc8e3a9b76","sha256":"3c4ce24d4eef8f2a6d7b37c4d211bdc3fa884f707211c7027b33792a133d634a","sha512":"11cdebe42de0ae6800085217bdb6ef96b1ac755e03773081e94be3b916c14ec31ed33cac8a45db64b6481e6d2e7b7268a8e9a1e3ae2f026a69cddaf5c5a965f5","ssdeep":"3072:ii1PkPUKsWkGZ4HtlYw0kn5DU+djxlozNm8ad6/QQX+uhuxOEowsB489M4cJkcxU:iiCcKsRGm3dCadhQ7wJNJiRs1+HZ","tlshash":"21a4f7d97282b062839760b6847f010af33e6a98240d802cf6add4db7f7564d9277f79","first_seen":"2026-04-28T17:56:34.17874Z","last_seen":"2026-04-28T18:15:55.876729Z","times_seen":2,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"89fc-19db97d5ace\"\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uQzSMmmpsMYr24a8JkXXTwRZ0pdBxCpDhD1qSYRqMuLTXsp8EmL95FLxiSU5QQXANVSgyoEoShwSxjwrZV7GfZ%2BYgtUbH4fSvmo%2BhiBV%2BsIorNUkIdiimJRh9da4v9s%2Fha5vMFTOIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10d3bcd4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-06-07T00:21:57.731919Z","times_seen":1779,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/css/3bda6d4ca9304bde.css","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/css/3bda6d4ca9304bde.css HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"dc9-19db97d5ad2\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Me3vEHq1a4nLhvsLFofhGRamivzJMy1pSMLJLQLQU1Ht7QAGCXf872OPiqmPMhFhmsNbMwgJRU0JdzgzSJSU2ZZiY%2FULQf7P55xUFWOT%2B6AhUqJAoMZ4tKkV8hCxz8uMvMlowvgMYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10bae684c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3529,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3529), with no line terminators","md5":"01ce09a5b03cf044607a0960b19ee68e","sha1":"77ee0c8a2beef0412c1bf25560a9903a8734e9fc","sha256":"460f6f84ac47584af249e7525a01b93aa6fa2589abd99b25861058a10c5ced23","sha512":"428ac46d7d2015690eeec14942ff4a4220d01f83188ba00d1338949b73d9b25f4c2dc8aedb1ff247a20b160dc4847a4e89768245fa3835d1b1a47e5283a60848","ssdeep":"","tlshash":"1471f21a2e9e7b186cffc81765b26748236cd409cd1712a99013d76e49cb3925bf1b4c","first_seen":"2025-03-27T03:50:55.673324Z","last_seen":"2026-06-02T03:03:20.673599Z","times_seen":213,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/css/02660251b6f4cb66.css","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/css/02660251b6f4cb66.css HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"647-19db97d5ad2\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CwoawOBwSYTkPPt5BACSYAX1YvSt582ubf6Z2zxNGaQrO5oErvEVaJMUJ%2FhJw5labGRpEpnVNbYoZmQd0loOf4hoUDqTkdQeeNeyAvkmYKIqoyNxowwzQHvVyAX4yEfkeG1ZvnRW8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10bae6c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1607,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1607), with no line terminators","md5":"052642617ed7f811791f601117385ba3","sha1":"d69d36b5f6b4ee6ed717ac8b147b1c0d4dac7e01","sha256":"7f8a26b02a5a62e50adc44a3555c0e632ca411c3393431241ca011aa3ae67430","sha512":"64c5c597ed4d4a9b711ce5d2a96ce6d17e99fb4e92aae02c233613e6dafebe3128e57f036638bafda053613db779f9982350aac232c9eac81fbffe26380fae6e","ssdeep":"","tlshash":"513103731678a4387cd5582b09f1a25f3d04ed33ea6f79c4eb31907c92efa5910625c5","first_seen":"2025-03-27T03:50:55.66801Z","last_seen":"2026-06-02T03:03:20.694743Z","times_seen":146,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/chunks/webpack-fc44eebd48639a8a.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/chunks/webpack-fc44eebd48639a8a.js HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"1750-19db97d5ad2\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B4dX0AKY8EPKUrWdcBMuI13U9zeiAkeLWBRd2JUoOA1R%2F15YIhPN98wQXRdkJ7jhyU2uzWWIA9ovAG3xddkSFWJFsJAOXiiweV2yPlkrsGRjZUQCvOLHrd4pMtQ8zgxJaYlnLJtNww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10bae734c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5968,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5968), with no line terminators","md5":"072f6aa9f83fc24c11cdc11e3be56063","sha1":"108267bf46ce61b14c758f6c287ce6de7ed30c83","sha256":"edca817e8125b4510a691f238c15afd5a5f06d598b61cbc74f732e85e8698fb3","sha512":"53b0983fefb5872b277e31b7c474f84c9e72872200d36c2acb5dbe68d1fe4fc03958e8d703402657ce5aa8e4681682ea8d705668f1761caa6b4f1a7a16da488a","ssdeep":"96:5kgj5E1q0nR38PEKjmvPqPS1kks4XNF9VThVHc/jEE2UNSBOK6nRVG/OGfWfSMV4:jm1LndyEMOPNkMNF9bc5NSl6nRVG/OGf","tlshash":"b5c1b59e7294f8b61783a4a0483f905af13b2476781ed4a0870ad9f4bc34a5c4923fe5","first_seen":"2026-04-28T17:56:34.185521Z","last_seen":"2026-04-28T18:15:55.885172Z","times_seen":2,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/css/b8b51d0b3a6f4866.css","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/css/b8b51d0b3a6f4866.css HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://savaspin-casino3.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"1759-19db97d5ace\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qz6lcNWClxPwJr50PSzINzZxqfKL3JnlIqnpLbvLGqlmj0hRry2U2uHEtHoyfxxwQatZQf6e0AKAQjdDMChuZlzFxRWapoJih1Fs0DDglmVE3UYnS%2Bu0ZPy%2FkEcNnpV8F7mrLjhkMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f1106ee04c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5977,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5977), with no line terminators","md5":"ec84f0a7a2055c970d4f253ab08f0c70","sha1":"c5d3245c2d4085779d873705881d9d7330eeaa06","sha256":"6a0b091cfe2a46fb254fc84ca7036ea34c6c542f83fcaf2fda6b54a828c13fd2","sha512":"195afb216b85d37b9d702a5263bd852f66982769652e1ae73285a60c57ff5aa1a34d949a08723746d58fe3e576aa599e0a493ce98fdb7b767ebe32b94f968ec1","ssdeep":"96:PB5mSJ+MbpDAKneQYX6Jl/0hSvRneZ0jVMR9wfX+9Ecl86djPfUQjSf902G:3mUJbiKneaXshScZXRj1zyCj","tlshash":"4fc1e5b30712ed25d6b26d6744a0ee8ccee4a103de33d5b8f841953ccbd96680270ed8","first_seen":"2025-04-29T14:40:21.754106Z","last_seen":"2026-06-02T03:03:58.987189Z","times_seen":264,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/css/dd79dc2c5a9a9197.css","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/css/dd79dc2c5a9a9197.css HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"a112-19db97d5ace\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3LDaJXXiWwoOA2cJNqG%2F7oF2jlS635I395mS7tO%2Bk4eBIoL9ZwDoe63UiUTbfWHQ%2FRntvZo2u6hX1JYxF%2Bu8fSZqhOmgFLCRC82kUqdZsW7njaBq7mvpcyMmtxvgPv7xz%2BODmEC4Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10bae534c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":41234,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (26798)","md5":"93e37c199f0ae59faefffcafacc5f00c","sha1":"a18665363dc58467e599d2bd59c1d63443bf8902","sha256":"d91a05b2ad13ad076307787468b87cd94e7dec4beefa460fb9b6c1e13473ccb5","sha512":"22f1cce98b2a8190e8fe8a83f883915899f1eeed64ebc5006757b2e0bcdba68ac5ef53f2f69439648c2dd3a9d58d0cce4585b5e5b79516718e9e2e3d73959d28","ssdeep":"384:gi4OZg6oxkmT0Ew2zXf0MrREq/XisHZ7aVWMMqLswaDGvi1vPTnx6G8S3yvVQW78:f4OZwQ2x8jeDqeTnwVA","tlshash":"4003c921e619702dd8fbcc6732ca7f1766184402f5950d69fa1b866ccecb9271b93bc8","first_seen":"2026-01-03T15:12:30.994041Z","last_seen":"2026-06-02T03:03:59.004085Z","times_seen":256,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/chunks/492-27fcff75637ccad1.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/chunks/492-27fcff75637ccad1.js HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"18017-19db97d5ad2\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o0Uk4Em8l8pyBJ6LBPQmDfU0Cr7JjBWR2pcEFteRoCAp7ZO%2BBChgMJ6z2LtFg3viOYV%2BF1G5EMb6AV88kCfH8xheooLldfdQPxXlvVn%2BSplDpA8GCMEuibcKoXlBnO2vQs1uDwQwFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10bbe834c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":98327,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"33a3b66aeadc3f947af1a3e6b40d8dc9","sha1":"571b79088328bec4ff380e3bdbda28ae5e49b676","sha256":"cedc3412d27395c225ff730e22f06a0a579dff72b81b4dcfd1e9cca6633dbd0e","sha512":"3313106d76774c6a8a8235284cddaeea6ba1e92a25d46cc3dfd438c92115bc818ee82004aca8bb2e952b1f1c4efc0b8ac19758cbe5a13d6e2f4f96d8d5f5cbf3","ssdeep":"1536:hwu9CI02UwAnwvb1gxTdIZHolguxq8fyBh9GpNjpCq30H/atJU71cuz:G3JJk09Icuz","tlshash":"bda308da7361b1b593eb12579269c141e3b608887409842cb1b88cdb697d99c13ffff8","first_seen":"2024-10-15T23:35:42.529902Z","last_seen":"2026-06-02T03:03:58.991334Z","times_seen":271,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T17:56:04.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Next.js\r\ncache-control: public, s-maxage=10, stale-while-revalidate=59\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8gItvwXNa3s7B6a27Fa5GuIyBo9lspK1eHy5UaMqhVzfaKebQ90HA2fTcp9LqNTfSlpl0%2BUYWy%2BD9MHmFPLC%2FO9kCNJAGjZgJSdvVmtoW64OtZqwOkSyaEVmHzfV%2F1KMo3gVoh7ZsQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f37f108981f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":60330,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57063)","md5":"813aa4cdef4d6e01aeb9e8d1c92542ae","sha1":"7ec71673930a96362c586a2b29d930b753397554","sha256":"ae0df033cc7585d1599bf0e8a06c01db8c4d2bc782c90a5a46d0d9c2712961eb","sha512":"40acccb54d1be16b255d19eb833c3164a804aaff05bb2dc8873f18ce1e9f14a85df8bc02b6a070e3a917d39c15c552ee658ec8a4a59edbe1a5b2686766976cb9","ssdeep":"1536:jj4ODw3VLoxfLJPnT0DYxk7UWeavoqzSNXNyH34:jjufxfG7","tlshash":"8743093ad4c8295b52d342d1ff72ef4fa6dc50099259ca94ddfdc759e3c28a881b23a0","first_seen":"2026-04-28T17:56:34.198387Z","last_seen":"2026-04-28T18:15:55.875339Z","times_seen":2,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":52,"dns":35,"connect":1,"send":0,"wait":293,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/pWle5KpdXotQDmcC3USNB/_buildManifest.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/pWle5KpdXotQDmcC3USNB/_buildManifest.js HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"3f6-19db97d5ace\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wlvLyPMJXwp12qQNMnrUgxHlBezs3KaxVlA7T%2Bt%2FeXRbXIIxvZPASgxGmu5%2FZlWOnb8pKVByTtUzMcJpRuBOT9TYBc3fxBZIR102nkL1Ug5n9zrJWwOrusTYzwd7thAzAX04NtNMqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10bbe9a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1014,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1014), with no line terminators","md5":"c3697e352eb320db171595739e44db16","sha1":"1fa232963f864bfc26cf938ebbd676e994bf71cc","sha256":"0629156c93fdabaaed279370d92dc4cd3bd3edb6387297dbdad95401d3d16c45","sha512":"a7e95aea1c200e14b6ff2106412b70ecef4603b576471a3ae8b5d4b8eb697d69315f491be6e522c8a6ee532d14494c1cb500f600b0bc9c8f2e085ac283f2663a","ssdeep":"","tlshash":"db117182010ae6191de8ed57373f1363bf52c07a663c0ab68bcc1d6c55904575f7a461","first_seen":"2026-04-28T17:56:34.200327Z","last_seen":"2026-04-28T18:15:55.881553Z","times_seen":2,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"89fc-19db97d5ace\"\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KnHYC%2BH6hvPxn9xuzveqKZ4U9I1qYWP7rJMOUm1QKcT2NG8%2F9eoOOfjaWEFlKKAvSiZ2H1AyOFxMfpRlLiK5reNIN%2FZJrrTr0IdU6WI%2BBaSbfn3iyQWpB0YcUJxPGMMMcTce4Xg90Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10d3be94c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-06-07T00:21:57.731919Z","times_seen":1779,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"89fc-19db97d5ace\"\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KkqqDejNAikHR7ygROZXnPVhMnU8JJ80EvQmTeaBRqrS8EYTObwG0nhImwTYuevTYrdd9ouklFDXIk6UL7m7ysyTV0ShBb7P00dukA1E9Ln%2BzvxX6QAFGWdAnnUGjEQkBmlv527f5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10dad6b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-06-07T00:21:57.731919Z","times_seen":1779,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/uploads/logo_4_6f3287ac80.svg","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /uploads/logo_4_6f3287ac80.svg HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\nlast-modified: Thu, 23 Apr 2026 08:36:41 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tWrQN65EGuiZPwxMNIpFm9L725VnzDOTfb3r1m8vvgmRth6OXN4JftC5RLsXHTmSVaVlkLmBWOOdhh3AHoBiRWMz1AgQAXHVFfCJbiXZmuwUZW9XmJBoKqy8rvD4E6HZNLVD%2Bb%2FzYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f37f10dbdaf4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]}],"data":{"size":4331,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5d5f13be600f02ecc4e989254da4c36c","sha1":"b0759a823c019f31202c23b95019332779819568","sha256":"2bdc5465ccb524d883ed82817342523183bd70b4625e6c5d2b32f4b30d1a702a","sha512":"3928d5c106c04717d2c5f00a54571fd935bd6a6fbe9fc52667d320a168b6c93d9299b76cdaa44b47485deb0d8fa69786927a60fc887dc2547332d5b8e48b431e","ssdeep":"96:8ui5yzYLRkqVww8vOWq3wnA3Q3+ylgubvCR:8uaUkkowwQ30PQ3+/ubvCR","tlshash":"b79163d62b7097dca8c99c9aef251aa8741fd8aae6b6d2c083af4704715b895f744c00","first_seen":"2026-04-28T17:56:34.208303Z","last_seen":"2026-04-28T18:15:55.884026Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/uploads/favicon_V2_10_1352f7e14e.png","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /uploads/favicon_V2_10_1352f7e14e.png HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 298\r\nserver: cloudflare\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Apr 2026 08:36:41 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4vikXqO8YOmDY3Y7qJW2uLaPs1CU1GwFmsWIs5k8IguD1WIPG9Jyd2sMKPXw3xlHtERPl70Owu%2BpXoZ1w3Vkw96pphvjU%2BEkdtUyKyleeNvHigOBzsE6cisrTs7dgdn%2BzO40N5D9oQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10ffd8c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":298,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"314e27bdd505628c5c5dfea88e10952f","sha1":"7d403c90a07bcd8b8bdde65eb1e22a783fe38120","sha256":"8b20685fece204198c561c0bbed083d76d1b846658534dad401e2cf0f09f5561","sha512":"b95ee8d2a296f23d606b0c193bf4deadb57117bb7eadf973aa19055da04f6a29ba87da01c8ff69eed2266d364d3b5fe1e3fbb92f4844bc961c4f72a8a5132ee4","ssdeep":"","tlshash":"c8e07dc5076079a7c0bc08662844551681221e593cc045869fcc85a46823b8419d9713","first_seen":"2026-04-28T17:56:34.210666Z","last_seen":"2026-04-28T18:15:55.88349Z","times_seen":2,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/css/b8b51d0b3a6f4866.css","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/css/b8b51d0b3a6f4866.css HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"1759-19db97d5ace\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nfjof0m2pJKPGu8iJnM9mF91j774eUlDCmwjpyyO3LFumr5cztCSeI2y9h2d5MbUZToqxywXgfBK3IApm5ZuG3lZsxq8WRpqtLMak2UCga4uTiFb1HHaNH7wKosOyDf9T4%2B9hVK6LA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10bae544c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5977,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5977), with no line terminators","md5":"ec84f0a7a2055c970d4f253ab08f0c70","sha1":"c5d3245c2d4085779d873705881d9d7330eeaa06","sha256":"6a0b091cfe2a46fb254fc84ca7036ea34c6c542f83fcaf2fda6b54a828c13fd2","sha512":"195afb216b85d37b9d702a5263bd852f66982769652e1ae73285a60c57ff5aa1a34d949a08723746d58fe3e576aa599e0a493ce98fdb7b767ebe32b94f968ec1","ssdeep":"96:PB5mSJ+MbpDAKneQYX6Jl/0hSvRneZ0jVMR9wfX+9Ecl86djPfUQjSf902G:3mUJbiKneaXshScZXRj1zyCj","tlshash":"4fc1e5b30712ed25d6b26d6744a0ee8ccee4a103de33d5b8f841953ccbd96680270ed8","first_seen":"2025-04-29T14:40:21.754106Z","last_seen":"2026-06-02T03:03:58.987189Z","times_seen":264,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/chunks/framework-10ae643bd7ba2303.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/chunks/framework-10ae643bd7ba2303.js HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"226d5-19db97d5ad2\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aajyv5%2F2P2ys7GzvA7KaLPH%2FjeI2GbDav%2B3%2Bk55xFuTseXT1cG8o3pfY3gzzm4TF0QOXKgAwvkYkgpLf83nj9Q%2FGB%2F8Wf7ws218q%2BPZA9EONvS5Joe4Q2gfE6QLhX0r7NKRtm%2FZuXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10bbe744c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":141013,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65202)","md5":"91eb10e0c5b60f80501425850b7ebf82","sha1":"8344750bc431fbb9e8a5170a82d08c7664639609","sha256":"4c185f58731fad68b5e3ef26e102ce9b3cb56aa8257d39aead25b675152a339b","sha512":"bae75fd66f5ebfd2cd4b3904defe212456502a8cc1ab092c8b58605c6bdeba1d9fc2fa0200ba9a6699df89af547ba3d51b8783dad8061210ad62f240b6ff18dc","ssdeep":"1536:2YjvmNg6kMuR40esfdznYBSq6vvnwGzQ2N0mIQa:Djv4hudzno6nwq5a","tlshash":"33d308e87996f6516ab311a700af2803733d2a1b280c4d60e215fd9e75b841bb17bfdd","first_seen":"2024-08-19T23:48:37.498483Z","last_seen":"2026-06-02T03:03:59.000906Z","times_seen":287,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/chunks/966-2601235ce9ca419d.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/chunks/966-2601235ce9ca419d.js HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"2000-19db97d5ad2\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ijd6ke7R4B94g0XGuKHPqaQQSs885X6wA%2FEBvexkPkRYwpQkN1zbznjFF1pnKhqPXWHRAdOHtruoJ3QneqJRC64YKKeY7%2FAzJSzLceJiuP6%2B2oClIy6SIpk%2F56JvimeLEbqxguJYpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10bbe904c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":8192,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8192), with no line terminators","md5":"3916183d5387e7871a478a2753108c78","sha1":"d6c20ccfb0ab889c2783026c0faba3360097942f","sha256":"5e1379964fee60bce05cde87c8c634a2600371fa60bba4aad38e1ad9b2737bcd","sha512":"d8900dcd34a78a6964c4deb4f6b17e6af8d6120e7081a62a7575c5238d6c1ce129df74a73a69c24b534e4e770ab7e9cb0655a3871da3ea81f188ab9231632edc","ssdeep":"192:vbZDMNJAQDemeCjuUZXXmwEy4HxpEkduQh:v9ba/5z4kkduQh","tlshash":"95f1c6b27782f90623c5d4a4c17ab01fb5ac9c2b5d0b50f8b569cdeea9e015460a0f75","first_seen":"2025-03-27T03:50:55.682304Z","last_seen":"2026-06-02T03:03:59.001644Z","times_seen":269,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/api/report-error","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"POST /api/report-error HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://savaspin-casino3.com/\r\nContent-Type: application/json\r\nContent-Length: 87\r\nOrigin: https://savaspin-casino3.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":87,"data":"{\"text\":\"https://courage-dream.top/m4r2mz?aff=max-chi\",\"domain\":\"savaspin-casino3.com\"}"}},"response":{"raw":"HTTP/3 403 Forbidden\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a5cCA9eVMVtN%2FcxthLALjf5xtwmOYka2n%2FvvUe8bfEwYnA9Pw0ZWdLOtvC6uEbCwzBGFwRq3fcsqzmO%2FsfmZyCxRMOKh0YWGVecPlJ38fhADlw%2FXCwNP3ieGdms2YXrgrwc00vD45w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f37f10fac474c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"9fe3cb2b7313dc79bb477bc8fde184a7","sha1":"4d7b3cb41e90618358d0ee066c45c76227a13747","sha256":"32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864","sha512":"c54ad4f5292784e50b4830a8210b0d4d4ee08b803f4975c9859e637d483b3af38cb0436ac501dea0c73867b1a2c41b39ef2c27dc3fb20f3f27519b719ea743db","ssdeep":"","tlshash":"2cc08c26351e2c0c96a322b402c36a50d092c3304c5a19004600420371c31168ac3315","first_seen":"2023-04-05T07:27:09Z","last_seen":"2026-06-07T04:26:49.347409Z","times_seen":95920,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/css/352d5236847d301d.css","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/css/352d5236847d301d.css HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"644-19db97d5ad2\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zjZLU%2F91TfXBIWvUfq6UQiPBSjmGbj%2BRlMEh4Tzk9745hrVehDskwk93jMZJPgfg2f0A8Pmf4%2F8qhug62YvIYVg9c3zIETZD7Ka%2B2kCYKCwmvsqfg7HSUKXY%2BpkAPdf2cJ69d6smng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10bae584c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1604,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1604), with no line terminators","md5":"d861c7ab0c20ce2a7a153e0a29f1f60a","sha1":"fc6bd3dab3f134d21c58832d9de3f830d62f1ec9","sha256":"4ded20bf9809d391e7e962e1395b3522283ca30f52fe7a86155d1d5b4b3789d5","sha512":"0f8ba9f03c97e33b8a6a9c2cda9bb1a130f8e2b72e70254c382de16ba63d39be6516245f7e740cb52a947fb85c32939217c29b9d982f330bed19c438322db91f","ssdeep":"","tlshash":"0a31bf1195c2af35f9bba4a95fe0367f7816584887fa0ddac2d5f35582ce0d2831c54c","first_seen":"2025-03-27T03:50:55.637284Z","last_seen":"2026-06-02T03:03:58.995344Z","times_seen":268,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/chunks/main-69b63e2e16716907.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/chunks/main-69b63e2e16716907.js HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"17ffa-19db97d5ace\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EzIoXss2%2F9mzL%2FhPYwPgnVBuccX147VFENTzWXFJPvlV%2Br%2BorTbrpzUx%2FExiDVkluHAVs7v3keseIb3lFwA5CyY8RiRB%2FoNougONaaahFhe9lZ7TZbhKwB9FpRLBl2CRuE%2FCfPqUOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10bbe7c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98298,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"88ac3c4d4d8044e62af740c79450b794","sha1":"204aee73c4d44e8b1ee68be86228e42488153b13","sha256":"174c4c9955f35a80888ee630b848e2122b15bf6b47baa1c2d3529e924c79bbb9","sha512":"b079ff7c1455a3fe79f8481578928b8d8fa37701e8b15c9d704a393f97564dd9edd1073e69461673a79313c3a0c9fecfd72c9322bb1324b144a8949ce3ddc1ba","ssdeep":"1536:MpLDGYjwpNLTvpKp0Q78ILsDQs7G5j8SCmaoaYCOU:1pqCQ7fLsDQs74VEOU","tlshash":"15a3f9b676d1f8a213cb41d4883b1006f2761d7e642f6045b3eadcd6b96098e90f2f79","first_seen":"2024-10-15T23:35:42.506487Z","last_seen":"2026-06-02T03:03:59.004649Z","times_seen":271,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/pWle5KpdXotQDmcC3USNB/_ssgManifest.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/pWle5KpdXotQDmcC3USNB/_ssgManifest.js HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"4d-19db97d5ace\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5FrLUFrE7sQB7MyGqyU64ra%2FOLmNGI5EdiiZqWeckBuCwnYOMzFnYFnCSvMCzGskKQ%2FaaRzMza14r3Q354Jh607irnLn6ts%2FVck0PU1td3c0ZX1NzCy5f1BEXnd4QjGTR1k4ksKG6Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10bbe9c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-06-07T05:13:47.582035Z","times_seen":232243,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"89fc-19db97d5ace\"\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1i8uPD8COeKg3yzOJ23%2FrgD2eeepYFUJwmZ9eVbbb07yUQKctT55v6MADjpFfdH96rK5vnMKh0l84E0V74C0K3dPQn0VVqpUG3%2FSMdWkdXex%2BhEEm3C%2FTFx2H43RAOYLTmKrxmoQ5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10d5c6e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-06-07T00:21:57.731919Z","times_seen":1779,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/media/c1b11e140b58cf5a-s.p.woff2","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/media/c1b11e140b58cf5a-s.p.woff2 HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://savaspin-casino3.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15108\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"3b04-19db97d5ace\"\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=57vETAeJxxlqr%2FrZYsn3I4iQsySekpPAxW2FgEiVRKoWNSZXM59QOgVcGyIXoBHPFTSEfe7f6eWs3fZ9%2FDg4qfE%2FoYEZcqN%2BLVaoWr7LUMoY5TyJicFYaka8Tej1Pr0L721yWXKI%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10bae424c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":15108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15108, version 1.0","md5":"368f3e99ee207a4a2e2584eba7d3c82f","sha1":"9f907e41605807c4bf4f960745698b1e430a716b","sha256":"963fc62d2cf3e59e6f338db71b85b5ea86dd009fff859116d51a31a9b98d1d30","sha512":"2eb180c4cba21fa77eb89d801d6e55fd10acebe3a25e99228e3ca5861447a393aa60420a21f3cd573cedf5107dd391b5e5e1fcf5e09e799f2cbe7a6826eda2b2","ssdeep":"384:VHJTAkiZnTfVU4LSYdh7Db82J2Werb7VVX0m1+cz7aNw:VpTA9xTfVOA5o0erb7YmcGaNw","tlshash":"c562e16e92dc05534d2bd6f84eebd8cc7bd0f8548133af233905a62a854b810f218be1","first_seen":"2025-06-16T02:04:53.862041Z","last_seen":"2026-06-06T05:47:14.560815Z","times_seen":356,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/media/9f0283fb0a17d415-s.p.woff2","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/media/9f0283fb0a17d415-s.p.woff2 HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://savaspin-casino3.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 21336\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"5358-19db97d5ace\"\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e3nM9ej4PyyCVjNg9dqMV3Qmoad8FifHLCuDIdw1NkxXsTm6%2BjwMAVa8jWoAfULrebBXFtnoRSxB%2FkRGqqkUEyeceIc3RNejJ4zBEAH%2FFvHeowKZBtAHevOm7qQ7aeuEWrILKj3bmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10bae504c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":21336,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21336, version 1.0","md5":"0e35c6fd40c2ab9ef2d5b97baeca2f2d","sha1":"781b1852315aad9bcf111a3017ca734ab6dcd6b9","sha256":"07a6f958db51de42694ef87e2c01b9cf5ee415047b2fd17ab1c313c772a6804e","sha512":"7f76da76841e131252106ff1d70e22908753364d612e9b807d9332f89b13c759b1b9d05ac5983055b48bf99b441a2a07301db2c93fbb79323e492c238df1d7a9","ssdeep":"384:h9WnIiwq4BeuEc4AZTT4ZWgC9UCzpulxbC9WzQFvCY98IW1NoTXVY23sC6:LWIix4BayT0ZMUQpulJCuQF6IW1NgP3O","tlshash":"4ba2e1080f4b3a18eda72c8972acb57498741c208f8ee2770cd42859365e652fe3fe57","first_seen":"2025-10-20T15:26:06.98799Z","last_seen":"2026-06-04T14:06:59.774258Z","times_seen":269,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/chunks/546.767fc6323cdbff4e.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/chunks/546.767fc6323cdbff4e.js HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"948-19db97d5ad2\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0CtH26AmBryAEvm3yOBwmv4BHUinSITE%2FIyIvZeIm4uZ3ZEFx5FmvD6CWC0LeKHH1xNNRuedbhYCJ9hfuM7GqdPrEv6CgUtAdzJhD6PmgS8u6aHFevBN95j1xQvjGrb%2BpyiUCDnp5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10bae6f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2376,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2376), with no line terminators","md5":"3dbc38029da6bf4e8577f4ea86070313","sha1":"ca82c27f54ccb29ac2c9bafc04c6daf8bb697fe4","sha256":"cf8e5651bbd6a6c3e0b4ead08245c2038a435f51aebfedbeda73c51e16f8ebb8","sha512":"d111610f37cdf70f5536f4072a26b0793c7c03d0255cc14ffa6a791132b186d7947a57b54f5359596d682538075e3fb42c2bee26aa8690b2b7fa14852f3798fc","ssdeep":"","tlshash":"e2410244f0d5ff60a7bfb0f8866b5466a22f294897980c92f3e2ec4d145028c63b36dd","first_seen":"2025-03-27T03:50:55.681244Z","last_seen":"2026-06-02T03:03:58.995982Z","times_seen":268,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/chunks/59-882425d0ee3ddb9c.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/chunks/59-882425d0ee3ddb9c.js HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"39ee-19db97d5ad2\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jucz8gKelHB9MOdreAm2H07aojc5OpAi3%2B149wzhqYgonzQHt94SpU75YeS%2Fm138SRFbo27KbSImRdtdGT%2BGNi4yXLJQuh9P1L8pm%2Fl1HovUkIRGbkeVopUhXPEdDCE3n3PM1YqjWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10bbe894c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14830,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14830), with no line terminators","md5":"22166e356b0b4febfa952702f5140f9a","sha1":"9668b67c36bd6b43ba30205ca522cd66d8bc75d6","sha256":"50de8542271da522d66b8c565c4c7d599030087ff57b01344f03752f34e3f726","sha512":"8d26026cabd8d3822dc613c9a6089eff0113646dd7d095a902e664b06e12e4aee38a95181416212a02d0a8b41b080449bbd1f362a04f4fe2824dfbd30e29eb5f","ssdeep":"192:CzBOuoWZy1D5lYd3uP4h1LlhQs1fqdp40aHanY7mF9:CzBO71FP4/ZhQtp4rHGx","tlshash":"c562c46d49864dae9abd84e8c427410cd3eca606b254bc60e3b6851371dbedc71b37cb","first_seen":"2026-04-28T17:56:34.220396Z","last_seen":"2026-04-28T18:15:55.885739Z","times_seen":2,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/static/chunks/pages/index-67c545f8362cb3f5.js","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/static/chunks/pages/index-67c545f8362cb3f5.js HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 23 Apr 2026 08:38:13 GMT\r\netag: W/\"33c-19db97d5ace\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aLjogp7bJAcPR9dc16%2Fc2Z5B3qbFXOoUIPy4cv3t8xlx6%2B14lGnkran1rp1K8c3O7ut3XnACb1vbzNkPisqQcDzoNV6CpLLGHRG8XnBDYZYRyAaQ2aprQOVQvDjui2geKZR68yalCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10bbe964c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":828,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (828), with no line terminators","md5":"045dc07f95969c2df33cd4a214e83717","sha1":"b89af6510652f59367921b09cf4a68bebdb27dcf","sha256":"9d8c30be80230957002ab1fdbc8babe834fdefd49204879c1e609a5491fa05aa","sha512":"76205eb0e13934fa7b15710243ed9e6da746e20ff36b77dbed304ce80c27d6c9bb9ee005c6be3125aec1b75b9ebde613fe9d54dafae5eea366e872085eb026f7","ssdeep":"","tlshash":"18011298b493be086b2750f8462f310e63be795e153e49a0b25284c83af231d1a91fcd","first_seen":"2026-01-21T17:57:31.276517Z","last_seen":"2026-06-02T03:03:59.017415Z","times_seen":251,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"savaspin-casino3.com/_next/image/?url=https%3A%2F%2Fsavaspin-casino3.com%2Fuploads%2Fjs2082_ce436af605.png\u0026w=750\u0026q=75","fqdn":"savaspin-casino3.com","domain":"savaspin-casino3.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://savaspin-casino3.com/","date":"2026-04-28T17:56:05.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"savaspin-casino3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Apr 2026 07:30:41 GMT","end":"Wed, 22 Jul 2026 07:30:40 GMT"},"fingerprint":{"sha1":"D3:0A:51:75:44:3B:4D:B5:64:26:2A:CC:6C:F7:E4:9E:85:21:2D:77","sha256":"2D:06:A1:3D:15:1B:7D:AF:F1:D8:00:5F:40:37:F9:B7:79:4C:4E:3F:AE:83:19:11:43:2D:5C:5B:32:7F:16:CD"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fsavaspin-casino3.com%2Fuploads%2Fjs2082_ce436af605.png\u0026w=750\u0026q=75 HTTP/1.1\r\nHost: savaspin-casino3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savaspin-casino3.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 17:56:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41832\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: 2wxlSSi7tHNPukVXFG2a9S9hFg+MY8qbl+zjUkH31Us=\r\ncontent-disposition: inline; filename=\"js2082_ce436af605.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vL1887Q%2Bay8qGcXdiK%2FnHWE%2FwR6w5ur9hGfsTGug6xR8nF4o2585L2CjM4%2FjP7sVd2HWhyWW0%2FpwdCXLB9b5ylCcSUeZJZ6qgwmkSZh2v4o%2BXpoY0HM%2B62VqBjlrhxBJhXSu4wf0TA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37f10bbea04c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41832,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1eabeb8b86ebd89029420a070da126a4","sha1":"34fd20a173db796876bc4465f55cd251237190e8","sha256":"db0c654928bbb4734fba4557146d9af52f61160f8c63ca9b97ece35241f7d54b","sha512":"ffbe89dde7806584167bb2c3d1f53ef838379f0c5ef8c9585eb1f58ba2df6897a3352454a8a99fd37a13f97354071e6940d05dc2da5b6df2869598f47627d07b","ssdeep":"768:B606ezSc6abGabc95CZHW0BUsmRv+ECBRxofa9NOKU3x72Xwc4UD:B6mzS5Labc95820G7Cto+srB7Qw1UD","tlshash":"2313f181c6a1f6d6b8b84e3c4137d52efc6816c81e661576bedfc88daff440630606e8","first_seen":"2026-04-28T17:56:34.222995Z","last_seen":"2026-04-28T18:15:55.874224Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"savaspin-casino3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
